diff --git a/2022/36xxx/CVE-2022-36354.json b/2022/36xxx/CVE-2022-36354.json
new file mode 100644
index 00000000000..58a2f0a242a
--- /dev/null
+++ b/2022/36xxx/CVE-2022-36354.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-36354",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/2022/38xxx/CVE-2022-38143.json b/2022/38xxx/CVE-2022-38143.json
new file mode 100644
index 00000000000..951c856eb06
--- /dev/null
+++ b/2022/38xxx/CVE-2022-38143.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-38143",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/2022/39xxx/CVE-2022-39268.json b/2022/39xxx/CVE-2022-39268.json
index d3f18a41023..dbf324bfec0 100644
--- a/2022/39xxx/CVE-2022-39268.json
+++ b/2022/39xxx/CVE-2022-39268.json
@@ -38,7 +38,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "### Impact\nIn a CSRF attack, an innocent end user is tricked by an attacker into submitting a web request that they did not intend. This may cause actions to be performed on the website that can include inadvertent client or server data leakage, change of session state, or manipulation of an end user's account.\n\n### Patch\nUpgrade to v2022.09.10 to patch this vulnerability.\n\n### Workarounds\nRebuild and redeploy the Orchest `auth-server` with this commit: https://github.com/orchest/orchest/commit/c2587a963cca742c4a2503bce4cfb4161bf64c2d\n\n### References\nhttps://en.wikipedia.org/wiki/Cross-site_request_forgery\nhttps://cwe.mitre.org/data/definitions/352.html\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in https://github.com/orchest/orchest\n* Email us at rick@orchest.io"
+                "value": "### Impact In a CSRF attack, an innocent end user is tricked by an attacker into submitting a web request that they did not intend. This may cause actions to be performed on the website that can include inadvertent client or server data leakage, change of session state, or manipulation of an end user's account. ### Patch Upgrade to v2022.09.10 to patch this vulnerability. ### Workarounds Rebuild and redeploy the Orchest `auth-server` with this commit: https://github.com/orchest/orchest/commit/c2587a963cca742c4a2503bce4cfb4161bf64c2d ### References https://en.wikipedia.org/wiki/Cross-site_request_forgery https://cwe.mitre.org/data/definitions/352.html ### For more information If you have any questions or comments about this advisory: * Open an issue in https://github.com/orchest/orchest * Email us at rick@orchest.io"
             }
         ]
     },
diff --git a/2022/41xxx/CVE-2022-41649.json b/2022/41xxx/CVE-2022-41649.json
new file mode 100644
index 00000000000..eb66b334576
--- /dev/null
+++ b/2022/41xxx/CVE-2022-41649.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-41649",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/2022/41xxx/CVE-2022-41977.json b/2022/41xxx/CVE-2022-41977.json
new file mode 100644
index 00000000000..da876541b72
--- /dev/null
+++ b/2022/41xxx/CVE-2022-41977.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-41977",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/2022/41xxx/CVE-2022-41981.json b/2022/41xxx/CVE-2022-41981.json
new file mode 100644
index 00000000000..3f1726df17c
--- /dev/null
+++ b/2022/41xxx/CVE-2022-41981.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-41981",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file