aws-cli-v2.advisories.yaml

schema-version: 2.0.2

package:
  name: aws-cli-v2

advisories:
  - id: CGA-xf7f-vmw9-399q
    aliases:
      - CVE-2023-6597
      - GHSA-797f-63wg-8chv
    events:
      - timestamp: 2024-03-25T18:52:05Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-cli-v2
            componentID: d308222d66b99a12
            componentName: python
            componentVersion: 3.11.8
            componentType: binary
            componentLocation: /usr/lib/aws-cli/libpython3.11.so.1.0
            scanner: grype
      - timestamp: 2024-04-03T23:07:24Z
        type: fixed
        data:
          fixed-version: 2.15.35-r0

  - id: CGA-xv5j-x8p3-phrw
    aliases:
      - CVE-2024-0450
      - GHSA-jm46-725r-hh9v
    events:
      - timestamp: 2024-03-25T18:52:06Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-cli-v2
            componentID: d308222d66b99a12
            componentName: python
            componentVersion: 3.11.8
            componentType: binary
            componentLocation: /usr/lib/aws-cli/libpython3.11.so.1.0
            scanner: grype
      - timestamp: 2024-04-03T23:08:29Z
        type: fixed
        data:
          fixed-version: 2.15.35-r0

  - id: CGA-rfw8-45wc-66gm
    aliases:
      - CVE-2024-4030
      - GHSA-2w87-6hh6-mqrj
    events:
      - timestamp: 2024-05-14T07:35:09Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-cli-v2
            componentID: 2987fd22393b3a94
            componentName: python
            componentVersion: 3.11.9
            componentType: binary
            componentLocation: /usr/lib/aws-cli/libpython3.11.so.1.0
            scanner: grype
      - timestamp: 2024-05-15T14:46:55Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows.