diff --git a/advisories/github-reviewed/2024/02/GHSA-6qvw-249j-h44c/GHSA-6qvw-249j-h44c.json b/advisories/github-reviewed/2024/02/GHSA-6qvw-249j-h44c/GHSA-6qvw-249j-h44c.json index c747548f3a7..94a51884560 100644 --- a/advisories/github-reviewed/2024/02/GHSA-6qvw-249j-h44c/GHSA-6qvw-249j-h44c.json +++ b/advisories/github-reviewed/2024/02/GHSA-6qvw-249j-h44c/GHSA-6qvw-249j-h44c.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6qvw-249j-h44c", - "modified": "2024-02-29T20:10:44Z", + "modified": "2024-08-14T22:14:48Z", "published": "2024-02-29T03:33:14Z", "aliases": [ "CVE-2023-51775" @@ -9,7 +9,10 @@ "summary": "jose4j denial of service via specifically crafted JWE", "details": "The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ { @@ -48,7 +51,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-400" ], "severity": "MODERATE", "github_reviewed": true, diff --git a/advisories/github-reviewed/2024/02/GHSA-w879-mxj5-c3wf/GHSA-w879-mxj5-c3wf.json b/advisories/github-reviewed/2024/02/GHSA-w879-mxj5-c3wf/GHSA-w879-mxj5-c3wf.json index d97f2f94766..90304e9e4d8 100644 --- a/advisories/github-reviewed/2024/02/GHSA-w879-mxj5-c3wf/GHSA-w879-mxj5-c3wf.json +++ b/advisories/github-reviewed/2024/02/GHSA-w879-mxj5-c3wf/GHSA-w879-mxj5-c3wf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-w879-mxj5-c3wf", - "modified": "2024-03-12T15:23:46Z", + "modified": "2024-08-14T22:14:41Z", "published": "2024-02-22T06:30:33Z", "withdrawn": "2024-02-26T17:19:21Z", "aliases": [ @@ -10,7 +10,10 @@ "summary": "Duplicate Advisory: Kirby vulnerable to self cross-site scripting (self-XSS) in the URL field", "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-57f2-8p89-66x6. This link is maintained to preserve external references.\n\n## Original Description\nKirby CMS v4.1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the URL parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ { @@ -52,7 +55,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": true, diff --git a/advisories/github-reviewed/2024/06/GHSA-5jqc-qj57-4hrc/GHSA-5jqc-qj57-4hrc.json b/advisories/github-reviewed/2024/06/GHSA-5jqc-qj57-4hrc/GHSA-5jqc-qj57-4hrc.json index fb2f3ce4d65..4f574d27fc0 100644 --- a/advisories/github-reviewed/2024/06/GHSA-5jqc-qj57-4hrc/GHSA-5jqc-qj57-4hrc.json +++ b/advisories/github-reviewed/2024/06/GHSA-5jqc-qj57-4hrc/GHSA-5jqc-qj57-4hrc.json @@ -51,7 +51,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-22" + "CWE-22", + "CWE-31" ], "severity": "HIGH", "github_reviewed": true, diff --git a/advisories/github-reviewed/2024/07/GHSA-wqw3-p83g-r24v/GHSA-wqw3-p83g-r24v.json b/advisories/github-reviewed/2024/07/GHSA-wqw3-p83g-r24v/GHSA-wqw3-p83g-r24v.json index f4107a440c5..d194574ade8 100644 --- a/advisories/github-reviewed/2024/07/GHSA-wqw3-p83g-r24v/GHSA-wqw3-p83g-r24v.json +++ b/advisories/github-reviewed/2024/07/GHSA-wqw3-p83g-r24v/GHSA-wqw3-p83g-r24v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wqw3-p83g-r24v", - "modified": "2024-08-13T20:23:06Z", + "modified": "2024-08-14T22:16:13Z", "published": "2024-07-25T21:31:20Z", "aliases": [ "CVE-2024-7106" @@ -52,6 +52,10 @@ "type": "WEB", "url": "https://github.com/topsky979/Security-Collections/blob/main/cve3/README.md" }, + { + "type": "WEB", + "url": "https://rubysec.com/advisories/CVE-2024-7106" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.272431" diff --git a/advisories/github-reviewed/2024/08/GHSA-qv32-5wm2-p32h/GHSA-qv32-5wm2-p32h.json b/advisories/github-reviewed/2024/08/GHSA-qv32-5wm2-p32h/GHSA-qv32-5wm2-p32h.json index f1e36bb8f75..f06dc599a3d 100644 --- a/advisories/github-reviewed/2024/08/GHSA-qv32-5wm2-p32h/GHSA-qv32-5wm2-p32h.json +++ b/advisories/github-reviewed/2024/08/GHSA-qv32-5wm2-p32h/GHSA-qv32-5wm2-p32h.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qv32-5wm2-p32h", - "modified": "2024-08-13T21:01:42Z", + "modified": "2024-08-14T22:16:27Z", "published": "2024-08-13T21:01:42Z", "aliases": [ "CVE-2024-42360" @@ -44,10 +44,18 @@ "type": "WEB", "url": "https://github.com/wurmlab/sequenceserver/security/advisories/GHSA-qv32-5wm2-p32h" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42360" + }, { "type": "WEB", "url": "https://github.com/wurmlab/sequenceserver/commit/457e52709f7f9ed2fceed59b3db564cb50785dba" }, + { + "type": "WEB", + "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sequenceserver/CVE-2024-42360.yml" + }, { "type": "PACKAGE", "url": "https://github.com/wurmlab/sequenceserver" @@ -60,6 +68,6 @@ "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-08-13T21:01:42Z", - "nvd_published_at": null + "nvd_published_at": "2024-08-14T20:15:12Z" } } \ No newline at end of file