feat: append additional references to NVD override record

Appends additional urls to the override record. These should be considered
in addition to whatever already exists on the upstream NVD record

Signed-off-by: Weston Steimel <[email protected]>

data/2013/CVE-2013-0269.json

@@ -62,6 +62,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/advisories/GHSA-x457-cw4h-hq5f"
+      }
     ]
   }
 }

data/2014/CVE-2014-125110.json

@@ -22,6 +22,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a85eec18-49cc-44c0-ac86-ccc192a621a0?source=cve"
+      }
     ]
   }
 }

data/2018/CVE-2018-5158.json

@@ -99,6 +99,20 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/advisories/GHSA-7jg2-jgv3-fmr4"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/mozilla/pdf.js/pull/9659"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/mozilla/pdf.js/commit/2dc4af525d1612c98afcd1e6bee57d4788f78f97"
+      }
     ]
   }
 }

data/2020/CVE-2020-10663.json

@@ -34,6 +34,16 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663/"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/advisories/GHSA-jphg-qwrw-7w9g"
+      }
     ]
   }
 }

data/2020/CVE-2020-13597.json

@@ -148,6 +148,16 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://www.tigera.io/security-bulletins-tta-2020-001"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/advisories/GHSA-pf59-j7c2-rh6x"
+      }
     ]
   }
 }

data/2020/CVE-2020-5529.json

@@ -34,6 +34,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/advisories/GHSA-5mh9-r3rr-9597"
+      }
     ]
   }
 }

data/2021/CVE-2021-22897.json

@@ -135,6 +135,16 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://curl.se/docs/CVE-2021-22897.json"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://advisory.splunk.com/advisories/SVD-2023-0809"
+      }
     ]
   }
 }

data/2021/CVE-2021-22898.json

@@ -135,6 +135,16 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://curl.se/docs/CVE-2021-22898.json"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://advisory.splunk.com/advisories/SVD-2023-0809"
+      }
     ]
   }
 }

data/2021/CVE-2021-22901.json

@@ -135,6 +135,16 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://curl.se/docs/CVE-2021-22901.json"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://advisory.splunk.com/advisories/SVD-2023-0809"
+      }
     ]
   }
 }

data/2021/CVE-2021-31799.json

@@ -37,6 +37,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/advisories/GHSA-ggxm-pgc9-g7fp"
+      }
     ]
   }
 }

data/2021/CVE-2021-33194.json

@@ -22,6 +22,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://pkg.go.dev/vuln/GO-2021-0238"
+      }
     ]
   }
 }

data/2021/CVE-2021-37519.json

@@ -22,6 +22,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/memcached/memcached/commit/ddee3e27a031be22f5f28c160be18fd3cb9bc63d"
+      }
     ]
   }
 }

data/2022/CVE-2022-1462.json

@@ -121,6 +121,16 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/b6da31b2c07c46f2dcad1d86caa835227a16d9ff"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://ubuntu.com/security/CVE-2022-1462"
+      }
     ]
   }
 }

data/2022/CVE-2022-21427.json

@@ -85,6 +85,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://mariadb.com/kb/en/security/"
+      }
     ]
   }
 }

data/2022/CVE-2022-21451.json

@@ -85,6 +85,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://mariadb.com/kb/en/security/"
+      }
     ]
   }
 }

data/2022/CVE-2022-21595.json

@@ -99,6 +99,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://mariadb.com/kb/en/security/"
+      }
     ]
   }
 }

data/2022/CVE-2022-2274.json

@@ -40,6 +40,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/advisories/GHSA-735f-pg76-fxc4"
+      }
     ]
   }
 }

data/2022/CVE-2022-27774.json

@@ -54,6 +54,16 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://curl.se/docs/CVE-2022-27774.json"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://advisory.splunk.com/advisories/SVD-2023-0809"
+      }
     ]
   }
 }

data/2022/CVE-2022-27775.json

@@ -54,6 +54,16 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://curl.se/docs/CVE-2022-27775.json"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://advisory.splunk.com/advisories/SVD-2023-0809"
+      }
     ]
   }
 }

data/2022/CVE-2022-27778.json

@@ -96,6 +96,16 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://curl.se/docs/CVE-2022-27778.json"
+      },
+      {
+        "source": "anchoreadp",
+        "url": "https://advisory.splunk.com/advisories/SVD-2023-0809"
+      }
     ]
   }
 }

data/2022/CVE-2022-38055.json

@@ -34,6 +34,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/83cb1333-3c74-426d-9838-a5cb90be29b2?source=cve"
+      }
     ]
   }
 }

data/2022/CVE-2022-3996.json

@@ -40,6 +40,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://github.com/advisories/GHSA-vr8j-hgmm-jh9r"
+      }
     ]
   }
 }

data/2022/CVE-2022-40211.json

@@ -22,6 +22,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b30261e0-1fa1-4794-98f6-851532b7615c?source=cve"
+      }
     ]
   }
 }

data/2022/CVE-2022-43453.json

@@ -34,6 +34,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4eeed189-3c57-4f23-bb6c-3e84603a83fb?source=cve"
+      }
     ]
   }
 }

data/2022/CVE-2022-44581.json

@@ -34,6 +34,12 @@
           }
         ]
       }
+    ],
+    "references": [
+      {
+        "source": "anchoreadp",
+        "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/662ca451-5c69-4973-afc8-5dc1caf57ad7?source=cve"
+      }
     ]
   }
 }