From babe30d2168855382e30fd6a10d1bf79c1805413 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 07:08:37 -0400 Subject: [PATCH 1/2] Add SPID AspNetCore fixed package references --- .../GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2025/02/GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json b/advisories/github-reviewed/2025/02/GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json index e2310f6268939..84c39a179ea9c 100644 --- a/advisories/github-reviewed/2025/02/GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json +++ b/advisories/github-reviewed/2025/02/GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json @@ -43,10 +43,22 @@ "type": "WEB", "url": "https://github.com/italia/spid-aspnetcore/security/advisories/GHSA-36h8-r92j-w9vw" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24894" + }, { "type": "WEB", "url": "https://github.com/italia/spid-aspnetcore/commit/093efa2273f8a1e0481f678a0bfcd57fbdc7b029" }, + { + "type": "WEB", + "url": "https://github.com/italia/spid-aspnetcore/releases/tag/3.4.0" + }, + { + "type": "WEB", + "url": "https://www.nuget.org/packages/SPID.AspNetCore.Authentication/3.4.0" + }, { "type": "PACKAGE", "url": "https://github.com/italia/spid-aspnetcore" @@ -61,4 +73,4 @@ "github_reviewed_at": "2025-02-18T19:25:13Z", "nvd_published_at": null } -} \ No newline at end of file +} From 47ef36d351a0e4c168da066f01b037917cd55f1d Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 19:13:15 -0400 Subject: [PATCH 2/2] Set SPID AspNetCore NVD published timestamp --- .../2025/02/GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2025/02/GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json b/advisories/github-reviewed/2025/02/GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json index 84c39a179ea9c..41b9e38364f28 100644 --- a/advisories/github-reviewed/2025/02/GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json +++ b/advisories/github-reviewed/2025/02/GHSA-36h8-r92j-w9vw/GHSA-36h8-r92j-w9vw.json @@ -71,6 +71,6 @@ "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2025-02-18T19:25:13Z", - "nvd_published_at": null + "nvd_published_at": "2025-02-18T19:15:28Z" } }