Latest data: Fri Nov 10 08:03:31 UTC 2023

Homebrew · Nov 10, 2023 · dc9241b · dc9241b
1 parent fa23bdf
commit dc9241b
Show file tree

Hide file tree

Showing 18 changed files with 500 additions and 2,656 deletions.
diff --git a/audits/anime-downloader-requirements.audit.json b/audits/anime-downloader-requirements.audit.json
diff --git a/audits/dvc-requirements.audit.json b/audits/dvc-requirements.audit.json
diff --git a/audits/esphome-requirements.audit.json b/audits/esphome-requirements.audit.json
@@ -0,0 +1,122 @@
+[
+  {
+    "package": {
+      "name": "esptool",
+      "version": "4.6.2",
+      "ecosystem": "PyPI",
+      "commit": ""
+    },
+    "vulnerabilities": [
+      {
+        "modified": "2023-11-09T22:26:48Z",
+        "published": "2023-11-09T18:34:55Z",
+        "schema_version": "1.6.0",
+        "id": "GHSA-3f38-96qm-r3fw",
+        "aliases": [
+          "CVE-2023-46894"
+        ],
+        "summary": "esptool allows attackers to view sensitive information via weak cryptographic algorithm",
+        "details": "An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.",
+        "affected": [
+          {
+            "package": {
+              "ecosystem": "PyPI",
+              "name": "esptool",
+              "purl": "pkg:pypi/esptool"
+            },
+            "ranges": [
+              {
+                "type": "ECOSYSTEM",
+                "events": [
+                  {
+                    "introduced": "0"
+                  },
+                  {
+                    "last_affected": "4.6.2"
+                  }
+                ]
+              }
+            ],
+            "versions": [
+              "1.0.0",
+              "1.0.1",
+              "1.1",
+              "1.2",
+              "1.2.1",
+              "1.3",
+              "2.0",
+              "2.0.1",
+              "2.1",
+              "2.2",
+              "2.2.1",
+              "2.3",
+              "2.3.1",
+              "2.4.0",
+              "2.4.1",
+              "2.5.0",
+              "2.5.1",
+              "2.6",
+              "2.7",
+              "2.8",
+              "3.0",
+              "3.1",
+              "3.2",
+              "3.3",
+              "3.3.1",
+              "3.3.2",
+              "3.3.3",
+              "4.0",
+              "4.0.1",
+              "4.1",
+              "4.2",
+              "4.2.1",
+              "4.3",
+              "4.4",
+              "4.5",
+              "4.5.1",
+              "4.5.dev0",
+              "4.5.dev1",
+              "4.5.dev2",
+              "4.5.dev3",
+              "4.6",
+              "4.6.1",
+              "4.6.2",
+              "4.6.dev1"
+            ],
+            "database_specific": {
+              "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/11/GHSA-3f38-96qm-r3fw/GHSA-3f38-96qm-r3fw.json"
+            }
+          }
+        ],
+        "references": [
+          {
+            "type": "ADVISORY",
+            "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46894"
+          },
+          {
+            "type": "WEB",
+            "url": "https://github.com/espressif/esptool/issues/926"
+          },
+          {
+            "type": "PACKAGE",
+            "url": "https://github.com/espressif/esptool"
+          }
+        ],
+        "database_specific": {
+          "cwe_ids": [],
+          "github_reviewed": true,
+          "github_reviewed_at": "2023-11-09T22:10:33Z",
+          "nvd_published_at": "2023-11-09T16:15:34Z",
+          "severity": "MODERATE"
+        }
+      }
+    ],
+    "groups": [
+      {
+        "ids": [
+          "GHSA-3f38-96qm-r3fw"
+        ]
+      }
+    ]
+  }
+]