Update CWE and severity of two vulns

RetireJS · Apr 23, 2024 · 11f13ca · 11f13ca
1 parent 3e793c6
commit 11f13ca
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 7 deletions.
diff --git a/repository/jsrepository-master.json b/repository/jsrepository-master.json
@@ -5438,7 +5438,7 @@
           }
         ],
         "summary": "Prototype Pollution in lodash",
-        "cwe": ["CWE-20"],
+        "cwe": ["CWE-1321", "CWE-20"],
         "severity": "high",
         "identifiers": {
           "CVE": ["CVE-2019-10744"],
@@ -5464,8 +5464,8 @@
           }
         ],
         "summary": "Prototype Pollution in lodash",
-        "cwe": ["CWE-471"],
-        "severity": "low",
+        "cwe": ["CWE-471", "CWE-1321"],
+        "severity": "medium",
         "identifiers": {
           "CVE": ["CVE-2018-3721"],
           "githubID": "GHSA-fvqr-27wr-82fm"

diff --git a/repository/jsrepository-v2.json b/repository/jsrepository-v2.json
@@ -6908,9 +6908,10 @@
       {
         "below": "4.17.5",
         "cwe": [
-          "CWE-471"
+          "CWE-471",
+          "CWE-1321"
         ],
-        "severity": "low",
+        "severity": "medium",
         "identifiers": {
           "summary": "Prototype Pollution in lodash",
           "CVE": [
@@ -6977,6 +6978,7 @@
       {
         "below": "4.17.12",
         "cwe": [
+          "CWE-1321",
           "CWE-20"
         ],
         "severity": "high",

diff --git a/repository/jsrepository.json b/repository/jsrepository.json
@@ -6843,9 +6843,10 @@
       {
         "below": "4.17.5",
         "cwe": [
-          "CWE-471"
+          "CWE-471",
+          "CWE-1321"
         ],
-        "severity": "low",
+        "severity": "medium",
         "identifiers": {
           "summary": "Prototype Pollution in lodash",
           "CVE": [
@@ -6912,6 +6913,7 @@
       {
         "below": "4.17.12",
         "cwe": [
+          "CWE-1321",
           "CWE-20"
         ],
         "severity": "high",