From 5651cf014995816d072d662cc3119f6371afbaa4 Mon Sep 17 00:00:00 2001
From: Yusuke Hayashi <yusuke8h@gmail.com>
Date: Tue, 28 Jul 2026 09:11:41 +0900
Subject: [PATCH] Add CWE-22 to GHSA-cpmr-mw4j-99r7

---
 .../2023/03/GHSA-cpmr-mw4j-99r7/GHSA-cpmr-mw4j-99r7.json  | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/advisories/github-reviewed/2023/03/GHSA-cpmr-mw4j-99r7/GHSA-cpmr-mw4j-99r7.json b/advisories/github-reviewed/2023/03/GHSA-cpmr-mw4j-99r7/GHSA-cpmr-mw4j-99r7.json
index 020d0d75e8356..91b0a22f8fde5 100644
--- a/advisories/github-reviewed/2023/03/GHSA-cpmr-mw4j-99r7/GHSA-cpmr-mw4j-99r7.json
+++ b/advisories/github-reviewed/2023/03/GHSA-cpmr-mw4j-99r7/GHSA-cpmr-mw4j-99r7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cpmr-mw4j-99r7",
-  "modified": "2023-03-24T22:04:02Z",
+  "modified": "2023-03-24T22:04:03Z",
   "published": "2023-03-24T22:04:02Z",
   "aliases": [],
   "summary": "Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/",
@@ -55,10 +55,12 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-22"
+    ],
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2023-03-24T22:04:02Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}