az.advisories.yaml

schema-version: 2.0.2

package:
  name: az

advisories:
  - id: CVE-2023-50782
    aliases:
      - GHSA-3ww4-gg4f-jr7f
    events:
      - timestamp: 2024-02-07T07:04:48Z
        type: fixed
        data:
          fixed-version: 2.57.0-r0

  - id: CVE-2024-0727
    aliases:
      - GHSA-9v9h-cgj8-h64p
    events:
      - timestamp: 2024-02-17T07:03:06Z
        type: fixed
        data:
          fixed-version: 2.57.0-r0

  - id: CVE-2024-26130
    aliases:
      - GHSA-6vqw-3v5j-54x4
    events:
      - timestamp: 2024-02-22T07:52:30Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: az
            componentID: 80dfa92ea72185c4
            componentName: cryptography
            componentVersion: 42.0.2
            componentType: python
            componentLocation: /usr/share/az/.venv/lib/python3.11/site-packages/cryptography-42.0.2.dist-info/METADATA, /usr/share/az/.venv/lib/python3.11/site-packages/cryptography-42.0.2.dist-info/RECORD, /usr/share/az/.venv/lib/python3.11/site-packages/cryptography-42.0.2.dist-info/top_level.txt
            scanner: grype
      - timestamp: 2024-03-05T04:04:00Z
        type: fixed
        data:
          fixed-version: 2.58.0-r0

  - id: CVE-2024-3651
    aliases:
      - GHSA-jjg7-2v4v-x38h
    events:
      - timestamp: 2024-04-14T07:14:25Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: az
            componentID: 3f18f59888c8bc37
            componentName: idna
            componentVersion: "3.6"
            componentType: python
            componentLocation: /usr/share/az/.venv/lib/python3.11/site-packages/idna-3.6.dist-info/METADATA, /usr/share/az/.venv/lib/python3.11/site-packages/idna-3.6.dist-info/RECORD
            scanner: grype
      - timestamp: 2024-04-30T07:00:26Z
        type: fixed
        data:
          fixed-version: 2.60.0-r0