From f7128d89cd659b13d1dc13003db7035c3f37ef39 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 3 Sep 2024 21:54:53 +0000 Subject: [PATCH] Publish Advisories GHSA-6c5p-j8vq-pqhj GHSA-pv4p-cwwg-4rph --- .../2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json | 6 +++++- .../2024/08/GHSA-pv4p-cwwg-4rph/GHSA-pv4p-cwwg-4rph.json | 6 +++++- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json b/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json index cc4200cf952..c71eff19292 100644 --- a/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json +++ b/advisories/github-reviewed/2024/04/GHSA-6c5p-j8vq-pqhj/GHSA-6c5p-j8vq-pqhj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6c5p-j8vq-pqhj", - "modified": "2024-08-02T15:45:23Z", + "modified": "2024-09-03T21:53:28Z", "published": "2024-04-26T00:30:35Z", "aliases": [ "CVE-2024-33663" @@ -51,6 +51,10 @@ { "type": "PACKAGE", "url": "https://github.com/mpdavis/python-jose" + }, + { + "type": "WEB", + "url": "https://www.vicarius.io/vsociety/posts/algorithm-confusion-in-python-jose-cve-2024-33663" } ], "database_specific": { diff --git a/advisories/github-reviewed/2024/08/GHSA-pv4p-cwwg-4rph/GHSA-pv4p-cwwg-4rph.json b/advisories/github-reviewed/2024/08/GHSA-pv4p-cwwg-4rph/GHSA-pv4p-cwwg-4rph.json index 4c9a25fe13b..63b4cf5c7b0 100644 --- a/advisories/github-reviewed/2024/08/GHSA-pv4p-cwwg-4rph/GHSA-pv4p-cwwg-4rph.json +++ b/advisories/github-reviewed/2024/08/GHSA-pv4p-cwwg-4rph/GHSA-pv4p-cwwg-4rph.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pv4p-cwwg-4rph", - "modified": "2024-08-07T19:02:40Z", + "modified": "2024-09-03T21:53:30Z", "published": "2024-08-07T15:30:42Z", "aliases": [ "CVE-2024-42005" @@ -83,6 +83,10 @@ "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-70.yaml" }, + { + "type": "WEB", + "url": "https://groups.google.com/forum/#%21forum/django-announce" + }, { "type": "WEB", "url": "https://www.djangoproject.com/weblog/2024/aug/06/security-releases"