bat.advisories.yaml

schema-version: 2.0.2

package:
  name: bat

advisories:
  - id: CGA-43ph-jx68-3744
    aliases:
      - GHSA-r24f-hg58-vfrw
    events:
      - timestamp: 2024-07-29T10:02:20Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: bat
            componentID: 35e8914690b59d16
            componentName: unsafe-libyaml
            componentVersion: 0.2.9
            componentType: rust-crate
            componentLocation: /usr/bin/bat
            scanner: grype
      - timestamp: 2024-09-18T17:12:33Z
        type: fixed
        data:
          fixed-version: 0.24.0-r2

  - id: CGA-m7f9-c4cx-xpg5
    aliases:
      - GHSA-2rxc-gjrp-vjhx
    events:
      - timestamp: 2024-12-05T09:08:28Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: bat
            componentID: 69003bee6e05f6c0
            componentName: anstream
            componentVersion: 0.6.4
            componentType: rust-crate
            componentLocation: /usr/bin/bat
            scanner: grype
      - timestamp: 2024-12-05T10:17:35Z
        type: fixed
        data:
          fixed-version: 0.24.0-r4

  - id: CGA-mgr7-q997-phwg
    aliases:
      - GHSA-22q8-ghmq-63vf
    events:
      - timestamp: 2024-07-29T10:02:19Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: bat
            componentID: b302aa420d4a50d4
            componentName: libgit2-sys
            componentVersion: 0.16.1+1.7.1
            componentType: rust-crate
            componentLocation: /usr/bin/bat
            scanner: grype
      - timestamp: 2024-09-18T17:12:32Z
        type: fixed
        data:
          fixed-version: 0.24.0-r2

  - id: CGA-v6mw-hgx5-276v
    aliases:
      - CVE-2024-12224
      - GHSA-h97m-ww89-6jmq
    events:
      - timestamp: 2024-12-11T07:02:07Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: bat
            componentID: a44e69cf2318210a
            componentName: idna
            componentVersion: 0.3.0
            componentType: rust-crate
            componentLocation: /usr/bin/bat
            scanner: grype

  - id: CGA-x4w6-x2c3-9pgc
    aliases:
      - CVE-2024-43806
      - GHSA-c827-hfw6-qwvm
    events:
      - timestamp: 2024-07-29T10:02:20Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: bat
            componentID: 1a04d52e625e2a9e
            componentName: rustix
            componentVersion: 0.38.11
            componentType: rust-crate
            componentLocation: /usr/bin/bat
            scanner: grype
      - timestamp: 2024-09-18T17:12:32Z
        type: fixed
        data:
          fixed-version: 0.24.0-r2