From fdc565967cda65eea49596d5a84d426eec1f3a1a Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 30 Jul 2024 21:28:44 +0000
Subject: [PATCH] Publish Advisories

GHSA-j8w6-2r9h-cxhj
GHSA-7fcr-8qw6-92fr
---
 .../GHSA-j8w6-2r9h-cxhj.json                  | 34 +++++++++++--
 .../GHSA-7fcr-8qw6-92fr.json                  | 50 +++++++++----------
 2 files changed, 54 insertions(+), 30 deletions(-)

diff --git a/advisories/github-reviewed/2023/12/GHSA-j8w6-2r9h-cxhj/GHSA-j8w6-2r9h-cxhj.json b/advisories/github-reviewed/2023/12/GHSA-j8w6-2r9h-cxhj/GHSA-j8w6-2r9h-cxhj.json
index 4d9c3b76e85..d689b0fe5e0 100644
--- a/advisories/github-reviewed/2023/12/GHSA-j8w6-2r9h-cxhj/GHSA-j8w6-2r9h-cxhj.json
+++ b/advisories/github-reviewed/2023/12/GHSA-j8w6-2r9h-cxhj/GHSA-j8w6-2r9h-cxhj.json
@@ -1,15 +1,22 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j8w6-2r9h-cxhj",
-  "modified": "2023-12-15T04:02:30Z",
+  "modified": "2024-07-30T21:25:24Z",
   "published": "2023-12-15T04:02:30Z",
   "aliases": [
-
+    "CVE-2023-50731"
   ],
   "summary": "GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182 ",
   "details": "### Impact\n\nIssue: Arbitrary file write in file.py (GHSL-2023-183)\n\n### Patches\n\nUse mindsdb staging branch or v23.11.4.1",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -40,16 +47,33 @@
       "type": "WEB",
       "url": "https://github.com/mindsdb/mindsdb/security/advisories/GHSA-j8w6-2r9h-cxhj"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50731"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/mindsdb/mindsdb"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mindsdb/mindsdb/blob/1821da719f34c022890c9ff25810218e71c5abbc/mindsdb/api/http/namespaces/file.py#L122-L125"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mindsdb/mindsdb/blob/1821da719f34c022890c9ff25810218e71c5abbc/mindsdb/api/http/namespaces/file.py#L138"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://securitylab.github.com/advisories/GHSL-2023-182_GHSL-2023-184_mindsdb_mindsdb"
     }
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-22",
+      "CWE-918"
     ],
-    "severity": "MODERATE",
+    "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2023-12-15T04:02:30Z",
     "nvd_published_at": null
diff --git a/advisories/github-reviewed/2024/05/GHSA-7fcr-8qw6-92fr/GHSA-7fcr-8qw6-92fr.json b/advisories/github-reviewed/2024/05/GHSA-7fcr-8qw6-92fr/GHSA-7fcr-8qw6-92fr.json
index 057edfbb7c9..f0c4564698e 100644
--- a/advisories/github-reviewed/2024/05/GHSA-7fcr-8qw6-92fr/GHSA-7fcr-8qw6-92fr.json
+++ b/advisories/github-reviewed/2024/05/GHSA-7fcr-8qw6-92fr/GHSA-7fcr-8qw6-92fr.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7fcr-8qw6-92fr",
-  "modified": "2024-05-15T18:38:24Z",
+  "modified": "2024-07-30T21:26:08Z",
   "published": "2024-05-14T20:30:57Z",
   "aliases": [
     "CVE-2024-30045"
@@ -18,7 +18,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-arm"
+        "name": "Microsoft.NETCore.App.Runtime.linux-arm"
       },
       "ranges": [
         {
@@ -40,7 +40,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-arm64"
+        "name": "Microsoft.NETCore.App.Runtime.linux-arm64"
       },
       "ranges": [
         {
@@ -62,7 +62,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-arm"
+        "name": "Microsoft.NETCore.App.Runtime.linux-arm"
       },
       "ranges": [
         {
@@ -84,7 +84,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-arm64"
+        "name": "Microsoft.NETCore.App.Runtime.linux-arm64"
       },
       "ranges": [
         {
@@ -106,7 +106,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-musl-arm"
+        "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm"
       },
       "ranges": [
         {
@@ -128,7 +128,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-musl-arm64"
+        "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm64"
       },
       "ranges": [
         {
@@ -150,7 +150,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-musl-x64"
+        "name": "Microsoft.NETCore.App.Runtime.linux-musl-x64"
       },
       "ranges": [
         {
@@ -172,7 +172,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-musl-x64"
+        "name": "Microsoft.NETCore.App.Runtime.linux-musl-x64"
       },
       "ranges": [
         {
@@ -194,7 +194,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-x64"
+        "name": "Microsoft.NETCore.App.Runtime.linux-x64"
       },
       "ranges": [
         {
@@ -216,7 +216,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-x64"
+        "name": "Microsoft.NETCore.App.Runtime.linux-x64"
       },
       "ranges": [
         {
@@ -238,7 +238,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.osx-arm64"
+        "name": "Microsoft.NETCore.App.Runtime.osx-arm64"
       },
       "ranges": [
         {
@@ -260,7 +260,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.osx-arm64"
+        "name": "Microsoft.NETCore.App.Runtime.osx-arm64"
       },
       "ranges": [
         {
@@ -282,7 +282,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.osx-x64"
+        "name": "Microsoft.NETCore.App.Runtime.osx-x64"
       },
       "ranges": [
         {
@@ -304,7 +304,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.osx-x64"
+        "name": "Microsoft.NETCore.App.Runtime.osx-x64"
       },
       "ranges": [
         {
@@ -326,7 +326,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.win-arm"
+        "name": "Microsoft.NETCore.App.Runtime.win-arm"
       },
       "ranges": [
         {
@@ -348,7 +348,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.win-arm"
+        "name": "Microsoft.NETCore.App.Runtime.win-arm"
       },
       "ranges": [
         {
@@ -370,7 +370,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.win-arm64"
+        "name": "Microsoft.NETCore.App.Runtime.win-arm64"
       },
       "ranges": [
         {
@@ -392,7 +392,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.win-arm64"
+        "name": "Microsoft.NETCore.App.Runtime.win-arm64"
       },
       "ranges": [
         {
@@ -414,7 +414,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.win-x64"
+        "name": "Microsoft.NETCore.App.Runtime.win-x64"
       },
       "ranges": [
         {
@@ -436,7 +436,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.win-x64"
+        "name": "Microsoft.NETCore.App.Runtime.win-x64"
       },
       "ranges": [
         {
@@ -458,7 +458,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.win-x86"
+        "name": "Microsoft.NETCore.App.Runtime.win-x86"
       },
       "ranges": [
         {
@@ -480,7 +480,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.win-x86"
+        "name": "Microsoft.NETCore.App.Runtime.win-x86"
       },
       "ranges": [
         {
@@ -502,7 +502,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-musl-arm"
+        "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm"
       },
       "ranges": [
         {
@@ -524,7 +524,7 @@
     {
       "package": {
         "ecosystem": "NuGet",
-        "name": "Microsoft.NetCore.App.Runtime.linux-musl-arm64"
+        "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm64"
       },
       "ranges": [
         {