netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-hggx-3h72-49ww
GHSA-8843-m7mw-mxqm
GHSA-4cvp-hr63-822j
GHSA-66m2-493m-crh2
GHSA-cgwc-qvrx-rf7f
GHSA-pp84-v3mw-gg4w
This commit is contained in:
advisory-database[bot]
2024-10-09 19:44:50 +00:00
parent 0db55cf790
commit fc18fd0937
6 changed files with 31 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2018/07/GHSA-hggx-3h72-49ww/GHSA-hggx-3h72-49ww.json
+10 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hggx-3h72-49ww",
"modified": "2023-09-05T09:22:11Z",
"modified": "2024-10-09T19:42:52Z",
"published": "2018-07-24T20:03:51Z",
"aliases": [
"CVE-2016-0740"
@@ -12,13 +12,17 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "Pillow"
"name": "pillow"
},
"ranges": [
{
@@ -48,6 +52,10 @@
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-hggx-3h72-49ww"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2016-5.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/python-pillow/Pillow"
advisories/github-reviewed/2020/07/GHSA-8843-m7mw-mxqm/GHSA-8843-m7mw-mxqm.json
+14 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8843-m7mw-mxqm",
"modified": "2023-09-05T09:17:03Z",
"modified": "2024-10-09T19:44:21Z",
"published": "2020-07-27T21:52:41Z",
"aliases": [
"CVE-2020-10379"
@@ -12,13 +12,17 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "Pillow"
"name": "pillow"
},
"ranges": [
{
@@ -52,6 +56,14 @@
"type": "WEB",
"url": "https://github.com/python-pillow/Pillow/commit/46f4a349b88915787fea3fb91348bb1665831bbb#diff-9478f2787e3ae9668a15123b165c23ac"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-8843-m7mw-mxqm"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2020-78.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/python-pillow/Pillow"
advisories/github-reviewed/2023/05/GHSA-4cvp-hr63-822j/GHSA-4cvp-hr63-822j.json
+2 -1
View File
@@ -82,7 +82,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
"CWE-200",
"CWE-209"
],
"severity": "MODERATE",
"github_reviewed": true,
advisories/github-reviewed/2023/09/GHSA-66m2-493m-crh2/GHSA-66m2-493m-crh2.json
+2 -1
View File
@@ -74,7 +74,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": true,
advisories/github-reviewed/2024/06/GHSA-cgwc-qvrx-rf7f/GHSA-cgwc-qvrx-rf7f.json
+1
View File
@@ -51,6 +51,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-913",
"CWE-915"
],
"severity": "CRITICAL",
advisories/github-reviewed/2024/08/GHSA-pp84-v3mw-gg4w/GHSA-pp84-v3mw-gg4w.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pp84-v3mw-gg4w",
"modified": "2024-10-07T16:50:25Z",
"modified": "2024-10-09T19:42:44Z",
"published": "2024-08-27T19:50:54Z",
"aliases": [
],
"summary": "Taipy 3.1.1 affected by CVEs on flask-core and pymongo",
"details": "### Summary\nCVEs on latest 3.1.1\n\n### Details\n## SECURITY ISSUES\n### CVE-2024-1681: flask-core <4.0.1 \nlatest version of taipi 3.1.1 needs <=4.0.0 \n\n### CVE-2024-5629: pymongo <4.6.3 \n#latest version of taipi 3.1.1 needs <=4.6.1 \n\n### PoC\nplease upgrade to these versions \n\n### Impact\npre-commit breaks\n",
"details": "### Summary\nCVEs on 3.1.1\n\nFixed on patch versions: >=3.1.2 \nand on major releases: >=4.0.0\n\n### Details\n\n### CVE-2024-1681: flask-core <4.0.1 \nlatest version of taipy 3.1.1 needs <=4.0.0 \n\n### CVE-2024-5629: pymongo <4.6.3 \nlatest version of taipy 3.1.1 needs <=4.6.1 \n\n### PoC\nplease upgrade to these versions \n\n### Impact\npre-commit breaks",
"severity": [
],