From f8ad3d5aee37c6ef1415700d3121ee406c6456ed Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 5 Jul 2024 20:53:56 +0000 Subject: [PATCH] Publish Advisories GHSA-p343-9qwp-pqxv GHSA-xmmx-7jpf-fx42 --- .../GHSA-p343-9qwp-pqxv.json | 9 +++++--- .../GHSA-xmmx-7jpf-fx42.json | 21 ++++++++++++++++++- 2 files changed, 26 insertions(+), 4 deletions(-) diff --git a/advisories/github-reviewed/2024/05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json b/advisories/github-reviewed/2024/05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json index ac0bd7fb28d..64e67be682d 100644 --- a/advisories/github-reviewed/2024/05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json +++ b/advisories/github-reviewed/2024/05/GHSA-p343-9qwp-pqxv/GHSA-p343-9qwp-pqxv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-p343-9qwp-pqxv", - "modified": "2024-06-05T21:54:06Z", + "modified": "2024-07-05T20:53:14Z", "published": "2024-05-07T18:30:34Z", "aliases": [ "CVE-2024-34517" @@ -9,7 +9,10 @@ "summary": "Neo4j Cypher component mishandles IMMUTABLE privileges", "details": "The Cypher component in Neo4j before 5.19.0 mishandles IMMUTABLE privileges.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -62,7 +65,7 @@ "cwe_ids": [ "CWE-269" ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-05-07T19:59:41Z", "nvd_published_at": "2024-05-07T18:15:08Z" diff --git a/advisories/github-reviewed/2024/06/GHSA-xmmx-7jpf-fx42/GHSA-xmmx-7jpf-fx42.json b/advisories/github-reviewed/2024/06/GHSA-xmmx-7jpf-fx42/GHSA-xmmx-7jpf-fx42.json index bae6b99c627..13c0c670c44 100644 --- a/advisories/github-reviewed/2024/06/GHSA-xmmx-7jpf-fx42/GHSA-xmmx-7jpf-fx42.json +++ b/advisories/github-reviewed/2024/06/GHSA-xmmx-7jpf-fx42/GHSA-xmmx-7jpf-fx42.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xmmx-7jpf-fx42", - "modified": "2024-06-10T18:39:03Z", + "modified": "2024-07-05T20:52:27Z", "published": "2024-06-10T18:39:03Z", "aliases": [ @@ -30,6 +30,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/moby/moby" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "20.10.11" + } + ] + } + ] } ], "references": [