diff --git a/advisories/github-reviewed/2023/12/GHSA-h63j-xqx6-w58r/GHSA-h63j-xqx6-w58r.json b/advisories/github-reviewed/2023/12/GHSA-h63j-xqx6-w58r/GHSA-h63j-xqx6-w58r.json index c9f017112cc..7bc5dc33600 100644 --- a/advisories/github-reviewed/2023/12/GHSA-h63j-xqx6-w58r/GHSA-h63j-xqx6-w58r.json +++ b/advisories/github-reviewed/2023/12/GHSA-h63j-xqx6-w58r/GHSA-h63j-xqx6-w58r.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-h63j-xqx6-w58r", - "modified": "2023-12-28T16:41:04Z", + "modified": "2024-01-08T15:54:10Z", "published": "2023-12-27T21:31:01Z", "aliases": [ "CVE-2023-51079" @@ -9,7 +9,10 @@ "summary": "mvel2 TimeOut error exists in the ParseTools.subCompileExpression method", "details": "A TimeOut error exists in the ParseTools.subCompileExpression method in mvel2 v2.5.0 Final.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } ], "affected": [ { diff --git a/advisories/github-reviewed/2023/12/GHSA-rcvr-8whx-3m5p/GHSA-rcvr-8whx-3m5p.json b/advisories/github-reviewed/2023/12/GHSA-rcvr-8whx-3m5p/GHSA-rcvr-8whx-3m5p.json index e7c7934b920..b1362bfcba5 100644 --- a/advisories/github-reviewed/2023/12/GHSA-rcvr-8whx-3m5p/GHSA-rcvr-8whx-3m5p.json +++ b/advisories/github-reviewed/2023/12/GHSA-rcvr-8whx-3m5p/GHSA-rcvr-8whx-3m5p.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rcvr-8whx-3m5p", - "modified": "2024-01-03T21:42:34Z", + "modified": "2024-01-08T15:55:06Z", "published": "2023-12-30T18:30:35Z", "aliases": [ "CVE-2023-50550" @@ -9,7 +9,10 @@ "summary": "Layui cross-site scripting (XSS) vulnerability", "details": "layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ { @@ -55,7 +58,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": true,