Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Adding detection events for pombump #5195

Merged
merged 1 commit into from
Jun 6, 2024
Merged

Adding detection events for pombump #5195

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
74 changes: 46 additions & 28 deletions pombump.advisories.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,25 +4,23 @@ package:
name: pombump

advisories:
- id: CGA-cv3w-qqx7-wc25
- id: CGA-29r8-2q5f-v7hr
aliases:
- CVE-2023-45288
- GHSA-4v7x-pqxf-cx7m
- CVE-2024-36127
- GHSA-v6mg-7f7p-qmqp
events:
- timestamp: 2024-04-13T07:28:07Z
type: fixed
data:
fixed-version: 0.0.12-r1

- id: CGA-mm46-783r-22wr
aliases:
- CVE-2023-45289
- GHSA-32ch-6x54-q4h9
events:
- timestamp: 2024-03-12T09:17:04Z
type: fixed
- timestamp: 2024-06-06T08:19:21Z
type: detection
data:
fixed-version: 0.0.11-r1
type: scan/v1
data:
subpackageName: pombump
componentID: 855e28bcf93d3db7
componentName: chainguard.dev/apko
componentVersion: v0.14.1-0.20240210120952-623f9b1c1ae1
componentType: go-module
componentLocation: /usr/bin/pombump
scanner: grype

- id: CGA-5wg4-vh6x-p5ch
aliases:
Expand All @@ -34,30 +32,30 @@ advisories:
data:
fixed-version: 0.0.11-r1

- id: CGA-vjr3-r974-q274
- id: CGA-99j4-xxf7-xv78
aliases:
- CVE-2024-24783
- GHSA-3q2c-pvp5-3cqp
- CVE-2024-24785
- GHSA-j6m3-gc37-6r6q
events:
- timestamp: 2024-03-12T09:17:04Z
- timestamp: 2024-03-12T09:17:05Z
type: fixed
data:
fixed-version: 0.0.11-r1

- id: CGA-hmr9-cc47-4frq
- id: CGA-cv3w-qqx7-wc25
aliases:
- CVE-2024-24784
- GHSA-fgq5-q76c-gx78
- CVE-2023-45288
- GHSA-4v7x-pqxf-cx7m
events:
- timestamp: 2024-03-12T09:17:05Z
- timestamp: 2024-04-13T07:28:07Z
type: fixed
data:
fixed-version: 0.0.11-r1
fixed-version: 0.0.12-r1

- id: CGA-99j4-xxf7-xv78
- id: CGA-hmr9-cc47-4frq
aliases:
- CVE-2024-24785
- GHSA-j6m3-gc37-6r6q
- CVE-2024-24784
- GHSA-fgq5-q76c-gx78
events:
- timestamp: 2024-03-12T09:17:05Z
type: fixed
Expand All @@ -83,3 +81,23 @@ advisories:
type: fixed
data:
fixed-version: 0.0.12-r2

- id: CGA-mm46-783r-22wr
aliases:
- CVE-2023-45289
- GHSA-32ch-6x54-q4h9
events:
- timestamp: 2024-03-12T09:17:04Z
type: fixed
data:
fixed-version: 0.0.11-r1

- id: CGA-vjr3-r974-q274
aliases:
- CVE-2024-24783
- GHSA-3q2c-pvp5-3cqp
events:
- timestamp: 2024-03-12T09:17:04Z
type: fixed
data:
fixed-version: 0.0.11-r1