Publish Advisories

GHSA-9gcf-pq99-rjw3
GHSA-qh4q-fwf8-qqrw
GHSA-5v95-j4rr-6f3c
GHSA-w596-4wvx-j9j6
GHSA-36gx-9q6h-g429
GHSA-c9rc-mg46-23w3
GHSA-36fq-jgmw-4r9c
GHSA-xh5w-g8gq-r3v9

Author: advisory-database[bot]

advisories/github-reviewed/2022/05/GHSA-9gcf-pq99-rjw3/GHSA-9gcf-pq99-rjw3.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9gcf-pq99-rjw3",
-  "modified": "2024-10-21T21:24:39Z",
+  "modified": "2026-05-29T20:48:18Z",
   "published": "2022-05-17T01:27:10Z",
   "aliases": [
     "CVE-2014-1604"
@@ -47,6 +47,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/alex/rply"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rply/PYSEC-2014-117.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rply/PYSEC-2014-17.yaml"

advisories/github-reviewed/2022/05/GHSA-qh4q-fwf8-qqrw/GHSA-qh4q-fwf8-qqrw.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qh4q-fwf8-qqrw",
-  "modified": "2024-11-26T18:51:15Z",
+  "modified": "2026-05-29T20:48:32Z",
   "published": "2022-05-17T05:48:31Z",
   "aliases": [
     "CVE-2010-3198"
@@ -79,6 +79,10 @@
       "type": "WEB",
       "url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope/PYSEC-2010-32.yaml"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope/PYSEC-2010-33.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/zopefoundation/Zope"

advisories/github-reviewed/2022/09/GHSA-5v95-j4rr-6f3c/GHSA-5v95-j4rr-6f3c.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5v95-j4rr-6f3c",
-  "modified": "2024-10-25T21:29:22Z",
+  "modified": "2026-05-29T20:49:26Z",
   "published": "2022-09-27T00:00:17Z",
   "aliases": [
     "CVE-2022-3290"
@@ -56,6 +56,10 @@
       "type": "WEB",
       "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-292.yaml"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43184.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5"

advisories/github-reviewed/2022/10/GHSA-w596-4wvx-j9j6/GHSA-w596-4wvx-j9j6.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-w596-4wvx-j9j6",
-  "modified": "2025-08-01T20:34:12Z",
+  "modified": "2026-05-29T20:49:54Z",
   "published": "2022-10-16T12:00:23Z",
   "withdrawn": "2025-08-01T20:34:11Z",
   "aliases": [
@@ -65,6 +65,10 @@
       "type": "WEB",
       "url": "https://github.com/pypa/advisory-database/tree/main/vulns/py/PYSEC-2022-42969.yaml"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/py/PYSEC-2022-43183.yaml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/pytest-dev/py"

advisories/github-reviewed/2023/02/GHSA-36gx-9q6h-g429/GHSA-36gx-9q6h-g429.json

@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-36gx-9q6h-g429",
-  "modified": "2024-11-18T23:08:13Z",
+  "modified": "2026-05-29T20:49:19Z",
   "published": "2023-02-28T23:18:37Z",
   "aliases": [
     "CVE-2022-39228"
   ],
   "summary": "vantage6 vulnerable to Observable Response Discrepancy",
-  "details": "### Impact\nWe are incorporating the password policies listed in https://github.com/vantage6/vantage6/issues/59. One measure is that we don't let the user know in case of wrong username/password combination if the username actually exists, to prevent that bots can guess usernames. However, if a wrong password is entered a number of times, the user account is blocked temporarily. This way you could still find out which usernames exist.\n\n### Patches\nUpdate to 3.8.0+\n\n### Workarounds\nNo\n\n### References\nhttps://github.com/vantage6/vantage6/issues/59\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [vantage6@iknl.nl](mailto:vantage6@iknl.nl)\n",
+  "details": "### Impact\nWe are incorporating the password policies listed in https://github.com/vantage6/vantage6/issues/59. One measure is that we don't let the user know in case of wrong username/password combination if the username actually exists, to prevent that bots can guess usernames. However, if a wrong password is entered a number of times, the user account is blocked temporarily. This way you could still find out which usernames exist.\n\n### Patches\nUpdate to 3.8.0+\n\n### Workarounds\nNo\n\n### References\nhttps://github.com/vantage6/vantage6/issues/59\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [vantage6@iknl.nl](mailto:vantage6@iknl.nl)",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -60,6 +60,10 @@
       "type": "WEB",
       "url": "https://github.com/vantage6/vantage6/commit/ab4381c35d24add06f75d5a8a284321f7a340bd2"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-313.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-52.yaml"

advisories/github-reviewed/2025/08/GHSA-c9rc-mg46-23w3/GHSA-c9rc-mg46-23w3.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c9rc-mg46-23w3",
-  "modified": "2025-08-12T19:33:07Z",
+  "modified": "2026-05-29T20:50:08Z",
   "published": "2025-08-12T19:33:07Z",
   "aliases": [
     "CVE-2025-8747"
@@ -56,6 +56,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/keras-team/keras"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/keras/PYSEC-2025-75.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://jfrog.com/blog/keras-safe_mode-bypass-vulnerability"

advisories/github-reviewed/2025/09/GHSA-36fq-jgmw-4r9c/GHSA-36fq-jgmw-4r9c.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-36fq-jgmw-4r9c",
-  "modified": "2025-09-23T21:30:06Z",
+  "modified": "2026-05-29T20:50:12Z",
   "published": "2025-09-19T09:31:14Z",
   "aliases": [
     "CVE-2025-9906"
@@ -60,6 +60,10 @@
       "type": "WEB",
       "url": "https://github.com/keras-team/keras/releases/tag/v3.11.0"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/keras/PYSEC-2025-76.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://osv.dev/vulnerability/CVE-2025-9906"

advisories/github-reviewed/2025/11/GHSA-xh5w-g8gq-r3v9/GHSA-xh5w-g8gq-r3v9.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xh5w-g8gq-r3v9",
-  "modified": "2026-03-19T21:23:17Z",
+  "modified": "2026-05-29T20:50:19Z",
   "published": "2025-11-24T18:31:14Z",
   "aliases": [
     "CVE-2025-13609"
@@ -91,6 +91,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/keylime/keylime/releases/tag/v7.13.0"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/keylime/PYSEC-2025-77.yaml"
     }
   ],
   "database_specific": {