Skip to content

Commit acfc26d

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-g7mr-vm94-3rv7 GHSA-2p5v-p767-wqv5 GHSA-9m4g-m3p5-p6gm GHSA-m2x7-c9gp-xc46 GHSA-r2rp-r5cj-6c6x GHSA-6g5m-c89w-7pwf GHSA-h943-hrx6-86cq GHSA-jx49-fphc-w293 GHSA-vx4w-426f-69qh GHSA-x2wr-f89p-cqwh GHSA-xrqh-48jh-pjv2
1 parent 6778f8f commit acfc26d

File tree

11 files changed

+236
-6
lines changed

11 files changed

+236
-6
lines changed

‎advisories/unreviewed/2025/11/GHSA-g7mr-vm94-3rv7/GHSA-g7mr-vm94-3rv7.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-g7mr-vm94-3rv7",
4-
"modified": "2026-03-19T00:30:19Z",
4+
"modified": "2026-03-19T12:30:31Z",
55
"published": "2025-11-18T21:32:31Z",
66
"aliases": [
77
"CVE-2025-61662"
@@ -63,6 +63,10 @@
6363
"type": "WEB",
6464
"url": "https://access.redhat.com/errata/RHSA-2026:4998"
6565
},
66+
{
67+
"type": "WEB",
68+
"url": "https://access.redhat.com/errata/RHSA-2026:5074"
69+
},
6670
{
6771
"type": "WEB",
6872
"url": "https://access.redhat.com/security/cve/CVE-2025-61662"

‎advisories/unreviewed/2025/12/GHSA-2p5v-p767-wqv5/GHSA-2p5v-p767-wqv5.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-2p5v-p767-wqv5",
4-
"modified": "2025-12-11T09:31:25Z",
4+
"modified": "2026-03-19T12:30:31Z",
55
"published": "2025-12-11T09:31:25Z",
66
"aliases": [
77
"CVE-2025-14512"
@@ -26,6 +26,10 @@
2626
{
2727
"type": "WEB",
2828
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2421339"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3845"
2933
}
3034
],
3135
"database_specific": {

‎advisories/unreviewed/2026/01/GHSA-9m4g-m3p5-p6gm/GHSA-9m4g-m3p5-p6gm.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-9m4g-m3p5-p6gm",
4-
"modified": "2026-01-27T15:30:32Z",
4+
"modified": "2026-03-19T12:30:31Z",
55
"published": "2026-01-27T15:30:32Z",
66
"aliases": [
77
"CVE-2026-1489"
@@ -26,6 +26,10 @@
2626
{
2727
"type": "WEB",
2828
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433348"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3872"
2933
}
3034
],
3135
"database_specific": {

‎advisories/unreviewed/2026/01/GHSA-m2x7-c9gp-xc46/GHSA-m2x7-c9gp-xc46.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-m2x7-c9gp-xc46",
4-
"modified": "2026-01-21T12:30:30Z",
4+
"modified": "2026-03-19T12:30:31Z",
55
"published": "2026-01-21T12:30:30Z",
66
"aliases": [
77
"CVE-2026-0988"
@@ -26,6 +26,10 @@
2626
{
2727
"type": "WEB",
2828
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429886"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3851"
2933
}
3034
],
3135
"database_specific": {

‎advisories/unreviewed/2026/01/GHSA-r2rp-r5cj-6c6x/GHSA-r2rp-r5cj-6c6x.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-r2rp-r5cj-6c6x",
4-
"modified": "2026-01-27T15:30:31Z",
4+
"modified": "2026-03-19T12:30:32Z",
55
"published": "2026-01-27T15:30:31Z",
66
"aliases": [
77
"CVE-2026-1484"
@@ -26,6 +26,10 @@
2626
{
2727
"type": "WEB",
2828
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433259"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3870"
2933
}
3034
],
3135
"database_specific": {

‎advisories/unreviewed/2026/03/GHSA-6g5m-c89w-7pwf/GHSA-6g5m-c89w-7pwf.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6g5m-c89w-7pwf",
4+
"modified": "2026-03-19T12:30:32Z",
5+
"published": "2026-03-19T12:30:32Z",
6+
"aliases": [
7+
"CVE-2025-14716"
8+
],
9+
"details": "Improper Authentication vulnerability in Secomea GateManager (webserver modules) allows Authentication Bypass.This issue affects GateManager: 11.4;0.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14716"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.secomea.com/support/cybersecurity-advisory"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-287"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-03-19T11:16:14Z"
35+
}
36+
}

‎advisories/unreviewed/2026/03/GHSA-h943-hrx6-86cq/GHSA-h943-hrx6-86cq.json‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-h943-hrx6-86cq",
4+
"modified": "2026-03-19T12:30:32Z",
5+
"published": "2026-03-19T12:30:32Z",
6+
"aliases": [
7+
"CVE-2006-10002"
8+
],
9+
"details": "XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes.\n\nA :utf8 PerlIO layer, parse_stream() in Expat.xs could overflow the XML input buffer because Perl's read() returns decoded characters while SvPV() gives back multi-byte UTF-8 bytes that can exceed the pre-allocated buffer size. This can cause heap corruption (double free or corruption) and crashes.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-10002"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://github.com/cpan-authors/XML-Parser/issues/64"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://github.com/cpan-authors/XML-Parser/commit/6b291f4d260fc124a6ec80382b87a918f372bc6b.patch"
24+
},
25+
{
26+
"type": "WEB",
27+
"url": "https://rt.cpan.org/Ticket/Display.html?id=19859"
28+
}
29+
],
30+
"database_specific": {
31+
"cwe_ids": [
32+
"CWE-122"
33+
],
34+
"severity": null,
35+
"github_reviewed": false,
36+
"github_reviewed_at": null,
37+
"nvd_published_at": "2026-03-19T12:16:16Z"
38+
}
39+
}

‎advisories/unreviewed/2026/03/GHSA-jx49-fphc-w293/GHSA-jx49-fphc-w293.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-jx49-fphc-w293",
4+
"modified": "2026-03-19T12:30:33Z",
5+
"published": "2026-03-19T12:30:32Z",
6+
"aliases": [
7+
"CVE-2026-3511"
8+
],
9+
"details": "Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SSRF (Server Side Request Forgery) attacks and obtain unauthorized access to local files on filesystems running the vulnerable application. Successful exploitation requires the victim to visit a specially crafted website that sends request containing a specially crafted XML document to /sign endpoint of the local HTTP server run by the application.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3511"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://blog.binary.house/2026/03/pripadova-studia-ako-sme-s-claude-code.html"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/slovensko-digital/autogram/releases/tag/v2.7.2"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-611"
34+
],
35+
"severity": "HIGH",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-03-19T12:16:18Z"
39+
}
40+
}

‎advisories/unreviewed/2026/03/GHSA-vx4w-426f-69qh/GHSA-vx4w-426f-69qh.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-vx4w-426f-69qh",
4+
"modified": "2026-03-19T12:30:32Z",
5+
"published": "2026-03-19T12:30:32Z",
6+
"aliases": [
7+
"CVE-2026-3658"
8+
],
9+
"details": "The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all versions up to, and including, 1.6.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database, including usernames, email addresses, and password hashes.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3658"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/trunk/includes/class-appointment-type-model.php#L907"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/trunk/includes/lib/td-util/class-td-api-model.php#L140"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/trunk/includes/lib/td-util/class-td-db-model.php#L1171"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://plugins.trac.wordpress.org/changeset/3485143"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/67c7b9b2-e73f-47fe-aecc-14e998a607c8?source=cve"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-89"
46+
],
47+
"severity": "HIGH",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-03-19T12:16:18Z"
51+
}
52+
}

‎advisories/unreviewed/2026/03/GHSA-x2wr-f89p-cqwh/GHSA-x2wr-f89p-cqwh.json‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-x2wr-f89p-cqwh",
4+
"modified": "2026-03-19T12:30:32Z",
5+
"published": "2026-03-19T12:30:32Z",
6+
"aliases": [
7+
"CVE-2006-10003"
8+
],
9+
"details": "XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack.\n\nIn the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then the new value will be written at location (++stackptr), which equals stacksize and therefore falls just outside the allocated buffer.\n\nThe bug can be observed when parsing an XML file with very deep element nesting",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-10003"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://github.com/cpan-authors/XML-Parser/issues/39"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://github.com/cpan-authors/XML-Parser/commit/3eb9cc95420fa0c3f76947c4708962546bf27cfd.patch"
24+
},
25+
{
26+
"type": "WEB",
27+
"url": "https://rt.cpan.org/Ticket/Display.html?id=19860"
28+
}
29+
],
30+
"database_specific": {
31+
"cwe_ids": [
32+
"CWE-122"
33+
],
34+
"severity": null,
35+
"github_reviewed": false,
36+
"github_reviewed_at": null,
37+
"nvd_published_at": "2026-03-19T12:16:17Z"
38+
}
39+
}

0 commit comments

Comments
 (0)