-
Notifications
You must be signed in to change notification settings - Fork 61
/
cert-manager-1.13.advisories.yaml
174 lines (161 loc) · 4.39 KB
/
cert-manager-1.13.advisories.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
schema-version: 2.0.2
package:
name: cert-manager-1.13
advisories:
- id: CGA-rp7w-g86x-hpg4
aliases:
- CVE-2019-25210
- GHSA-jw44-4f3j-q396
events:
- timestamp: 2024-03-06T07:12:32Z
type: detection
data:
type: scan/v1
data:
subpackageName: cmctl-1.13
componentID: 9e52fb76e7c198d1
componentName: helm.sh/helm/v3
componentVersion: v3.14.2
componentType: go-module
componentLocation: /usr/bin/cmctl
scanner: grype
- timestamp: 2024-03-26T16:35:18Z
type: false-positive-determination
data:
type: vulnerability-record-analysis-contested
note: 'This is not a vulnerability. Learn more about the response from Helm: https://helm.sh/blog/response-cve-2019-25210'
- id: CGA-rwv7-vh72-vwm9
aliases:
- CVE-2023-44487
- GHSA-m425-mq94-257g
- GHSA-qppj-fm5r-hxr3
events:
- timestamp: 2023-11-01T14:31:12Z
type: fixed
data:
fixed-version: 1.13.2-r0
- id: CGA-qgxj-cvp8-qv6q
aliases:
- CVE-2023-45142
- GHSA-rcjv-mgp8-qvmr
events:
- timestamp: 2023-10-19T12:35:15Z
type: fixed
data:
fixed-version: 1.13.1-r4
- id: CGA-wp6w-c785-mh6v
aliases:
- CVE-2023-45283
- GHSA-vvjp-q62m-2vph
events:
- timestamp: 2023-11-07T19:24:04Z
type: false-positive-determination
data:
type: vulnerable-code-not-included-in-package
note: Only affects Windows
- id: CGA-cpxm-w9x4-52vg
aliases:
- CVE-2023-45284
- GHSA-rq3x-83w4-p28c
events:
- timestamp: 2023-11-07T19:24:06Z
type: false-positive-determination
data:
type: vulnerable-code-not-included-in-package
note: Only affects Windows
- id: CGA-wm75-8mm3-grrc
aliases:
- CVE-2023-47108
- GHSA-8pgv-569h-w5rw
events:
- timestamp: 2023-11-16T14:22:49Z
type: fixed
data:
fixed-version: 1.13.2-r1
- id: CGA-pcmg-5p64-vqhv
aliases:
- CVE-2023-48795
- GHSA-45x7-px36-x8w8
events:
- timestamp: 2023-12-19T16:58:38Z
type: fixed
data:
fixed-version: 1.13.3-r1
- id: CGA-8rq6-52v7-wgv4
aliases:
- CVE-2024-25620
- GHSA-v53g-5gjp-272r
events:
- timestamp: 2024-02-16T07:13:46Z
type: detection
data:
type: scan/v1
data:
subpackageName: cmctl-1.13
componentID: e7ddd3c5ccbddf71
componentName: helm.sh/helm/v3
componentVersion: v3.12.3
componentType: go-module
componentLocation: /usr/bin/cmctl
scanner: grype
- timestamp: 2024-02-22T17:45:29Z
type: fixed
data:
fixed-version: 1.13.3-r3
- id: CGA-crc8-wfgr-263v
aliases:
- CVE-2024-26147
- GHSA-r53h-jv2g-vpx6
events:
- timestamp: 2024-02-23T07:17:24Z
type: detection
data:
type: scan/v1
data:
subpackageName: cmctl-1.13
componentID: 3012c3d7648f7741
componentName: helm.sh/helm/v3
componentVersion: v3.14.1
componentType: go-module
componentLocation: /usr/bin/cmctl
scanner: grype
- timestamp: 2024-02-23T17:49:42Z
type: fixed
data:
fixed-version: 1.13.4-r0
- id: CGA-6933-x86j-v4cp
aliases:
- GHSA-2c7c-3mj9-8fqh
events:
- timestamp: 2023-11-23T08:31:08Z
type: fixed
data:
fixed-version: 1.13.2-r2
- id: CGA-hh2r-78q9-94gw
aliases:
- GHSA-7ww5-4wqc-m92c
events:
- timestamp: 2024-01-11T07:17:36Z
type: detection
data:
type: scan/v1
data:
subpackageName: cmctl-1.13
componentID: 88e1fd4d413b10c6
componentName: github.com/containerd/containerd
componentVersion: v1.7.6
componentType: go-module
componentLocation: /usr/bin/cmctl
scanner: grype
- timestamp: 2024-01-25T07:03:55Z
type: fixed
data:
fixed-version: 1.13.3-r2
- id: CGA-q338-c2wq-w785
aliases:
- GHSA-jq35-85cj-fj4p
events:
- timestamp: 2023-11-16T14:21:46Z
type: fixed
data:
fixed-version: 1.13.2-r1