Skip to content

Commit f62ffea

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent b061ede commit f62ffea

File tree

61 files changed

+1342
-93
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

61 files changed

+1342
-93
lines changed

‎advisories/unreviewed/2025/02/GHSA-3j4c-6c9j-p6jj/GHSA-3j4c-6c9j-p6jj.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-3j4c-6c9j-p6jj",
4-
"modified": "2025-02-13T15:31:25Z",
4+
"modified": "2026-01-29T21:30:24Z",
55
"published": "2025-02-13T15:31:25Z",
66
"aliases": [
77
"CVE-2025-1270"

‎advisories/unreviewed/2025/03/GHSA-6jf7-p33c-7gw9/GHSA-6jf7-p33c-7gw9.json‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,8 @@
4242
],
4343
"database_specific": {
4444
"cwe_ids": [
45-
"CWE-74"
45+
"CWE-74",
46+
"CWE-77"
4647
],
4748
"severity": "MODERATE",
4849
"github_reviewed": false,

‎advisories/unreviewed/2025/03/GHSA-7729-f2m7-vm5h/GHSA-7729-f2m7-vm5h.json‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,8 @@
4242
],
4343
"database_specific": {
4444
"cwe_ids": [
45-
"CWE-74"
45+
"CWE-74",
46+
"CWE-77"
4647
],
4748
"severity": "MODERATE",
4849
"github_reviewed": false,

‎advisories/unreviewed/2025/03/GHSA-h2w7-2v8j-jgm7/GHSA-h2w7-2v8j-jgm7.json‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,8 @@
2626
],
2727
"database_specific": {
2828
"cwe_ids": [
29-
"CWE-276"
29+
"CWE-276",
30+
"CWE-522"
3031
],
3132
"severity": "MODERATE",
3233
"github_reviewed": false,

‎advisories/unreviewed/2025/08/GHSA-7xgx-qhr4-hx93/GHSA-7xgx-qhr4-hx93.json‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,9 @@
2525
}
2626
],
2727
"database_specific": {
28-
"cwe_ids": [],
28+
"cwe_ids": [
29+
"CWE-79"
30+
],
2931
"severity": "MODERATE",
3032
"github_reviewed": false,
3133
"github_reviewed_at": null,

‎advisories/unreviewed/2025/12/GHSA-9fqr-94hm-qxr9/GHSA-9fqr-94hm-qxr9.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-9fqr-94hm-qxr9",
4-
"modified": "2025-12-05T21:30:23Z",
4+
"modified": "2026-01-29T21:30:25Z",
55
"published": "2025-12-05T15:30:26Z",
66
"aliases": [
77
"CVE-2025-13654"
@@ -19,6 +19,10 @@
1919
"type": "ADVISORY",
2020
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13654"
2121
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/zevv/duc/commit/8638c4365ffd9e1966bdef8af6339dbee8c17e66"
25+
},
2226
{
2327
"type": "WEB",
2428
"url": "https://github.com/zevv/duc/releases/tag/1.4.6"

‎advisories/unreviewed/2026/01/GHSA-2fw7-6f7r-fx94/GHSA-2fw7-6f7r-fx94.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-2fw7-6f7r-fx94",
4-
"modified": "2026-01-28T21:31:23Z",
4+
"modified": "2026-01-29T21:30:30Z",
55
"published": "2026-01-28T21:31:23Z",
66
"aliases": [
77
"CVE-2025-13984"
88
],
99
"details": "Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripting (XSS).This issue affects Next.Js: from 0.0.0 before 1.6.4, from 2.0.0 before 2.0.1.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -23,7 +28,7 @@
2328
"cwe_ids": [
2429
"CWE-942"
2530
],
26-
"severity": null,
31+
"severity": "MODERATE",
2732
"github_reviewed": false,
2833
"github_reviewed_at": null,
2934
"nvd_published_at": "2026-01-28T20:16:07Z"

‎advisories/unreviewed/2026/01/GHSA-2hmm-wj33-38p5/GHSA-2hmm-wj33-38p5.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-2hmm-wj33-38p5",
4-
"modified": "2026-01-22T18:30:34Z",
4+
"modified": "2026-01-29T21:30:28Z",
55
"published": "2026-01-22T18:30:34Z",
66
"aliases": [
77
"CVE-2025-68003"
88
],
99
"details": "Missing Authorization vulnerability in renatoatshown Shown Connector shown-connector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shown Connector: from n/a through <= 1.2.10.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -23,7 +28,7 @@
2328
"cwe_ids": [
2429
"CWE-862"
2530
],
26-
"severity": null,
31+
"severity": "MODERATE",
2732
"github_reviewed": false,
2833
"github_reviewed_at": null,
2934
"nvd_published_at": "2026-01-22T17:16:06Z"

‎advisories/unreviewed/2026/01/GHSA-2v9g-x366-jgmx/GHSA-2v9g-x366-jgmx.json‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2v9g-x366-jgmx",
4+
"modified": "2026-01-29T21:30:31Z",
5+
"published": "2026-01-29T21:30:31Z",
6+
"aliases": [
7+
"CVE-2025-69604"
8+
],
9+
"details": "An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69604"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://shirt-pocket.com/SuperDuper/SuperDuperDescription.html"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://www.shirtpocket.com/blog/index.php/shadedgrey/comments/superduper_v312_now_available"
24+
},
25+
{
26+
"type": "WEB",
27+
"url": "http://shirt.com"
28+
}
29+
],
30+
"database_specific": {
31+
"cwe_ids": [],
32+
"severity": null,
33+
"github_reviewed": false,
34+
"github_reviewed_at": null,
35+
"nvd_published_at": "2026-01-29T20:16:09Z"
36+
}
37+
}

‎advisories/unreviewed/2026/01/GHSA-2xq9-f9fw-jgf9/GHSA-2xq9-f9fw-jgf9.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-2xq9-f9fw-jgf9",
4-
"modified": "2026-01-28T21:31:24Z",
4+
"modified": "2026-01-29T21:30:30Z",
55
"published": "2026-01-28T21:31:24Z",
66
"aliases": [
77
"CVE-2025-71004"
88
],
99
"details": "A segmentation violation in the oneflow.logical_or component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -24,8 +29,10 @@
2429
}
2530
],
2631
"database_specific": {
27-
"cwe_ids": [],
28-
"severity": null,
32+
"cwe_ids": [
33+
"CWE-125"
34+
],
35+
"severity": "MODERATE",
2936
"github_reviewed": false,
3037
"github_reviewed_at": null,
3138
"nvd_published_at": "2026-01-28T21:16:09Z"

0 commit comments

Comments
 (0)