Latest data: Thu Dec 7 08:04:25 UTC 2023

Homebrew · Dec 7, 2023 · 1af1606 · 1af1606
1 parent 2786bdd
commit 1af1606
Show file tree

Hide file tree

Showing 49 changed files with 432 additions and 155 deletions.
diff --git a/audits/alot-requirements.audit.json b/audits/alot-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "configobj",
       "version": "5.0.8",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -113,6 +112,10 @@
       {
         "ids": [
           "GHSA-c33w-24p9-8m24"
+        ],
+        "aliases": [
+          "CVE-2023-26112",
+          "GHSA-c33w-24p9-8m24"
         ]
       }
     ]
@@ -121,8 +124,7 @@
     "package": {
       "name": "twisted",
       "version": "23.8.0",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -444,6 +446,11 @@
         "ids": [
           "GHSA-xc8x-vp79-p3wm",
           "PYSEC-2023-224"
+        ],
+        "aliases": [
+          "CVE-2023-46137",
+          "GHSA-xc8x-vp79-p3wm",
+          "PYSEC-2023-224"
         ]
       }
     ]

diff --git a/audits/ansible-requirements.audit.json b/audits/ansible-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "kerberos",
       "version": "1.3.1",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -78,6 +77,11 @@
       {
         "ids": [
           "PYSEC-2017-49"
+        ],
+        "aliases": [
+          "CVE-2015-3206",
+          "PYSEC-2017-49",
+          "PYSEC-2017-66"
         ]
       }
     ]

diff --git a/audits/[email protected] b/audits/[email protected]
@@ -3,8 +3,7 @@
     "package": {
       "name": "kerberos",
       "version": "1.3.1",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -78,6 +77,11 @@
       {
         "ids": [
           "PYSEC-2017-49"
+        ],
+        "aliases": [
+          "CVE-2015-3206",
+          "PYSEC-2017-49",
+          "PYSEC-2017-66"
         ]
       }
     ]

diff --git a/audits/athenacli-requirements.audit.json b/audits/athenacli-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "configobj",
       "version": "5.0.8",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -113,6 +112,10 @@
       {
         "ids": [
           "GHSA-c33w-24p9-8m24"
+        ],
+        "aliases": [
+          "CVE-2023-26112",
+          "GHSA-c33w-24p9-8m24"
         ]
       }
     ]

diff --git a/audits/aws-shell-requirements.audit.json b/audits/aws-shell-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "configobj",
       "version": "5.0.8",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -113,6 +112,10 @@
       {
         "ids": [
           "GHSA-c33w-24p9-8m24"
+        ],
+        "aliases": [
+          "CVE-2023-26112",
+          "GHSA-c33w-24p9-8m24"
         ]
       }
     ]

diff --git a/audits/awscli-requirements.audit.json b/audits/awscli-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "cryptography",
       "version": "40.0.1",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -300,11 +299,20 @@
         "ids": [
           "GHSA-cf7p-gm2m-833m",
           "PYSEC-2023-112"
+        ],
+        "aliases": [
+          "CVE-2023-38325",
+          "GHSA-cf7p-gm2m-833m",
+          "PYSEC-2023-112"
         ]
       },
       {
         "ids": [
           "GHSA-jfhm-5ghh-2f97"
+        ],
+        "aliases": [
+          "CVE-2023-49083",
+          "GHSA-jfhm-5ghh-2f97"
         ]
       }
     ]

diff --git a/audits/azure-cli-requirements.audit.json b/audits/azure-cli-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "cryptography",
       "version": "41.0.4",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -133,6 +132,10 @@
       {
         "ids": [
           "GHSA-jfhm-5ghh-2f97"
+        ],
+        "aliases": [
+          "CVE-2023-49083",
+          "GHSA-jfhm-5ghh-2f97"
         ]
       }
     ]

diff --git a/audits/bbot-requirements.audit.json b/audits/bbot-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "ansible-core",
       "version": "2.14.11",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -215,6 +214,10 @@
       {
         "ids": [
           "GHSA-ww3m-ffrm-qvqv"
+        ],
+        "aliases": [
+          "CVE-2023-4237",
+          "GHSA-ww3m-ffrm-qvqv"
         ]
       }
     ]

diff --git a/audits/breezy-requirements.audit.json b/audits/breezy-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "configobj",
       "version": "5.0.8",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -113,6 +112,10 @@
       {
         "ids": [
           "GHSA-c33w-24p9-8m24"
+        ],
+        "aliases": [
+          "CVE-2023-26112",
+          "GHSA-c33w-24p9-8m24"
         ]
       }
     ]

diff --git a/audits/buku-requirements.audit.json b/audits/buku-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "werkzeug",
       "version": "2.3.6",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -392,6 +391,11 @@
         "ids": [
           "GHSA-hrfv-mqp8-q5rw",
           "PYSEC-2023-221"
+        ],
+        "aliases": [
+          "CVE-2023-46136",
+          "GHSA-hrfv-mqp8-q5rw",
+          "PYSEC-2023-221"
         ]
       }
     ]

diff --git a/audits/bzt-requirements.audit.json b/audits/bzt-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "urllib3",
       "version": "1.26.16",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -774,12 +773,22 @@
         "ids": [
           "GHSA-g4mx-q9vg-27p4",
           "PYSEC-2023-212"
+        ],
+        "aliases": [
+          "CVE-2023-45803",
+          "GHSA-g4mx-q9vg-27p4",
+          "PYSEC-2023-212"
         ]
       },
       {
         "ids": [
           "GHSA-v845-jxx5-vc9f",
           "PYSEC-2023-192"
+        ],
+        "aliases": [
+          "CVE-2023-43804",
+          "GHSA-v845-jxx5-vc9f",
+          "PYSEC-2023-192"
         ]
       }
     ]

diff --git a/audits/certbot-requirements.audit.json b/audits/certbot-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "configobj",
       "version": "5.0.8",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -113,6 +112,10 @@
       {
         "ids": [
           "GHSA-c33w-24p9-8m24"
+        ],
+        "aliases": [
+          "CVE-2023-26112",
+          "GHSA-c33w-24p9-8m24"
         ]
       }
     ]

diff --git a/audits/charm-tools-requirements.audit.json b/audits/charm-tools-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "pip",
       "version": "22.3.1",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -417,6 +416,12 @@
         "ids": [
           "GHSA-mq26-g339-26xf",
           "PYSEC-2023-228"
+        ],
+        "aliases": [
+          "BIT-pip-2023-5752",
+          "CVE-2023-5752",
+          "GHSA-mq26-g339-26xf",
+          "PYSEC-2023-228"
         ]
       }
     ]
@@ -425,8 +430,7 @@
     "package": {
       "name": "urllib3",
       "version": "2.0.6",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -822,6 +826,11 @@
         "ids": [
           "GHSA-g4mx-q9vg-27p4",
           "PYSEC-2023-212"
+        ],
+        "aliases": [
+          "CVE-2023-45803",
+          "GHSA-g4mx-q9vg-27p4",
+          "PYSEC-2023-212"
         ]
       }
     ]

diff --git a/audits/dstack-requirements.audit.json b/audits/dstack-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "git-url-parse",
       "version": "1.2.2",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -102,6 +101,10 @@
       {
         "ids": [
           "GHSA-4xqq-73wg-5mjp"
+        ],
+        "aliases": [
+          "CVE-2023-32758",
+          "GHSA-4xqq-73wg-5mjp"
         ]
       }
     ]

diff --git a/audits/duplicity-requirements.audit.json b/audits/duplicity-requirements.audit.json
@@ -3,8 +3,7 @@
     "package": {
       "name": "pydrive2",
       "version": "1.17.0",
-      "ecosystem": "PyPI",
-      "commit": ""
+      "ecosystem": "PyPI"
     },
     "vulnerabilities": [
       {
@@ -144,6 +143,10 @@
       {
         "ids": [
           "GHSA-v5f6-hjmf-9mc5"
+        ],
+        "aliases": [
+          "CVE-2023-49297",
+          "GHSA-v5f6-hjmf-9mc5"
         ]
       }
     ]