From cd8fc0a675ac01be2cc0620df9f2b8c8c08d2ba1 Mon Sep 17 00:00:00 2001 From: Helge Wehder Date: Fri, 1 Nov 2024 17:53:50 +0000 Subject: [PATCH] pySCG adding missing CVEs for 755 and 532 Signed-off-by: Helge Wehder --- docs/Secure-Coding-Guide-for-Python/readme.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/Secure-Coding-Guide-for-Python/readme.md b/docs/Secure-Coding-Guide-for-Python/readme.md index f216bcb3..ee778b86 100644 --- a/docs/Secure-Coding-Guide-for-Python/readme.md +++ b/docs/Secure-Coding-Guide-for-Python/readme.md @@ -49,7 +49,7 @@ It is **not production code** and requires code-style or python best practices t |[CWE-426: Untrusted Search Path](CWE-664/CWE-426/README.md)|[CVE-2015-1326](https://www.cvedetails.com/cve/CVE-2015-1326),
CVSSv3.0: **8.8**,
EPSS: **00.20** (23.11.2023)| |[CWE-501: Trust Boundary Violation)](CWE-664/CWE-501/README.md)|| |[CWE-502: Deserialization of Untrusted Data)](CWE-664/CWE-502/.)|| -|[CWE-532: Insertion of Sensitive Information into Log File](CWE-664/CWE-532/.)|| +|[CWE-532: Insertion of Sensitive Information into Log File](CWE-664/CWE-532/README.md)|[CVE-2023-45585](https://www.cvedetails.com/cve/CVE-2023-45585),
CVSSv3.1: **9.8**,
EPSS: **0.04** (01.11.2024)| |[CWE-665: Improper Initialization](CWE-664/CWE-665/README.md)|| |[CWE-681: Incorrect Conversion between Numeric Types](CWE-664/CWE-681/README.md)|| |[CWE-833: Deadlock](CWE-664/CWE-833/README.md)|| @@ -82,7 +82,7 @@ It is **not production code** and requires code-style or python best practices t |[CWE-390: Detection of Error Condition without Action](CWE-703/CWE-390/)|| |[CWE-392: Missing Report of Error Condition](CWE-703/CWE-392/README.md)|| |[CWE-754: Improper Check for Unusual or Exceptional Conditions](CWE-703/CWE-754/.)|| -|[CWE-755: Improper Handling of Exceptional Conditions](CWE-703/CWE-755/.)|| +|[CWE-755: Improper Handling of Exceptional Conditions](CWE-703/CWE-755/README.md)|[CVE-2024-39560](https://www.cvedetails.com/cve/CVE-2024-39560),
CVSSv3.1: **6.5**,
EPSS: **0.04** (01.11.2024)| |[CWE-707: Improper Neutralization](https://cwe.mitre.org/data/definitions/707.html)|Prominent CVE| |:----------------------------------------------------------------|:----|