Skip to content

Commit ca4ec54

Browse files
tatianabtatianab
committed
data/reports: regenerate unreviewed reports
Regenerate existing unreviewed reports with improved algorithm. Change-Id: I1603d4cbb87068497e686e238c070fdb7a2d28b1 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/595276 LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Damien Neil <dneil@google.com>
1 parent 1b6c74b commit ca4ec54

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

74 files changed

+2066
-471
lines changed

‎data/osv/GO-2024-2566.json

Lines changed: 56 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,63 @@
77
"CVE-2024-24776",
88
"GHSA-r833-w756-h5p2"
99
],
10-
"summary": "Mattermost fails to check the required permissions in github.com/mattermost/mattermost/server/v8",
11-
"details": "Mattermost fails to check the required permissions in github.com/mattermost/mattermost/server/v8",
10+
"summary": "Mattermost fails to check the required permissions in github.com/mattermost/mattermost-server",
11+
"details": "Mattermost fails to check the required permissions in github.com/mattermost/mattermost-server",
1212
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/mattermost/mattermost-server",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "9.0.0+incompatible"
24+
},
25+
{
26+
"fixed": "9.3.0+incompatible"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
},
33+
{
34+
"package": {
35+
"name": "github.com/mattermost/mattermost-server/v5",
36+
"ecosystem": "Go"
37+
},
38+
"ranges": [
39+
{
40+
"type": "SEMVER",
41+
"events": [
42+
{
43+
"introduced": "0"
44+
}
45+
]
46+
}
47+
],
48+
"ecosystem_specific": {}
49+
},
50+
{
51+
"package": {
52+
"name": "github.com/mattermost/mattermost-server/v6",
53+
"ecosystem": "Go"
54+
},
55+
"ranges": [
56+
{
57+
"type": "SEMVER",
58+
"events": [
59+
{
60+
"introduced": "0"
61+
}
62+
]
63+
}
64+
],
65+
"ecosystem_specific": {}
66+
},
1367
{
1468
"package": {
1569
"name": "github.com/mattermost/mattermost/server/v8",

‎data/osv/GO-2024-2575.json

Lines changed: 19 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,26 @@
77
"CVE-2024-26147",
88
"GHSA-r53h-jv2g-vpx6"
99
],
10-
"summary": "Helm's Missing YAML Content Leads To Panic in helm.sh/helm/v3",
11-
"details": "Helm's Missing YAML Content Leads To Panic in helm.sh/helm/v3",
10+
"summary": "Helm's Missing YAML Content Leads To Panic in helm.sh/helm",
11+
"details": "Helm's Missing YAML Content Leads To Panic in helm.sh/helm",
1212
"affected": [
13+
{
14+
"package": {
15+
"name": "helm.sh/helm",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
}
25+
]
26+
}
27+
],
28+
"ecosystem_specific": {}
29+
},
1330
{
1431
"package": {
1532
"name": "helm.sh/helm/v3",

‎data/osv/GO-2024-2635.json

Lines changed: 56 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,63 @@
77
"CVE-2024-1952",
88
"GHSA-r4fm-g65h-cr54"
99
],
10-
"summary": "Mattermost incorrectly allows access individual posts in github.com/mattermost/mattermost/server/v8",
11-
"details": "Mattermost incorrectly allows access individual posts in github.com/mattermost/mattermost/server/v8",
10+
"summary": "Mattermost incorrectly allows access individual posts in github.com/mattermost/mattermost-server",
11+
"details": "Mattermost incorrectly allows access individual posts in github.com/mattermost/mattermost-server",
1212
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/mattermost/mattermost-server",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "9.0.0+incompatible"
24+
},
25+
{
26+
"fixed": "9.4.0+incompatible"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
},
33+
{
34+
"package": {
35+
"name": "github.com/mattermost/mattermost-server/v5",
36+
"ecosystem": "Go"
37+
},
38+
"ranges": [
39+
{
40+
"type": "SEMVER",
41+
"events": [
42+
{
43+
"introduced": "0"
44+
}
45+
]
46+
}
47+
],
48+
"ecosystem_specific": {}
49+
},
50+
{
51+
"package": {
52+
"name": "github.com/mattermost/mattermost-server/v6",
53+
"ecosystem": "Go"
54+
},
55+
"ranges": [
56+
{
57+
"type": "SEMVER",
58+
"events": [
59+
{
60+
"introduced": "0"
61+
}
62+
]
63+
}
64+
],
65+
"ecosystem_specific": {}
66+
},
1367
{
1468
"package": {
1569
"name": "github.com/mattermost/mattermost/server/v8",

‎data/osv/GO-2024-2645.json

Lines changed: 43 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,43 @@
77
"CVE-2024-27920",
88
"GHSA-w5wx-6g2r-r78q"
99
],
10-
"summary": "Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei/v3",
11-
"details": "Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei/v3",
10+
"summary": "Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei",
11+
"details": "Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei",
1212
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/projectdiscovery/nuclei",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
}
25+
]
26+
}
27+
],
28+
"ecosystem_specific": {}
29+
},
30+
{
31+
"package": {
32+
"name": "github.com/projectdiscovery/nuclei/v2",
33+
"ecosystem": "Go"
34+
},
35+
"ranges": [
36+
{
37+
"type": "SEMVER",
38+
"events": [
39+
{
40+
"introduced": "0"
41+
}
42+
]
43+
}
44+
],
45+
"ecosystem_specific": {}
46+
},
1347
{
1448
"package": {
1549
"name": "github.com/projectdiscovery/nuclei/v3",
@@ -41,24 +75,24 @@
4175
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27920"
4276
},
4377
{
44-
"type": "WEB",
45-
"url": "https://docs.projectdiscovery.io/templates/protocols/code"
78+
"type": "FIX",
79+
"url": "https://github.com/projectdiscovery/nuclei/commit/e86f38299765b82ad724fdb701557e0eaff3884d"
4680
},
4781
{
48-
"type": "WEB",
49-
"url": "https://docs.projectdiscovery.io/templates/reference/template-signing"
82+
"type": "FIX",
83+
"url": "https://github.com/projectdiscovery/nuclei/pull/4822"
5084
},
5185
{
5286
"type": "WEB",
53-
"url": "https://docs.projectdiscovery.io/templates/workflows/overview"
87+
"url": "https://docs.projectdiscovery.io/templates/protocols/code"
5488
},
5589
{
5690
"type": "WEB",
57-
"url": "https://github.com/projectdiscovery/nuclei/commit/e86f38299765b82ad724fdb701557e0eaff3884d"
91+
"url": "https://docs.projectdiscovery.io/templates/reference/template-signing"
5892
},
5993
{
6094
"type": "WEB",
61-
"url": "https://github.com/projectdiscovery/nuclei/pull/4822"
95+
"url": "https://docs.projectdiscovery.io/templates/workflows/overview"
6296
}
6397
],
6498
"database_specific": {

‎data/osv/GO-2024-2675.json

Lines changed: 19 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,26 @@
77
"CVE-2024-2435",
88
"GHSA-8f25-w7qj-r7hc"
99
],
10-
"summary": "Temporal UI Server cross-site scripting vulnerability in github.com/temporalio/ui-server/v2",
11-
"details": "Temporal UI Server cross-site scripting vulnerability in github.com/temporalio/ui-server/v2",
10+
"summary": "Temporal UI Server cross-site scripting vulnerability in github.com/temporalio/ui-server",
11+
"details": "Temporal UI Server cross-site scripting vulnerability in github.com/temporalio/ui-server",
1212
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/temporalio/ui-server",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
}
25+
]
26+
}
27+
],
28+
"ecosystem_specific": {}
29+
},
1330
{
1431
"package": {
1532
"name": "github.com/temporalio/ui-server/v2",

‎data/osv/GO-2024-2690.json

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,10 @@
4343
{
4444
"type": "WEB",
4545
"url": "https://discuss.hashicorp.com/t/hcsec-2024-07-vault-tls-cert-auth-method-did-not-correctly-validate-ocsp-responses/64573"
46+
},
47+
{
48+
"type": "WEB",
49+
"url": "https://security.netapp.com/advisory/ntap-20240524-0007"
4650
}
4751
],
4852
"database_specific": {

‎data/osv/GO-2024-2695.json

Lines changed: 68 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,75 @@
77
"CVE-2024-28949",
88
"GHSA-mcw6-3256-64gg"
99
],
10-
"summary": "Mattermost Server doesn't limit the number of user preferences in github.com/mattermost/mattermost/server/v8",
11-
"details": "Mattermost Server doesn't limit the number of user preferences in github.com/mattermost/mattermost/server/v8",
10+
"summary": "Mattermost Server doesn't limit the number of user preferences in github.com/mattermost/mattermost-server",
11+
"details": "Mattermost Server doesn't limit the number of user preferences in github.com/mattermost/mattermost-server",
1212
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/mattermost/mattermost-server",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "9.3.0+incompatible"
24+
},
25+
{
26+
"fixed": "9.3.3+incompatible"
27+
},
28+
{
29+
"introduced": "9.4.0+incompatible"
30+
},
31+
{
32+
"fixed": "9.4.4+incompatible"
33+
},
34+
{
35+
"introduced": "9.5.0+incompatible"
36+
},
37+
{
38+
"fixed": "9.5.2+incompatible"
39+
}
40+
]
41+
}
42+
],
43+
"ecosystem_specific": {}
44+
},
45+
{
46+
"package": {
47+
"name": "github.com/mattermost/mattermost-server/v5",
48+
"ecosystem": "Go"
49+
},
50+
"ranges": [
51+
{
52+
"type": "SEMVER",
53+
"events": [
54+
{
55+
"introduced": "0"
56+
}
57+
]
58+
}
59+
],
60+
"ecosystem_specific": {}
61+
},
62+
{
63+
"package": {
64+
"name": "github.com/mattermost/mattermost-server/v6",
65+
"ecosystem": "Go"
66+
},
67+
"ranges": [
68+
{
69+
"type": "SEMVER",
70+
"events": [
71+
{
72+
"introduced": "0"
73+
}
74+
]
75+
}
76+
],
77+
"ecosystem_specific": {}
78+
},
1379
{
1480
"package": {
1581
"name": "github.com/mattermost/mattermost/server/v8",

0 commit comments

Comments
 (0)