From bca115a13a30e1bc0edb8db67881c6ddae2be9a0 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 06:46:49 -0400 Subject: [PATCH 1/3] Add ASP.NET Core NVD reference --- .../2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json b/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json index 8c6446e973224..8dbdeec8ee50e 100644 --- a/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json +++ b/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json @@ -139,6 +139,10 @@ "type": "WEB", "url": "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-59j7-ghrg-fj52" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319" + }, { "type": "WEB", "url": "https://github.com/dotnet/announcements/issues/290" @@ -157,4 +161,4 @@ "github_reviewed_at": "2024-01-09T19:35:02Z", "nvd_published_at": null } -} \ No newline at end of file +} From e1ccc0b9095b7a03277837d8bb17c673270ab421 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 11:13:54 -0400 Subject: [PATCH 2/3] Add ASP.NET Core fixed package references --- .../GHSA-59j7-ghrg-fj52.json | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json b/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json index 8dbdeec8ee50e..2b64dcc5a75e7 100644 --- a/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json +++ b/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json @@ -143,6 +143,30 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21319" }, + { + "type": "PACKAGE", + "url": "https://www.nuget.org/packages/System.IdentityModel.Tokens.Jwt/5.7.0" + }, + { + "type": "PACKAGE", + "url": "https://www.nuget.org/packages/System.IdentityModel.Tokens.Jwt/6.34.0" + }, + { + "type": "PACKAGE", + "url": "https://www.nuget.org/packages/System.IdentityModel.Tokens.Jwt/7.1.2" + }, + { + "type": "PACKAGE", + "url": "https://www.nuget.org/packages/Microsoft.IdentityModel.JsonWebTokens/5.7.0" + }, + { + "type": "PACKAGE", + "url": "https://www.nuget.org/packages/Microsoft.IdentityModel.JsonWebTokens/6.34.0" + }, + { + "type": "PACKAGE", + "url": "https://www.nuget.org/packages/Microsoft.IdentityModel.JsonWebTokens/7.1.2" + }, { "type": "WEB", "url": "https://github.com/dotnet/announcements/issues/290" From 7af2063298051ed499f236eee178ef04740d3fb2 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 20:11:49 -0400 Subject: [PATCH 3/3] Set ASP.NET Core NVD published timestamp --- .../2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json b/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json index 2b64dcc5a75e7..a6f70e2ee5ff3 100644 --- a/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json +++ b/advisories/github-reviewed/2024/01/GHSA-59j7-ghrg-fj52/GHSA-59j7-ghrg-fj52.json @@ -183,6 +183,6 @@ "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-01-09T19:35:02Z", - "nvd_published_at": null + "nvd_published_at": "2024-01-09T19:15:12Z" } }