/
aws-ebs-csi-driver.advisories.yaml
153 lines (136 loc) · 3.37 KB
/
aws-ebs-csi-driver.advisories.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
schema-version: 2.0.2
package:
name: aws-ebs-csi-driver
advisories:
- id: CVE-2019-11255
aliases:
- GHSA-f4w6-3rh6-6q4q
events:
- timestamp: 2023-08-11T20:10:42Z
type: false-positive-determination
data:
type: component-vulnerability-mismatch
note: Vulnerable code is present in external-csi-driver which is outside of aws-ebs-csi-driver
- id: CVE-2020-8552
aliases:
- GHSA-82hx-w2r5-c2wq
events:
- timestamp: 2023-09-19T16:39:53Z
type: false-positive-determination
data:
type: vulnerable-code-not-included-in-package
note: Go vulndb has marked this code NOT_IMPORTABLE.
- id: CVE-2023-39325
aliases:
- GHSA-4374-p667-p6c8
events:
- timestamp: 2023-10-13T12:39:01Z
type: fixed
data:
fixed-version: 1.23.1-r4
- id: CVE-2023-3978
aliases:
- GHSA-2wrh-6pvc-2jm9
events:
- timestamp: 2023-10-13T12:38:16Z
type: fixed
data:
fixed-version: 1.23.1-r4
- id: CVE-2023-45283
aliases:
- GHSA-vvjp-q62m-2vph
events:
- timestamp: 2023-11-07T19:23:17Z
type: false-positive-determination
data:
type: vulnerable-code-not-included-in-package
note: Only affects Windows
- id: CVE-2023-45284
aliases:
- GHSA-rq3x-83w4-p28c
events:
- timestamp: 2023-11-07T19:23:19Z
type: false-positive-determination
data:
type: vulnerable-code-not-included-in-package
note: Only affects Windows
- id: CVE-2023-45288
aliases:
- GHSA-4v7x-pqxf-cx7m
events:
- timestamp: 2024-04-10T09:12:22Z
type: fixed
data:
fixed-version: 1.29.1-r1
- id: CVE-2023-45289
aliases:
- GHSA-32ch-6x54-q4h9
events:
- timestamp: 2024-03-12T07:08:16Z
type: fixed
data:
fixed-version: 1.28.0-r1
- id: CVE-2023-45290
aliases:
- GHSA-rr6r-cfgf-gc6h
events:
- timestamp: 2024-03-12T07:08:17Z
type: fixed
data:
fixed-version: 1.28.0-r1
- id: CVE-2023-47108
aliases:
- GHSA-8pgv-569h-w5rw
events:
- timestamp: 2023-11-17T10:01:34Z
type: fixed
data:
fixed-version: 1.25.0-r2
- id: CVE-2023-5528
aliases:
- GHSA-hq6q-c2x6-hmch
events:
- timestamp: 2023-11-17T10:01:52Z
type: fixed
data:
fixed-version: 1.25.0-r2
- id: CVE-2024-24783
aliases:
- GHSA-3q2c-pvp5-3cqp
events:
- timestamp: 2024-03-12T07:08:13Z
type: fixed
data:
fixed-version: 1.28.0-r1
- id: CVE-2024-24784
aliases:
- GHSA-fgq5-q76c-gx78
events:
- timestamp: 2024-03-12T07:08:14Z
type: fixed
data:
fixed-version: 1.28.0-r1
- id: CVE-2024-24785
aliases:
- GHSA-j6m3-gc37-6r6q
events:
- timestamp: 2024-03-12T07:08:15Z
type: fixed
data:
fixed-version: 1.28.0-r1
- id: CVE-2024-24786
aliases:
- GHSA-8r3f-844c-mc37
events:
- timestamp: 2024-03-15T15:52:59Z
type: fixed
data:
fixed-version: 1.28.0-r2
- id: CVE-2024-3177
aliases:
- GHSA-pxhw-596r-rwq5
events:
- timestamp: 2024-04-24T07:31:18Z
type: fixed
data:
fixed-version: 1.30.0-r0