cert-manager-cmctl.advisories.yaml

schema-version: 2.0.2

package:
  name: cert-manager-cmctl

advisories:
  - id: CGA-42cx-g8v6-7mgw
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T08:10:13Z
        type: fixed
        data:
          fixed-version: 2.1.0-r1

  - id: CGA-5jrj-8hcw-p545
    aliases:
      - GHSA-xr7q-jx4m-x55m
    events:
      - timestamp: 2024-07-10T08:31:33Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-manager-cmctl
            componentID: 0c73a9d2eded7826
            componentName: google.golang.org/grpc
            componentVersion: v1.64.0
            componentType: go-module
            componentLocation: /usr/bin/cmctl
            scanner: grype
      - timestamp: 2024-07-10T11:09:16Z
        type: fixed
        data:
          fixed-version: 2.1.0-r2

  - id: CGA-j894-rcfx-pjc4
    aliases:
      - CVE-2024-41110
      - GHSA-v23v-6jw2-98fq
    events:
      - timestamp: 2024-07-31T07:15:31Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-manager-cmctl
            componentID: 7fba67ab771c14b7
            componentName: github.com/docker/docker
            componentVersion: v24.0.9+incompatible
            componentType: go-module
            componentLocation: /usr/bin/cmctl
            scanner: grype
      - timestamp: 2024-08-02T23:28:30Z
        type: fixed
        data:
          fixed-version: 2.1.0-r3

  - id: CGA-q5mw-g9q3-hrf7
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T16:24:34Z
        type: fixed
        data:
          fixed-version: 2.1.1-r0

  - id: CGA-vwrq-mm2j-mh53
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T16:24:33Z
        type: fixed
        data:
          fixed-version: 2.1.1-r0

  - id: CGA-x4w2-pv3w-g2p6
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T16:24:31Z
        type: fixed
        data:
          fixed-version: 2.1.1-r0