Skip to content

Commit ad51667

Browse files
tatianabgopherbot
tatianab
authored and
gopherbot
committedAug 21, 2024
data/reports: unexclude 3 reports (32)
 - data/reports/GO-2022-1263.yaml - data/reports/GO-2022-1264.yaml - data/reports/GO-2022-1266.yaml Updates #1263 Updates #1264 Updates #1266 Change-Id: Ie46f3a72ff97ef701ba420b2e58954ec7fbf2977 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/607234 Reviewed-by: Damien Neil <dneil@google.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Auto-Submit: Tatiana Bradley <tatianabradley@google.com> Commit-Queue: Tatiana Bradley <tatianabradley@google.com>
1 parent 984d6ee commit ad51667

9 files changed

+233
-24
lines changed
 

‎data/excluded/GO-2022-1263.yaml

-8
This file was deleted.

‎data/excluded/GO-2022-1264.yaml

-8
This file was deleted.

‎data/excluded/GO-2022-1266.yaml

-8
This file was deleted.

‎data/osv/GO-2022-1263.json

+56
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2022-1263",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2022-4810",
8+
"GHSA-qf9q-3wwx-8qjv"
9+
],
10+
"summary": "usememos/memos Improper Access Control vulnerability in github.com/usememos/memos",
11+
"details": "usememos/memos Improper Access Control vulnerability in github.com/usememos/memos",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/usememos/memos",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "0.9.1"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
}
33+
],
34+
"references": [
35+
{
36+
"type": "ADVISORY",
37+
"url": "https://github.com/advisories/GHSA-qf9q-3wwx-8qjv"
38+
},
39+
{
40+
"type": "ADVISORY",
41+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4810"
42+
},
43+
{
44+
"type": "FIX",
45+
"url": "https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53"
46+
},
47+
{
48+
"type": "WEB",
49+
"url": "https://huntr.dev/bounties/f0c8d778-db86-4ed3-85bb-5315ab56915e"
50+
}
51+
],
52+
"database_specific": {
53+
"url": "https://pkg.go.dev/vuln/GO-2022-1263",
54+
"review_status": "UNREVIEWED"
55+
}
56+
}

‎data/osv/GO-2022-1264.json

+56
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2022-1264",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2022-4847",
8+
"GHSA-r7hg-2cpp-8wqq"
9+
],
10+
"summary": "usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos",
11+
"details": "usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/usememos/memos",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "0.9.1"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
}
33+
],
34+
"references": [
35+
{
36+
"type": "ADVISORY",
37+
"url": "https://github.com/advisories/GHSA-r7hg-2cpp-8wqq"
38+
},
39+
{
40+
"type": "ADVISORY",
41+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4847"
42+
},
43+
{
44+
"type": "FIX",
45+
"url": "https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948"
46+
},
47+
{
48+
"type": "WEB",
49+
"url": "https://huntr.dev/bounties/ff6d4b5a-5e75-4a14-b5ce-f318f8613b73"
50+
}
51+
],
52+
"database_specific": {
53+
"url": "https://pkg.go.dev/vuln/GO-2022-1264",
54+
"review_status": "UNREVIEWED"
55+
}
56+
}

‎data/osv/GO-2022-1266.json

+56
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2022-1266",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2022-4848",
8+
"GHSA-vh43-cc6x-prpr"
9+
],
10+
"summary": "usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos",
11+
"details": "usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/usememos/memos",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "0.9.1"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
}
33+
],
34+
"references": [
35+
{
36+
"type": "ADVISORY",
37+
"url": "https://github.com/advisories/GHSA-vh43-cc6x-prpr"
38+
},
39+
{
40+
"type": "ADVISORY",
41+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4848"
42+
},
43+
{
44+
"type": "FIX",
45+
"url": "https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948"
46+
},
47+
{
48+
"type": "WEB",
49+
"url": "https://huntr.dev/bounties/25de88cc-8d0d-41a1-b069-9ef1327770bc"
50+
}
51+
],
52+
"database_specific": {
53+
"url": "https://pkg.go.dev/vuln/GO-2022-1266",
54+
"review_status": "UNREVIEWED"
55+
}
56+
}

‎data/reports/GO-2022-1263.yaml

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
id: GO-2022-1263
2+
modules:
3+
- module: github.com/usememos/memos
4+
versions:
5+
- fixed: 0.9.1
6+
vulnerable_at: 0.9.0
7+
summary: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos
8+
cves:
9+
- CVE-2022-4810
10+
ghsas:
11+
- GHSA-qf9q-3wwx-8qjv
12+
references:
13+
- advisory: https://github.com/advisories/GHSA-qf9q-3wwx-8qjv
14+
- advisory: https://nvd.nist.gov/vuln/detail/CVE-2022-4810
15+
- fix: https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53
16+
- web: https://huntr.dev/bounties/f0c8d778-db86-4ed3-85bb-5315ab56915e
17+
source:
18+
id: GHSA-qf9q-3wwx-8qjv
19+
created: 2024-08-20T14:56:23.524956-04:00
20+
review_status: UNREVIEWED
21+
unexcluded: EFFECTIVELY_PRIVATE

‎data/reports/GO-2022-1264.yaml

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
id: GO-2022-1264
2+
modules:
3+
- module: github.com/usememos/memos
4+
versions:
5+
- fixed: 0.9.1
6+
vulnerable_at: 0.9.0
7+
summary: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos
8+
cves:
9+
- CVE-2022-4847
10+
ghsas:
11+
- GHSA-r7hg-2cpp-8wqq
12+
references:
13+
- advisory: https://github.com/advisories/GHSA-r7hg-2cpp-8wqq
14+
- advisory: https://nvd.nist.gov/vuln/detail/CVE-2022-4847
15+
- fix: https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948
16+
- web: https://huntr.dev/bounties/ff6d4b5a-5e75-4a14-b5ce-f318f8613b73
17+
source:
18+
id: GHSA-r7hg-2cpp-8wqq
19+
created: 2024-08-20T14:56:26.859444-04:00
20+
review_status: UNREVIEWED
21+
unexcluded: EFFECTIVELY_PRIVATE

‎data/reports/GO-2022-1266.yaml

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
id: GO-2022-1266
2+
modules:
3+
- module: github.com/usememos/memos
4+
versions:
5+
- fixed: 0.9.1
6+
vulnerable_at: 0.9.0
7+
summary: |-
8+
usememos/memos vulnerable to Improper Verification of Source of a Communication
9+
Channel in github.com/usememos/memos
10+
cves:
11+
- CVE-2022-4848
12+
ghsas:
13+
- GHSA-vh43-cc6x-prpr
14+
references:
15+
- advisory: https://github.com/advisories/GHSA-vh43-cc6x-prpr
16+
- advisory: https://nvd.nist.gov/vuln/detail/CVE-2022-4848
17+
- fix: https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948
18+
- web: https://huntr.dev/bounties/25de88cc-8d0d-41a1-b069-9ef1327770bc
19+
source:
20+
id: GHSA-vh43-cc6x-prpr
21+
created: 2024-08-20T14:56:30.374308-04:00
22+
review_status: UNREVIEWED
23+
unexcluded: EFFECTIVELY_PRIVATE

0 commit comments

Comments
 (0)