diff --git a/advisories/unreviewed/2022/04/GHSA-9hg7-4gq8-ppp9/GHSA-9hg7-4gq8-ppp9.json b/advisories/unreviewed/2022/04/GHSA-9hg7-4gq8-ppp9/GHSA-9hg7-4gq8-ppp9.json index 77f96b5070b61..e4521d9c1ca7a 100644 --- a/advisories/unreviewed/2022/04/GHSA-9hg7-4gq8-ppp9/GHSA-9hg7-4gq8-ppp9.json +++ b/advisories/unreviewed/2022/04/GHSA-9hg7-4gq8-ppp9/GHSA-9hg7-4gq8-ppp9.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-9hg7-4gq8-ppp9", - "modified": "2022-04-12T00:01:03Z", + "modified": "2023-01-27T05:01:22Z", "published": "2022-04-03T00:00:57Z", "aliases": [ "CVE-2022-28355" ], + "summary": "scala-js: predictable UUID.randomUUID()", "details": "randomUUID in Scala.js before 1.10.0 generates predictable values.", "severity": [ { @@ -13,7 +14,65 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.scala-js:scalajs-library_2.13" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.10.0" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.scala-js:scalajs-library_2.12" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.10.0" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.scala-js:scalajs-library_2.11" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.10.0" + } + ] + } + ] + } + ], "references": [ { "type": "WEB", @@ -27,6 +86,10 @@ "type": "WEB", "url": "https://github.com/scala-js/scala-js/issues/4657" }, + { + "type": "PACKAGE", + "url": "https://github.com/scala-js/scala-js" + }, { "type": "WEB", "url": "https://github.com/scala-js/scala-js/releases"