Publish Advisories

GHSA-6qvw-249j-h44c
GHSA-w879-mxj5-c3wf
GHSA-5jqc-qj57-4hrc
GHSA-wqw3-p83g-r24v
GHSA-qv32-5wm2-p32h

advisories/github-reviewed/2024/02/GHSA-6qvw-249j-h44c/GHSA-6qvw-249j-h44c.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6qvw-249j-h44c",
-  "modified": "2024-02-29T20:10:44Z",
+  "modified": "2024-08-14T22:14:48Z",
   "published": "2024-02-29T03:33:14Z",
   "aliases": [
     "CVE-2023-51775"
@@ -9,7 +9,10 @@
   "summary": "jose4j denial of service via specifically crafted JWE",
   "details": "The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
   ],
   "affected": [
     {
@@ -48,7 +51,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-400"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,

advisories/github-reviewed/2024/02/GHSA-w879-mxj5-c3wf/GHSA-w879-mxj5-c3wf.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-w879-mxj5-c3wf",
-  "modified": "2024-03-12T15:23:46Z",
+  "modified": "2024-08-14T22:14:41Z",
   "published": "2024-02-22T06:30:33Z",
   "withdrawn": "2024-02-26T17:19:21Z",
   "aliases": [
@@ -10,7 +10,10 @@
   "summary": "Duplicate Advisory: Kirby vulnerable to self cross-site scripting (self-XSS) in the URL field",
   "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-57f2-8p89-66x6. This link is maintained to preserve external references.\n\n## Original Description\nKirby CMS v4.1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the URL parameter.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
     {
@@ -52,7 +55,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-79"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,

advisories/github-reviewed/2024/06/GHSA-5jqc-qj57-4hrc/GHSA-5jqc-qj57-4hrc.json

@@ -51,7 +51,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-22"
+      "CWE-22",
+      "CWE-31"
     ],
     "severity": "HIGH",
     "github_reviewed": true,

advisories/github-reviewed/2024/07/GHSA-wqw3-p83g-r24v/GHSA-wqw3-p83g-r24v.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-wqw3-p83g-r24v",
-  "modified": "2024-08-13T20:23:06Z",
+  "modified": "2024-08-14T22:16:13Z",
   "published": "2024-07-25T21:31:20Z",
   "aliases": [
     "CVE-2024-7106"
@@ -52,6 +52,10 @@
       "type": "WEB",
       "url": "https://github.com/topsky979/Security-Collections/blob/main/cve3/README.md"
     },
+    {
+      "type": "WEB",
+      "url": "https://rubysec.com/advisories/CVE-2024-7106"
+    },
     {
       "type": "WEB",
       "url": "https://vuldb.com/?ctiid.272431"

advisories/github-reviewed/2024/08/GHSA-qv32-5wm2-p32h/GHSA-qv32-5wm2-p32h.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qv32-5wm2-p32h",
-  "modified": "2024-08-13T21:01:42Z",
+  "modified": "2024-08-14T22:16:27Z",
   "published": "2024-08-13T21:01:42Z",
   "aliases": [
     "CVE-2024-42360"
@@ -44,10 +44,18 @@
       "type": "WEB",
       "url": "https://github.com/wurmlab/sequenceserver/security/advisories/GHSA-qv32-5wm2-p32h"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42360"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/wurmlab/sequenceserver/commit/457e52709f7f9ed2fceed59b3db564cb50785dba"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sequenceserver/CVE-2024-42360.yml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/wurmlab/sequenceserver"
@@ -60,6 +68,6 @@
     "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2024-08-13T21:01:42Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-08-14T20:15:12Z"
   }
 }