From a6311cddccff959683613143527eee5118e39149 Mon Sep 17 00:00:00 2001 From: Lukas Braune <9955029+lukas-braune@users.noreply.github.com> Date: Fri, 15 Dec 2023 15:49:34 +0100 Subject: [PATCH] Update CVSS score of RUSTSEC-2023-0071 CVSS score has been updated by the package maintainer: https://github.com/github/advisory-database/pull/3030 https://github.com/advisories/GHSA-c38w-74pg-36hr Moreover, there is a duplicate GHSA which should be mentioned as alias: https://github.com/advisories/GHSA-4grx-2x9w-596c --- crates/rsa/RUSTSEC-2023-0071.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/crates/rsa/RUSTSEC-2023-0071.md b/crates/rsa/RUSTSEC-2023-0071.md index 85d7dc28b..4356af15d 100644 --- a/crates/rsa/RUSTSEC-2023-0071.md +++ b/crates/rsa/RUSTSEC-2023-0071.md @@ -7,8 +7,8 @@ keywords = ["cryptography"] categories = ["crypto-failure"] url = "https://github.com/RustCrypto/RSA/issues/19#issuecomment-1822995643" references = ["https://people.redhat.com/~hkario/marvin/"] -cvss = "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" -aliases = ["CVE-2023-49092", "GHSA-c38w-74pg-36hr"] +cvss = "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" +aliases = ["CVE-2023-49092", "GHSA-c38w-74pg-36hr", "GHSA-4grx-2x9w-596c"] [versions] patched = []