/
cloudflared.advisories.yaml
158 lines (148 loc) · 4.21 KB
/
cloudflared.advisories.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
schema-version: 2.0.2
package:
name: cloudflared
advisories:
- id: CVE-2023-45283
aliases:
- GHSA-vvjp-q62m-2vph
events:
- timestamp: 2023-11-07T19:24:26Z
type: false-positive-determination
data:
type: vulnerable-code-not-included-in-package
note: Only affects Windows
- id: CVE-2023-45284
aliases:
- GHSA-rq3x-83w4-p28c
events:
- timestamp: 2023-11-07T19:24:27Z
type: false-positive-determination
data:
type: vulnerable-code-not-included-in-package
note: Only affects Windows
- id: CVE-2023-45288
aliases:
- GHSA-4v7x-pqxf-cx7m
events:
- timestamp: 2024-04-20T13:21:15Z
type: detection
data:
type: scan/v1
data:
subpackageName: cloudflared
componentID: ee42aff617c44488
componentName: golang.org/x/net
componentVersion: v0.19.0
componentType: go-module
componentLocation: /usr/bin/cloudflared
scanner: grype
- timestamp: 2024-04-20T15:39:57Z
type: fixed
data:
fixed-version: 2024.1.0-r8
- id: CVE-2023-48795
aliases:
- GHSA-45x7-px36-x8w8
events:
- timestamp: 2024-01-08T11:54:35Z
type: detection
data:
type: scan/v1
data:
subpackageName: cloudflared
componentID: 38ae55ba19d25ab9
componentName: golang.org/x/crypto
componentVersion: v0.16.0
componentType: go-module
componentLocation: /usr/bin/cloudflared
scanner: grype
- timestamp: 2024-01-26T07:06:35Z
type: fixed
data:
fixed-version: 2024.1.0-r1
- id: CVE-2024-0874
aliases:
- GHSA-m9w6-wp3h-vq8g
events:
- timestamp: 2024-05-06T07:43:49Z
type: detection
data:
type: scan/v1
data:
subpackageName: cloudflared
componentID: 74e035b807400206
componentName: github.com/coredns/coredns
componentVersion: v1.10.0
componentType: go-module
componentLocation: /usr/bin/cloudflared
scanner: grype
- timestamp: 2024-05-08T09:19:07Z
type: fixed
data:
fixed-version: 2024.1.0-r9
- id: CVE-2024-22189
aliases:
- GHSA-c33x-xqrf-c478
events:
- timestamp: 2024-04-10T09:12:36Z
type: fixed
data:
fixed-version: 2024.1.0-r7
- id: CVE-2024-24786
aliases:
- GHSA-8r3f-844c-mc37
events:
- timestamp: 2024-03-14T07:03:50Z
type: detection
data:
type: scan/v1
data:
subpackageName: cloudflared
componentID: d37cf71c04f7f40b
componentName: google.golang.org/protobuf
componentVersion: v1.31.0
componentType: go-module
componentLocation: /usr/bin/cloudflared
scanner: grype
- timestamp: 2024-03-14T15:21:22Z
type: fixed
data:
fixed-version: 2024.1.0-r5
- id: CVE-2024-28180
aliases:
- GHSA-c5q2-7r4c-mv6g
events:
- timestamp: 2024-03-08T07:12:50Z
type: detection
data:
type: scan/v1
data:
subpackageName: cloudflared
componentID: 692eb4bd8dd7e8b0
componentName: github.com/go-jose/go-jose/v3
componentVersion: v3.0.1
componentType: go-module
componentLocation: /usr/bin/cloudflared
scanner: grype
- timestamp: 2024-03-10T16:09:55Z
type: fixed
data:
fixed-version: 2024.1.0-r4
- id: GHSA-2c7c-3mj9-8fqh
events:
- timestamp: 2024-01-08T11:54:34Z
type: detection
data:
type: scan/v1
data:
subpackageName: cloudflared
componentID: 37c5a062f537ff89
componentName: github.com/go-jose/go-jose/v3
componentVersion: v3.0.0
componentType: go-module
componentLocation: /usr/bin/cloudflared
scanner: grype
- timestamp: 2024-01-26T07:06:35Z
type: fixed
data:
fixed-version: 2024.1.0-r1