From feea379101a381bf2d0989417f1afd817f7cc529 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 13 Nov 2024 22:49:35 +0000 Subject: [PATCH] Publish Advisories GHSA-77gp-3h4r-6428 GHSA-8cxv-76p7-jxwr GHSA-c94w-c95p-phf8 GHSA-q85f-69q7-55h2 GHSA-rww7-2gpw-fv6j GHSA-wm93-f238-7v37 --- .../GHSA-77gp-3h4r-6428/GHSA-77gp-3h4r-6428.json | 14 +++++++++++++- .../GHSA-8cxv-76p7-jxwr/GHSA-8cxv-76p7-jxwr.json | 16 ++++++++++++++-- .../GHSA-c94w-c95p-phf8/GHSA-c94w-c95p-phf8.json | 16 ++++++++++++++-- .../GHSA-q85f-69q7-55h2/GHSA-q85f-69q7-55h2.json | 14 +++++++++++++- .../GHSA-rww7-2gpw-fv6j/GHSA-rww7-2gpw-fv6j.json | 16 ++++++++++++++-- .../GHSA-wm93-f238-7v37/GHSA-wm93-f238-7v37.json | 16 ++++++++++++++-- 6 files changed, 82 insertions(+), 10 deletions(-) diff --git a/advisories/github-reviewed/2022/02/GHSA-77gp-3h4r-6428/GHSA-77gp-3h4r-6428.json b/advisories/github-reviewed/2022/02/GHSA-77gp-3h4r-6428/GHSA-77gp-3h4r-6428.json index bfd156d82d8..af51594206a 100644 --- a/advisories/github-reviewed/2022/02/GHSA-77gp-3h4r-6428/GHSA-77gp-3h4r-6428.json +++ b/advisories/github-reviewed/2022/02/GHSA-77gp-3h4r-6428/GHSA-77gp-3h4r-6428.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-77gp-3h4r-6428", - "modified": "2022-02-11T20:46:42Z", + "modified": "2024-11-13T22:47:49Z", "published": "2022-02-09T23:25:40Z", "aliases": [ "CVE-2022-23574" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -209,6 +213,14 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/0657c83d08845cc434175934c642299de2c0f042" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-83.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-138.yaml" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow" diff --git a/advisories/github-reviewed/2022/02/GHSA-8cxv-76p7-jxwr/GHSA-8cxv-76p7-jxwr.json b/advisories/github-reviewed/2022/02/GHSA-8cxv-76p7-jxwr/GHSA-8cxv-76p7-jxwr.json index e95434e8632..436742d651c 100644 --- a/advisories/github-reviewed/2022/02/GHSA-8cxv-76p7-jxwr/GHSA-8cxv-76p7-jxwr.json +++ b/advisories/github-reviewed/2022/02/GHSA-8cxv-76p7-jxwr/GHSA-8cxv-76p7-jxwr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8cxv-76p7-jxwr", - "modified": "2022-02-11T20:45:58Z", + "modified": "2024-11-13T22:48:57Z", "published": "2022-02-10T00:32:29Z", "aliases": [ "CVE-2022-23577" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -209,6 +213,14 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/4f38b1ac8e42727e18a2f0bde06d3bee8e77b250" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-86.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-141.yaml" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow" @@ -222,7 +234,7 @@ "cwe_ids": [ "CWE-476" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-02-04T20:26:34Z", "nvd_published_at": "2022-02-04T23:15:00Z" diff --git a/advisories/github-reviewed/2022/02/GHSA-c94w-c95p-phf8/GHSA-c94w-c95p-phf8.json b/advisories/github-reviewed/2022/02/GHSA-c94w-c95p-phf8/GHSA-c94w-c95p-phf8.json index 7c60ff7cc6f..dfca9dafb9d 100644 --- a/advisories/github-reviewed/2022/02/GHSA-c94w-c95p-phf8/GHSA-c94w-c95p-phf8.json +++ b/advisories/github-reviewed/2022/02/GHSA-c94w-c95p-phf8/GHSA-c94w-c95p-phf8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-c94w-c95p-phf8", - "modified": "2022-02-11T20:46:28Z", + "modified": "2024-11-13T22:48:17Z", "published": "2022-02-10T00:32:59Z", "aliases": [ "CVE-2022-23575" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -209,6 +213,14 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/fcd18ce3101f245b083b30655c27b239dc72221e" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-84.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-139.yaml" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow" @@ -222,7 +234,7 @@ "cwe_ids": [ "CWE-190" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-02-04T20:19:53Z", "nvd_published_at": "2022-02-04T23:15:00Z" diff --git a/advisories/github-reviewed/2022/02/GHSA-q85f-69q7-55h2/GHSA-q85f-69q7-55h2.json b/advisories/github-reviewed/2022/02/GHSA-q85f-69q7-55h2/GHSA-q85f-69q7-55h2.json index f06ecbd9eef..03ef0008d37 100644 --- a/advisories/github-reviewed/2022/02/GHSA-q85f-69q7-55h2/GHSA-q85f-69q7-55h2.json +++ b/advisories/github-reviewed/2022/02/GHSA-q85f-69q7-55h2/GHSA-q85f-69q7-55h2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q85f-69q7-55h2", - "modified": "2022-02-11T20:47:00Z", + "modified": "2024-11-13T22:47:22Z", "published": "2022-02-09T23:26:50Z", "aliases": [ "CVE-2022-23573" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -209,6 +213,14 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/ef1d027be116f25e25bb94a60da491c2cf55bd0b" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-82.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-137.yaml" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow" diff --git a/advisories/github-reviewed/2022/02/GHSA-rww7-2gpw-fv6j/GHSA-rww7-2gpw-fv6j.json b/advisories/github-reviewed/2022/02/GHSA-rww7-2gpw-fv6j/GHSA-rww7-2gpw-fv6j.json index ec5efb2f193..372b9437e6e 100644 --- a/advisories/github-reviewed/2022/02/GHSA-rww7-2gpw-fv6j/GHSA-rww7-2gpw-fv6j.json +++ b/advisories/github-reviewed/2022/02/GHSA-rww7-2gpw-fv6j/GHSA-rww7-2gpw-fv6j.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rww7-2gpw-fv6j", - "modified": "2022-02-11T20:48:05Z", + "modified": "2024-11-13T22:46:57Z", "published": "2022-02-09T23:28:29Z", "aliases": [ "CVE-2022-23572" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -209,6 +213,14 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/cb164786dc891ea11d3a900e90367c339305dc7b" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-81.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-136.yaml" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow" @@ -223,7 +235,7 @@ "CWE-617", "CWE-754" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-02-04T18:58:49Z", "nvd_published_at": "2022-02-04T23:15:00Z" diff --git a/advisories/github-reviewed/2022/02/GHSA-wm93-f238-7v37/GHSA-wm93-f238-7v37.json b/advisories/github-reviewed/2022/02/GHSA-wm93-f238-7v37/GHSA-wm93-f238-7v37.json index 60b61d5d667..a8a6023b988 100644 --- a/advisories/github-reviewed/2022/02/GHSA-wm93-f238-7v37/GHSA-wm93-f238-7v37.json +++ b/advisories/github-reviewed/2022/02/GHSA-wm93-f238-7v37/GHSA-wm93-f238-7v37.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wm93-f238-7v37", - "modified": "2022-02-11T20:46:10Z", + "modified": "2024-11-13T22:48:38Z", "published": "2022-02-10T00:32:44Z", "aliases": [ "CVE-2022-23576" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -209,6 +213,14 @@ "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/commit/b9bd6cfd1c50e6807846af9a86f9b83cafc9c8ae" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-85.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-140.yaml" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow" @@ -222,7 +234,7 @@ "cwe_ids": [ "CWE-190" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-02-04T20:23:17Z", "nvd_published_at": "2022-02-04T23:15:00Z"