From fa1479e00172a72d19c0c07bbbea9a0479cd6454 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 18 Feb 2025 22:48:04 +0000 Subject: [PATCH] Publish GHSA-cjwg-qfpm-7377 --- .../04/GHSA-cjwg-qfpm-7377/GHSA-cjwg-qfpm-7377.json | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2024/04/GHSA-cjwg-qfpm-7377/GHSA-cjwg-qfpm-7377.json b/advisories/github-reviewed/2024/04/GHSA-cjwg-qfpm-7377/GHSA-cjwg-qfpm-7377.json index 8ad37446881..f727395b4c8 100644 --- a/advisories/github-reviewed/2024/04/GHSA-cjwg-qfpm-7377/GHSA-cjwg-qfpm-7377.json +++ b/advisories/github-reviewed/2024/04/GHSA-cjwg-qfpm-7377/GHSA-cjwg-qfpm-7377.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-cjwg-qfpm-7377", - "modified": "2024-09-05T18:37:58Z", + "modified": "2025-02-18T22:46:48Z", "published": "2024-04-26T00:30:35Z", "aliases": [ "CVE-2024-33664" @@ -28,7 +28,7 @@ "introduced": "0" }, { - "last_affected": "3.3.0" + "fixed": "3.4.0" } ] } @@ -52,6 +52,14 @@ "type": "PACKAGE", "url": "https://github.com/mpdavis/python-jose" }, + { + "type": "WEB", + "url": "https://github.com/mpdavis/python-jose/releases/tag/3.4.0" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/python-jose/PYSEC-2024-233.yaml" + }, { "type": "WEB", "url": "https://www.vicarius.io/vsociety/posts/jwt-bomb-in-python-jose-cve-2024-33664"