Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding detection events for chartmuseum #3201

Merged
merged 1 commit into from Mar 22, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
57 changes: 38 additions & 19 deletions chartmuseum.advisories.yaml
Expand Up @@ -82,6 +82,23 @@ advisories:
data:
fixed-version: 0.16.1-r4

- id: CVE-2024-24557
aliases:
- GHSA-xw73-rw38-6vjc
events:
- timestamp: 2024-03-22T07:18:34Z
type: detection
data:
type: scan/v1
data:
subpackageName: chartmuseum
componentID: e8713d467cb089c5
componentName: github.com/docker/docker
componentVersion: v24.0.7+incompatible
componentType: go-module
componentLocation: /usr/bin/chartmuseum
scanner: grype

- id: CVE-2024-24783
aliases:
- GHSA-3q2c-pvp5-3cqp
Expand Down Expand Up @@ -109,6 +126,27 @@ advisories:
data:
fixed-version: 0.16.1-r4

- id: CVE-2024-24786
aliases:
- GHSA-8r3f-844c-mc37
events:
- timestamp: 2024-03-14T07:08:26Z
type: detection
data:
type: scan/v1
data:
subpackageName: chartmuseum
componentID: 03eb8e87cf063a9d
componentName: google.golang.org/protobuf
componentVersion: v1.31.0
componentType: go-module
componentLocation: /usr/bin/chartmuseum
scanner: grype
- timestamp: 2024-03-14T15:22:59Z
type: fixed
data:
fixed-version: 0.16.1-r5

- id: CVE-2024-25620
aliases:
- GHSA-v53g-5gjp-272r
Expand Down Expand Up @@ -151,25 +189,6 @@ advisories:
data:
fixed-version: 0.16.1-r3

- id: GHSA-8r3f-844c-mc37
events:
- timestamp: 2024-03-14T07:08:26Z
type: detection
data:
type: scan/v1
data:
subpackageName: chartmuseum
componentID: 03eb8e87cf063a9d
componentName: google.golang.org/protobuf
componentVersion: v1.31.0
componentType: go-module
componentLocation: /usr/bin/chartmuseum
scanner: grype
- timestamp: 2024-03-14T15:22:59Z
type: fixed
data:
fixed-version: 0.16.1-r5

- id: GHSA-jq35-85cj-fj4p
events:
- timestamp: 2023-12-27T14:29:46Z
Expand Down