cert-exporter.advisories.yaml

schema-version: 2.0.2

package:
  name: cert-exporter

advisories:
  - id: CGA-265w-mf4c-f2c9
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T10:41:19Z
        type: fixed
        data:
          fixed-version: 2.12.0-r6

  - id: CGA-29m7-c5g6-236m
    aliases:
      - CVE-2024-24786
      - GHSA-8r3f-844c-mc37
    events:
      - timestamp: 2024-03-14T08:19:48Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-exporter
            componentID: a45cfd41821d90c1
            componentName: google.golang.org/protobuf
            componentVersion: v1.31.0
            componentType: go-module
            componentLocation: /usr/bin/cert-exporter
            scanner: grype
      - timestamp: 2024-03-15T09:55:54Z
        type: fixed
        data:
          fixed-version: 2.12.0-r2

  - id: CGA-48gv-xf63-v6jh
    aliases:
      - CVE-2020-8559
      - GHSA-33c5-9fx5-fvjm
    events:
      - timestamp: 2024-04-25T09:18:55Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-exporter
            componentID: 2903f2804a8c3935
            componentName: k8s.io/apimachinery
            componentVersion: v0.28.3
            componentType: go-module
            componentLocation: /usr/bin/cert-exporter
            scanner: grype

  - id: CGA-4rhf-qfjr-32ph
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T07:35:52Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-exporter
            componentID: 2e7176280efef66c
            componentName: stdlib
            componentVersion: go1.22.6
            componentType: go-module
            componentLocation: /usr/bin/cert-exporter
            scanner: grype
      - timestamp: 2024-09-12T18:02:34Z
        type: fixed
        data:
          fixed-version: 2.13.0-r1

  - id: CGA-4vmq-v5cw-hfxx
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T10:41:16Z
        type: fixed
        data:
          fixed-version: 2.12.0-r6

  - id: CGA-73qx-8wqv-9c8h
    aliases:
      - CVE-2024-24783
      - GHSA-3q2c-pvp5-3cqp
    events:
      - timestamp: 2024-03-12T07:12:12Z
        type: fixed
        data:
          fixed-version: 2.12.0-r1

  - id: CGA-fjp8-4cc8-pw7x
    aliases:
      - CVE-2024-24788
      - GHSA-2jwv-jmq4-4j3r
    events:
      - timestamp: 2024-05-14T09:34:40Z
        type: fixed
        data:
          fixed-version: 2.12.0-r5

  - id: CGA-j3gf-5jj3-8994
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T07:35:44Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-exporter
            componentID: 2e7176280efef66c
            componentName: stdlib
            componentVersion: go1.22.6
            componentType: go-module
            componentLocation: /usr/bin/cert-exporter
            scanner: grype
      - timestamp: 2024-09-12T18:02:33Z
        type: fixed
        data:
          fixed-version: 2.13.0-r1

  - id: CGA-m8pc-8374-8h5q
    aliases:
      - CVE-2024-24787
      - GHSA-5fq7-4mxc-535h
    events:
      - timestamp: 2024-05-14T09:34:39Z
        type: fixed
        data:
          fixed-version: 2.12.0-r5

  - id: CGA-p4hr-87cf-ghjq
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T07:35:48Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-exporter
            componentID: 2e7176280efef66c
            componentName: stdlib
            componentVersion: go1.22.6
            componentType: go-module
            componentLocation: /usr/bin/cert-exporter
            scanner: grype
      - timestamp: 2024-09-12T18:02:33Z
        type: fixed
        data:
          fixed-version: 2.13.0-r1

  - id: CGA-p4r4-wvmq-hjfg
    aliases:
      - CVE-2023-45289
      - GHSA-32ch-6x54-q4h9
    events:
      - timestamp: 2024-03-12T07:12:13Z
        type: fixed
        data:
          fixed-version: 2.12.0-r1

  - id: CGA-prc3-cjjc-3vcx
    aliases:
      - CVE-2024-24784
      - GHSA-fgq5-q76c-gx78
    events:
      - timestamp: 2024-03-12T07:12:12Z
        type: fixed
        data:
          fixed-version: 2.12.0-r1

  - id: CGA-prrq-2p2r-w7g5
    aliases:
      - CVE-2024-24785
      - GHSA-j6m3-gc37-6r6q
    events:
      - timestamp: 2024-03-12T07:12:12Z
        type: fixed
        data:
          fixed-version: 2.12.0-r1

  - id: CGA-qh7x-gwrf-hfqm
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T07:01:20Z
        type: fixed
        data:
          fixed-version: 2.12.0-r7

  - id: CGA-rj32-9cf4-4q59
    aliases:
      - CVE-2023-45290
      - GHSA-rr6r-cfgf-gc6h
    events:
      - timestamp: 2024-03-12T07:12:11Z
        type: fixed
        data:
          fixed-version: 2.12.0-r1

  - id: CGA-vx6c-fm79-w26f
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-13T07:04:49Z
        type: fixed
        data:
          fixed-version: 2.12.0-r3