up
This commit is contained in:
@@ -0,0 +1,160 @@
|
||||
{
|
||||
"advisoryKey": "CVE-2025-4242",
|
||||
"affectedPackages": [
|
||||
{
|
||||
"type": "cpe",
|
||||
"identifier": "cpe:2.3:a:conflict:package:1.0:*:*:*:*:*:*:*",
|
||||
"platform": null,
|
||||
"versionRanges": [
|
||||
{
|
||||
"fixedVersion": "1.4",
|
||||
"introducedVersion": "1.0",
|
||||
"lastAffectedVersion": "1.0",
|
||||
"primitives": {
|
||||
"evr": null,
|
||||
"hasVendorExtensions": true,
|
||||
"nevra": null,
|
||||
"semVer": {
|
||||
"constraintExpression": ">=1.0 <1.4 ==1.0",
|
||||
"exactValue": "1.0.0",
|
||||
"fixed": "1.4.0",
|
||||
"fixedInclusive": false,
|
||||
"introduced": "1.0.0",
|
||||
"introducedInclusive": true,
|
||||
"lastAffected": "1.0.0",
|
||||
"lastAffectedInclusive": true,
|
||||
"style": "exact"
|
||||
},
|
||||
"vendorExtensions": {
|
||||
"versionStartIncluding": "1.0",
|
||||
"versionEndExcluding": "1.4",
|
||||
"version": "1.0"
|
||||
}
|
||||
},
|
||||
"provenance": {
|
||||
"source": "nvd",
|
||||
"kind": "cpe",
|
||||
"value": "https://services.nvd.nist.gov/rest/json/cve/2.0?cveId=CVE-2025-4242",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-03-04T02:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"affectedpackages[].versionranges[]"
|
||||
]
|
||||
},
|
||||
"rangeExpression": ">=1.0 <1.4 ==1.0",
|
||||
"rangeKind": "cpe"
|
||||
}
|
||||
],
|
||||
"normalizedVersions": [
|
||||
{
|
||||
"scheme": "semver",
|
||||
"type": "exact",
|
||||
"min": null,
|
||||
"minInclusive": null,
|
||||
"max": null,
|
||||
"maxInclusive": null,
|
||||
"value": "1.0.0",
|
||||
"notes": "nvd:CVE-2025-4242"
|
||||
}
|
||||
],
|
||||
"statuses": [],
|
||||
"provenance": [
|
||||
{
|
||||
"source": "nvd",
|
||||
"kind": "cpe",
|
||||
"value": "https://services.nvd.nist.gov/rest/json/cve/2.0?cveId=CVE-2025-4242",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-03-04T02:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"affectedpackages[]"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"aliases": [
|
||||
"CVE-2025-4242"
|
||||
],
|
||||
"credits": [],
|
||||
"cvssMetrics": [
|
||||
{
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "critical",
|
||||
"provenance": {
|
||||
"source": "nvd",
|
||||
"kind": "cvss",
|
||||
"value": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-03-04T02:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"cvssmetrics[]"
|
||||
]
|
||||
},
|
||||
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"version": "3.1"
|
||||
}
|
||||
],
|
||||
"exploitKnown": false,
|
||||
"language": "en",
|
||||
"modified": "2025-03-03T09:45:00+00:00",
|
||||
"provenance": [
|
||||
{
|
||||
"source": "nvd",
|
||||
"kind": "document",
|
||||
"value": "https://services.nvd.nist.gov/rest/json/cve/2.0?cveId=CVE-2025-4242",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-03-03T10:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "nvd",
|
||||
"kind": "mapping",
|
||||
"value": "CVE-2025-4242",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-03-04T02:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"published": "2025-03-01T10:15:00+00:00",
|
||||
"references": [
|
||||
{
|
||||
"kind": "weakness",
|
||||
"provenance": {
|
||||
"source": "nvd",
|
||||
"kind": "reference",
|
||||
"value": "https://cwe.mitre.org/data/definitions/269.html",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-03-04T02:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"references[]"
|
||||
]
|
||||
},
|
||||
"sourceTag": "CWE-269",
|
||||
"summary": null,
|
||||
"url": "https://cwe.mitre.org/data/definitions/269.html"
|
||||
},
|
||||
{
|
||||
"kind": "vendor advisory",
|
||||
"provenance": {
|
||||
"source": "nvd",
|
||||
"kind": "reference",
|
||||
"value": "https://nvd.nist.gov/vuln/detail/CVE-2025-4242",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-03-04T02:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"references[]"
|
||||
]
|
||||
},
|
||||
"sourceTag": "NVD",
|
||||
"summary": null,
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4242"
|
||||
}
|
||||
],
|
||||
"severity": "critical",
|
||||
"summary": "NVD baseline summary for conflict-package allowing container escape.",
|
||||
"title": "CVE-2025-4242"
|
||||
}
|
||||
@@ -0,0 +1,108 @@
|
||||
{
|
||||
"advisoryKey": "GHSA-credit-parity",
|
||||
"affectedPackages": [],
|
||||
"aliases": [
|
||||
"CVE-2025-5555",
|
||||
"GHSA-credit-parity"
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"displayName": "Bob Maintainer",
|
||||
"role": "remediation_developer",
|
||||
"contacts": [
|
||||
"https://github.com/acme/bob-maintainer"
|
||||
],
|
||||
"provenance": {
|
||||
"source": "ghsa",
|
||||
"kind": "credit",
|
||||
"value": "ghsa:bob-maintainer",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"credits[]"
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"displayName": "Alice Researcher",
|
||||
"role": "reporter",
|
||||
"contacts": [
|
||||
"mailto:alice.researcher@example.com"
|
||||
],
|
||||
"provenance": {
|
||||
"source": "ghsa",
|
||||
"kind": "credit",
|
||||
"value": "ghsa:alice-researcher",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"credits[]"
|
||||
]
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetrics": [],
|
||||
"exploitKnown": false,
|
||||
"language": "en",
|
||||
"modified": "2025-10-10T12:00:00+00:00",
|
||||
"provenance": [
|
||||
{
|
||||
"source": "ghsa",
|
||||
"kind": "document",
|
||||
"value": "security/advisories/GHSA-credit-parity",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "ghsa",
|
||||
"kind": "mapping",
|
||||
"value": "GHSA-credit-parity",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"published": "2025-10-09T18:30:00+00:00",
|
||||
"references": [
|
||||
{
|
||||
"kind": "patch",
|
||||
"provenance": {
|
||||
"source": "ghsa",
|
||||
"kind": "reference",
|
||||
"value": "https://example.com/ghsa/patch",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"references[]"
|
||||
]
|
||||
},
|
||||
"sourceTag": null,
|
||||
"summary": null,
|
||||
"url": "https://example.com/ghsa/patch"
|
||||
},
|
||||
{
|
||||
"kind": "advisory",
|
||||
"provenance": {
|
||||
"source": "ghsa",
|
||||
"kind": "reference",
|
||||
"value": "https://github.com/advisories/GHSA-credit-parity",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"references[]"
|
||||
]
|
||||
},
|
||||
"sourceTag": null,
|
||||
"summary": null,
|
||||
"url": "https://github.com/advisories/GHSA-credit-parity"
|
||||
}
|
||||
],
|
||||
"severity": "medium",
|
||||
"summary": "Credit parity regression fixture",
|
||||
"title": "Credit parity regression fixture"
|
||||
}
|
||||
@@ -0,0 +1,108 @@
|
||||
{
|
||||
"advisoryKey": "CVE-2025-5555",
|
||||
"affectedPackages": [],
|
||||
"aliases": [
|
||||
"CVE-2025-5555",
|
||||
"GHSA-credit-parity"
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"displayName": "Bob Maintainer",
|
||||
"role": "remediation_developer",
|
||||
"contacts": [
|
||||
"https://github.com/acme/bob-maintainer"
|
||||
],
|
||||
"provenance": {
|
||||
"source": "nvd",
|
||||
"kind": "credit",
|
||||
"value": "nvd:bob-maintainer",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"credits[]"
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"displayName": "Alice Researcher",
|
||||
"role": "reporter",
|
||||
"contacts": [
|
||||
"mailto:alice.researcher@example.com"
|
||||
],
|
||||
"provenance": {
|
||||
"source": "nvd",
|
||||
"kind": "credit",
|
||||
"value": "nvd:alice-researcher",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"credits[]"
|
||||
]
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetrics": [],
|
||||
"exploitKnown": false,
|
||||
"language": "en",
|
||||
"modified": "2025-10-10T12:00:00+00:00",
|
||||
"provenance": [
|
||||
{
|
||||
"source": "nvd",
|
||||
"kind": "document",
|
||||
"value": "https://services.nvd.nist.gov/vuln/detail/CVE-2025-5555",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "nvd",
|
||||
"kind": "mapping",
|
||||
"value": "CVE-2025-5555",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"published": "2025-10-09T18:30:00+00:00",
|
||||
"references": [
|
||||
{
|
||||
"kind": "report",
|
||||
"provenance": {
|
||||
"source": "nvd",
|
||||
"kind": "reference",
|
||||
"value": "https://example.com/nvd/reference",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"references[]"
|
||||
]
|
||||
},
|
||||
"sourceTag": null,
|
||||
"summary": null,
|
||||
"url": "https://example.com/nvd/reference"
|
||||
},
|
||||
{
|
||||
"kind": "advisory",
|
||||
"provenance": {
|
||||
"source": "nvd",
|
||||
"kind": "reference",
|
||||
"value": "https://services.nvd.nist.gov/vuln/detail/CVE-2025-5555",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"references[]"
|
||||
]
|
||||
},
|
||||
"sourceTag": null,
|
||||
"summary": null,
|
||||
"url": "https://services.nvd.nist.gov/vuln/detail/CVE-2025-5555"
|
||||
}
|
||||
],
|
||||
"severity": "medium",
|
||||
"summary": "Credit parity regression fixture",
|
||||
"title": "Credit parity regression fixture"
|
||||
}
|
||||
@@ -0,0 +1,108 @@
|
||||
{
|
||||
"advisoryKey": "GHSA-credit-parity",
|
||||
"affectedPackages": [],
|
||||
"aliases": [
|
||||
"CVE-2025-5555",
|
||||
"GHSA-credit-parity"
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"displayName": "Bob Maintainer",
|
||||
"role": "remediation_developer",
|
||||
"contacts": [
|
||||
"https://github.com/acme/bob-maintainer"
|
||||
],
|
||||
"provenance": {
|
||||
"source": "osv",
|
||||
"kind": "credit",
|
||||
"value": "osv:bob-maintainer",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"credits[]"
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"displayName": "Alice Researcher",
|
||||
"role": "reporter",
|
||||
"contacts": [
|
||||
"mailto:alice.researcher@example.com"
|
||||
],
|
||||
"provenance": {
|
||||
"source": "osv",
|
||||
"kind": "credit",
|
||||
"value": "osv:alice-researcher",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"credits[]"
|
||||
]
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetrics": [],
|
||||
"exploitKnown": false,
|
||||
"language": "en",
|
||||
"modified": "2025-10-10T12:00:00+00:00",
|
||||
"provenance": [
|
||||
{
|
||||
"source": "osv",
|
||||
"kind": "document",
|
||||
"value": "https://osv.dev/vulnerability/GHSA-credit-parity",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "osv",
|
||||
"kind": "mapping",
|
||||
"value": "GHSA-credit-parity",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"published": "2025-10-09T18:30:00+00:00",
|
||||
"references": [
|
||||
{
|
||||
"kind": "advisory",
|
||||
"provenance": {
|
||||
"source": "osv",
|
||||
"kind": "reference",
|
||||
"value": "https://github.com/advisories/GHSA-credit-parity",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"references[]"
|
||||
]
|
||||
},
|
||||
"sourceTag": null,
|
||||
"summary": null,
|
||||
"url": "https://github.com/advisories/GHSA-credit-parity"
|
||||
},
|
||||
{
|
||||
"kind": "advisory",
|
||||
"provenance": {
|
||||
"source": "osv",
|
||||
"kind": "reference",
|
||||
"value": "https://osv.dev/vulnerability/GHSA-credit-parity",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2025-10-10T15:00:00+00:00",
|
||||
"fieldMask": [
|
||||
"references[]"
|
||||
]
|
||||
},
|
||||
"sourceTag": null,
|
||||
"summary": null,
|
||||
"url": "https://osv.dev/vulnerability/GHSA-credit-parity"
|
||||
}
|
||||
],
|
||||
"severity": "medium",
|
||||
"summary": "Credit parity regression fixture",
|
||||
"title": "Credit parity regression fixture"
|
||||
}
|
||||
Reference in New Issue
Block a user