addon-resizer.advisories.yaml

schema-version: 2.0.2

package:
  name: addon-resizer

advisories:
  - id: CGA-6pp8-fjrm-gjvc
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T09:11:04Z
        type: fixed
        data:
          fixed-version: 1.8.21-r1

  - id: CGA-78gf-x5gp-8fw8
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T21:23:49Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: 86f92a06ac2b7622
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2024-09-12T19:04:21Z
        type: fixed
        data:
          fixed-version: 1.8.22-r2

  - id: CGA-7r4j-52c3-q459
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T07:10:39Z
        type: fixed
        data:
          fixed-version: 1.8.22-r1

  - id: CGA-c33r-655h-735v
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T21:23:46Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: 86f92a06ac2b7622
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2024-09-12T19:04:22Z
        type: fixed
        data:
          fixed-version: 1.8.22-r2

  - id: CGA-qj6c-p38g-3p9c
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-20T11:03:15Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: e9f2f6256b30ed90
            componentName: golang.org/x/net
            componentVersion: v0.17.0
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2024-04-23T17:01:12Z
        type: fixed
        data:
          fixed-version: 1.8.20-r1

  - id: CGA-rww9-3384-v6g8
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T09:11:03Z
        type: fixed
        data:
          fixed-version: 1.8.21-r1

  - id: CGA-v46w-436g-m6x6
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T21:23:52Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: 86f92a06ac2b7622
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2024-09-12T19:04:21Z
        type: fixed
        data:
          fixed-version: 1.8.22-r2