Skip to content

Commit f90ac2f

Browse files
1 parent 98362d2 commit f90ac2f

4 files changed

Lines changed: 35 additions & 9 deletions

File tree

advisories/github-reviewed/2021/08/GHSA-w65j-g6c7-g3m4/GHSA-w65j-g6c7-g3m4.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-w65j-g6c7-g3m4",
4-
"modified": "2021-08-24T19:13:30Z",
4+
"modified": "2026-06-09T10:46:24Z",
55
"published": "2021-08-25T20:42:50Z",
66
"aliases": [],
77
"summary": "Multiple memory safety issues in actix-web",
8-
"details": "Affected versions contain multiple memory safety issues, such as:\n\n - Unsoundly coercing immutable references to mutable references\n - Unsoundly extending lifetimes of strings\n - Adding the `Send` marker trait to objects that cannot be safely sent between threads\n\nThis may result in a variety of memory corruption scenarios, most likely use-after-free.\n \nA signficant refactoring effort has been conducted to resolve these issues.\n",
8+
"details": "Affected versions contain multiple memory safety issues, such as:\n\n - Unsoundly coercing immutable references to mutable references\n - Unsoundly extending lifetimes of strings\n - Adding the `Send` marker trait to objects that cannot be safely sent between threads\n\nThis may result in a variety of memory corruption scenarios, most likely use-after-free.\n \nA signficant refactoring effort has been conducted to resolve these issues.",
99
"severity": [],
1010
"affected": [
1111
{
@@ -21,7 +21,7 @@
2121
"introduced": "0"
2222
},
2323
{
24-
"fixed": "0.7.15"
24+
"fixed": "0.7.19"
2525
}
2626
]
2727
}

advisories/github-reviewed/2022/01/GHSA-7x36-h62w-vw65/GHSA-7x36-h62w-vw65.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-7x36-h62w-vw65",
4-
"modified": "2022-01-06T18:34:36Z",
4+
"modified": "2026-06-09T10:46:46Z",
55
"published": "2022-01-06T22:18:58Z",
66
"aliases": [
77
"CVE-2018-25026"
@@ -28,7 +28,7 @@
2828
"introduced": "0"
2929
},
3030
{
31-
"fixed": "0.7.15"
31+
"fixed": "0.7.19"
3232
}
3333
]
3434
}

advisories/github-reviewed/2022/01/GHSA-fgfm-hqjw-3265/GHSA-fgfm-hqjw-3265.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-fgfm-hqjw-3265",
4-
"modified": "2022-01-06T18:35:59Z",
4+
"modified": "2026-06-09T10:47:01Z",
55
"published": "2022-01-06T22:18:46Z",
66
"aliases": [
77
"CVE-2018-25025"
@@ -28,7 +28,7 @@
2828
"introduced": "0"
2929
},
3030
{
31-
"fixed": "0.7.15"
31+
"fixed": "0.7.19"
3232
}
3333
]
3434
}

advisories/github-reviewed/2026/04/GHSA-55wf-5m3q-6jjf/GHSA-55wf-5m3q-6jjf.json

Lines changed: 28 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-55wf-5m3q-6jjf",
4-
"modified": "2026-05-13T13:38:05Z",
4+
"modified": "2026-06-09T10:44:51Z",
55
"published": "2026-04-29T21:01:55Z",
66
"aliases": [
77
"CVE-2026-42224"
@@ -25,7 +25,7 @@
2525
"type": "ECOSYSTEM",
2626
"events": [
2727
{
28-
"introduced": "0"
28+
"introduced": "0.11.0"
2929
},
3030
{
3131
"fixed": "0.13.1"
@@ -36,6 +36,28 @@
3636
"database_specific": {
3737
"last_known_affected_version_range": "<= 0.13.0"
3838
}
39+
},
40+
{
41+
"package": {
42+
"ecosystem": "Packagist",
43+
"name": "ipl/web"
44+
},
45+
"ranges": [
46+
{
47+
"type": "ECOSYSTEM",
48+
"events": [
49+
{
50+
"introduced": "0"
51+
},
52+
{
53+
"fixed": "0.10.3"
54+
}
55+
]
56+
}
57+
],
58+
"database_specific": {
59+
"last_known_affected_version_range": "<= 0.10.2"
60+
}
3961
}
4062
],
4163
"references": [
@@ -55,6 +77,10 @@
5577
"type": "PACKAGE",
5678
"url": "https://github.com/Icinga/ipl-web"
5779
},
80+
{
81+
"type": "WEB",
82+
"url": "https://github.com/Icinga/ipl-web/releases/tag/v0.10.3"
83+
},
5884
{
5985
"type": "WEB",
6086
"url": "https://github.com/Icinga/ipl-web/releases/tag/v0.13.1"

0 commit comments

Comments
 (0)