1 line
1.7 KiB
JSON
1 line
1.7 KiB
JSON
{"schema_version":"1.9.0","id":"GHSA-rc7v-65v6-m2v3","published":"2024-10-28T15:12:22Z","modified":"2024-11-08T17:25:16Z","withdrawn":"2024-11-08T17:25:16Z","summary":"Withdrawn Advisory: go-mysql affected by go.uuid's Predictable UUID Identifiers","details":"## Withdrawn Advisory\n\nThis advisory has been withdrawn because the vulnerability does not affect a released version of the `github.com/go-mysql-org/go-mysql` package. For more information, see https://github.com/github/advisory-database/pull/4990.\n\n## Original Advisory\n\nAffected by CVE-2021-3538","affected":[{"package":{"name":"github.com/go-mysql-org/go-mysql","ecosystem":"Go","purl":"pkg:golang/github.com/go-mysql-org/go-mysql"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.5.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/10/GHSA-rc7v-65v6-m2v3/GHSA-rc7v-65v6-m2v3.json"}}],"references":[{"type":"WEB","url":"https://github.com/apptainer/sif/security/advisories/GHSA-33m6-q9v5-62r7"},{"type":"WEB","url":"https://github.com/go-mysql-org/go-mysql/security/advisories/GHSA-rc7v-65v6-m2v3"},{"type":"WEB","url":"https://github.com/hpcng/sif/security/advisories/GHSA-33m6-q9v5-62r7"},{"type":"WEB","url":"https://github.com/github/advisory-database/pull/4990"},{"type":"PACKAGE","url":"https://github.com/go-mysql-org/go-mysql"}],"database_specific":{"cwe_ids":["CWE-338"],"github_reviewed":true,"github_reviewed_at":"2024-10-28T15:12:22Z","nvd_published_at":null,"severity":"CRITICAL"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]} |