From fa4d2e53833b336fb2cba48697ccf22f18ab4b10 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 18 Nov 2024 22:33:22 +0000 Subject: [PATCH] Publish Advisories GHSA-www2-v7xj-xrc6 GHSA-33c7-2mpw-hg34 GHSA-f97h-2pfx-f59f --- .../GHSA-www2-v7xj-xrc6.json | 22 +++++++++---------- .../GHSA-33c7-2mpw-hg34.json | 10 ++++++++- .../GHSA-f97h-2pfx-f59f.json | 10 ++++++++- 3 files changed, 29 insertions(+), 13 deletions(-) diff --git a/advisories/github-reviewed/2018/12/GHSA-www2-v7xj-xrc6/GHSA-www2-v7xj-xrc6.json b/advisories/github-reviewed/2018/12/GHSA-www2-v7xj-xrc6/GHSA-www2-v7xj-xrc6.json index 8b214021c0c..ac03d1efb1a 100644 --- a/advisories/github-reviewed/2018/12/GHSA-www2-v7xj-xrc6/GHSA-www2-v7xj-xrc6.json +++ b/advisories/github-reviewed/2018/12/GHSA-www2-v7xj-xrc6/GHSA-www2-v7xj-xrc6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-www2-v7xj-xrc6", - "modified": "2022-09-14T22:10:48Z", + "modified": "2024-11-18T22:31:17Z", "published": "2018-12-12T15:52:07Z", "aliases": [ "CVE-2018-20060" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -20,14 +24,6 @@ "ecosystem": "PyPI", "name": "urllib3" }, - "ecosystem_specific": { - "affected_functions": [ - "urllib3.poolmanager.PoolManager.urlopen", - "urllib3.util.retry.Retry", - "urllib3.util.retry.Retry.__init__", - "urllib3.util.retry.Retry.new" - ] - }, "ranges": [ { "type": "ECOSYSTEM", @@ -69,8 +65,12 @@ "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649153" }, { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-www2-v7xj-xrc6" + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2018-32.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/urllib3/urllib3" }, { "type": "WEB", diff --git a/advisories/github-reviewed/2020/07/GHSA-33c7-2mpw-hg34/GHSA-33c7-2mpw-hg34.json b/advisories/github-reviewed/2020/07/GHSA-33c7-2mpw-hg34/GHSA-33c7-2mpw-hg34.json index fd20656dbf6..d7fe93896a9 100644 --- a/advisories/github-reviewed/2020/07/GHSA-33c7-2mpw-hg34/GHSA-33c7-2mpw-hg34.json +++ b/advisories/github-reviewed/2020/07/GHSA-33c7-2mpw-hg34/GHSA-33c7-2mpw-hg34.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-33c7-2mpw-hg34", - "modified": "2023-10-02T18:44:26Z", + "modified": "2024-11-18T22:32:53Z", "published": "2020-07-29T18:07:16Z", "aliases": [ "CVE-2020-7694" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -52,6 +56,10 @@ "type": "PACKAGE", "url": "https://github.com/encode/uvicorn" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/uvicorn/PYSEC-2020-150.yaml" + }, { "type": "WEB", "url": "https://snyk.io/vuln/SNYK-PYTHON-UVICORN-575560" diff --git a/advisories/github-reviewed/2020/07/GHSA-f97h-2pfx-f59f/GHSA-f97h-2pfx-f59f.json b/advisories/github-reviewed/2020/07/GHSA-f97h-2pfx-f59f/GHSA-f97h-2pfx-f59f.json index c748e7bdd77..a31ca7fcc5a 100644 --- a/advisories/github-reviewed/2020/07/GHSA-f97h-2pfx-f59f/GHSA-f97h-2pfx-f59f.json +++ b/advisories/github-reviewed/2020/07/GHSA-f97h-2pfx-f59f/GHSA-f97h-2pfx-f59f.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f97h-2pfx-f59f", - "modified": "2023-02-01T09:16:37Z", + "modified": "2024-11-18T22:31:58Z", "published": "2020-07-29T18:07:20Z", "aliases": [ "CVE-2020-7695" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -44,6 +48,10 @@ "type": "PACKAGE", "url": "https://github.com/encode/uvicorn" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/uvicorn/PYSEC-2020-151.yaml" + }, { "type": "WEB", "url": "https://snyk.io/vuln/SNYK-PYTHON-UVICORN-570471"