diff --git a/advisories/github-reviewed/2024/08/GHSA-hxwh-jpp2-84pm/GHSA-hxwh-jpp2-84pm.json b/advisories/github-reviewed/2024/08/GHSA-hxwh-jpp2-84pm/GHSA-hxwh-jpp2-84pm.json index 23decfd2a0afb..a38654687ec79 100644 --- a/advisories/github-reviewed/2024/08/GHSA-hxwh-jpp2-84pm/GHSA-hxwh-jpp2-84pm.json +++ b/advisories/github-reviewed/2024/08/GHSA-hxwh-jpp2-84pm/GHSA-hxwh-jpp2-84pm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hxwh-jpp2-84pm", - "modified": "2024-08-21T14:45:02Z", + "modified": "2024-08-21T14:45:04Z", "published": "2024-08-18T21:31:07Z", "aliases": [ "CVE-2024-6221" @@ -12,10 +12,6 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" - }, - { - "type": "CVSS_V4", - "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -32,11 +28,14 @@ "introduced": "0" }, { - "last_affected": "4.0.1" + "fixed": ">=4.0.2" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 4.0.1" + } } ], "references": [ @@ -44,10 +43,18 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6221" }, + { + "type": "WEB", + "url": "https://github.com/corydolphin/flask-cors/pull/363" + }, { "type": "PACKAGE", "url": "https://github.com/corydolphin/flask-cors" }, + { + "type": "WEB", + "url": "https://github.com/corydolphin/flask-cors/releases" + }, { "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/flask-cors/PYSEC-2024-71.yaml"