GHSA-9cxr-76pm-j3wf: more accurate version ranges

Based on the machine-readable ranges in https://www.cve.org/CVERecord?id=CVE-2024-53299
github · Jan 28, 2025 · 5648328 · 5648328
1 parent 9d9fbcb
commit 5648328
Showing 1 changed file with 43 additions and 5 deletions.
diff --git a/advisories/github-reviewed/2025/01/GHSA-9cxr-76pm-j3wf/GHSA-9cxr-76pm-j3wf.json b/advisories/github-reviewed/2025/01/GHSA-9cxr-76pm-j3wf/GHSA-9cxr-76pm-j3wf.json
@@ -23,10 +23,48 @@
               "introduced": "7.0.0"
             },
             {
-              "fixed": "9.19.0"
+              "fixed": "7.19.0"
             }
-          ]
-        }
+	  ]
+	}
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.wicket:wicket-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "8.0.0-M1"
+            },
+            {
+              "fixed": "8.17.0"
+            }
+	  ]
+	}
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.wicket:wicket-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "9.0.0-M1"
+            },
+            {
+              "fixed": "9.18.0"
+            }
+	  ]
+	}
       ]
     },
     {
@@ -39,7 +77,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "10.0.0"
+              "introduced": "10.0.0-M1"
             },
             {
               "fixed": "10.3.0"
@@ -76,4 +114,4 @@
     "github_reviewed_at": "2025-01-23T22:31:09Z",
     "nvd_published_at": "2025-01-23T09:15:07Z"
   }
-}
+}