Skip to content

Commit 8df4953

Browse files
1 parent a0624ac commit 8df4953

File tree

4 files changed

+32
-11
lines changed

4 files changed

+32
-11
lines changed

advisories/unreviewed/2026/04/GHSA-32x4-hg4x-w43c/GHSA-32x4-hg4x-w43c.json

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-32x4-hg4x-w43c",
4-
"modified": "2026-04-09T00:31:59Z",
4+
"modified": "2026-04-11T06:31:13Z",
55
"published": "2026-04-09T00:31:59Z",
66
"aliases": [
77
"CVE-2026-5875"
88
],
99
"details": "Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -24,8 +29,10 @@
2429
}
2530
],
2631
"database_specific": {
27-
"cwe_ids": [],
28-
"severity": null,
32+
"cwe_ids": [
33+
"CWE-639"
34+
],
35+
"severity": "MODERATE",
2936
"github_reviewed": false,
3037
"github_reviewed_at": null,
3138
"nvd_published_at": "2026-04-08T22:16:27Z"

advisories/unreviewed/2026/04/GHSA-9wcm-fcg4-668c/GHSA-9wcm-fcg4-668c.json

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-9wcm-fcg4-668c",
4-
"modified": "2026-04-09T00:31:59Z",
4+
"modified": "2026-04-11T06:31:14Z",
55
"published": "2026-04-09T00:31:59Z",
66
"aliases": [
77
"CVE-2026-5876"
88
],
99
"details": "Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -27,7 +32,7 @@
2732
"cwe_ids": [
2833
"CWE-1300"
2934
],
30-
"severity": null,
35+
"severity": "MODERATE",
3136
"github_reviewed": false,
3237
"github_reviewed_at": null,
3338
"nvd_published_at": "2026-04-08T22:16:27Z"

advisories/unreviewed/2026/04/GHSA-gxc3-xj8w-g58j/GHSA-gxc3-xj8w-g58j.json

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-gxc3-xj8w-g58j",
4-
"modified": "2026-04-09T00:32:00Z",
4+
"modified": "2026-04-11T06:31:13Z",
55
"published": "2026-04-09T00:31:59Z",
66
"aliases": [
77
"CVE-2026-5874"
88
],
99
"details": "Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -27,7 +32,7 @@
2732
"cwe_ids": [
2833
"CWE-416"
2934
],
30-
"severity": null,
35+
"severity": "CRITICAL",
3136
"github_reviewed": false,
3237
"github_reviewed_at": null,
3338
"nvd_published_at": "2026-04-08T22:16:27Z"

advisories/unreviewed/2026/04/GHSA-hjxq-7w9q-2jw6/GHSA-hjxq-7w9q-2jw6.json

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-hjxq-7w9q-2jw6",
4-
"modified": "2026-04-10T18:31:20Z",
4+
"modified": "2026-04-11T06:31:14Z",
55
"published": "2026-04-10T18:31:20Z",
66
"aliases": [
77
"CVE-2026-1502"
@@ -34,6 +34,10 @@
3434
{
3535
"type": "WEB",
3636
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "http://www.openwall.com/lists/oss-security/2026/04/11/4"
3741
}
3842
],
3943
"database_specific": {

0 commit comments

Comments
 (0)