Skip to content

Commit e0d78a2

Browse files
tatianabtatianab
committed
data/excluded,data/reports: add 10 reports
 - data/excluded/GO-2024-2890.yaml - data/excluded/GO-2024-2892.yaml - data/excluded/GO-2024-2893.yaml - data/excluded/GO-2024-2894.yaml - data/excluded/GO-2024-2895.yaml - data/excluded/GO-2024-2896.yaml - data/excluded/GO-2024-2897.yaml - data/reports/GO-2024-2922.yaml - data/reports/GO-2024-2923.yaml - data/excluded/GO-2024-2925.yaml Fixes #2890 Fixes #2892 Fixes #2893 Fixes #2894 Fixes #2895 Fixes #2896 Fixes #2897 Fixes #2922 Fixes #2923 Fixes #2925 Change-Id: Ice699e7a8ddc84e18684a19a15e7ada897f3596f Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/592765 LUCI-TryBot-Result: Go LUCI <[email protected]> Reviewed-by: Damien Neil <[email protected]>
1 parent 4ec3107 commit e0d78a2

12 files changed

+224
-0
lines changed

‎data/excluded/GO-2024-2890.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
id: GO-2024-2890
2+
excluded: NOT_GO_CODE
3+
modules:
4+
- module: github.com/envoyproxy/envoy
5+
cves:
6+
- CVE-2024-23326

‎data/excluded/GO-2024-2892.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
id: GO-2024-2892
2+
excluded: NOT_GO_CODE
3+
modules:
4+
- module: github.com/envoyproxy/envoy
5+
cves:
6+
- CVE-2024-32974

‎data/excluded/GO-2024-2893.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
id: GO-2024-2893
2+
excluded: NOT_GO_CODE
3+
modules:
4+
- module: github.com/envoyproxy/envoy
5+
cves:
6+
- CVE-2024-32975

‎data/excluded/GO-2024-2894.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
id: GO-2024-2894
2+
excluded: NOT_GO_CODE
3+
modules:
4+
- module: github.com/envoyproxy/envoy
5+
cves:
6+
- CVE-2024-32976

‎data/excluded/GO-2024-2895.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
id: GO-2024-2895
2+
excluded: NOT_GO_CODE
3+
modules:
4+
- module: github.com/envoyproxy/envoy
5+
cves:
6+
- CVE-2024-34362

‎data/excluded/GO-2024-2896.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
id: GO-2024-2896
2+
excluded: NOT_GO_CODE
3+
modules:
4+
- module: github.com/envoyproxy/envoy
5+
cves:
6+
- CVE-2024-34363

‎data/excluded/GO-2024-2897.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
id: GO-2024-2897
2+
excluded: NOT_GO_CODE
3+
modules:
4+
- module: github.com/envoyproxy/envoy
5+
cves:
6+
- CVE-2024-34364

‎data/excluded/GO-2024-2925.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
id: GO-2024-2925
2+
excluded: NOT_GO_CODE
3+
modules:
4+
- module: github.com/apache/airflow
5+
cves:
6+
- CVE-2024-25142

‎data/osv/GO-2024-2922.json

+84
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,84 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2024-2922",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2024-37307",
8+
"GHSA-wh78-7948-358j"
9+
],
10+
"summary": "Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium",
11+
"details": "Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/cilium/cilium",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "1.13.0"
24+
},
25+
{
26+
"fixed": "1.13.17"
27+
},
28+
{
29+
"introduced": "1.14.0"
30+
},
31+
{
32+
"fixed": "1.14.12"
33+
},
34+
{
35+
"introduced": "1.15.0"
36+
},
37+
{
38+
"fixed": "1.15.6"
39+
}
40+
]
41+
}
42+
],
43+
"ecosystem_specific": {}
44+
}
45+
],
46+
"references": [
47+
{
48+
"type": "ADVISORY",
49+
"url": "https://github.com/cilium/cilium/security/advisories/GHSA-wh78-7948-358j"
50+
},
51+
{
52+
"type": "ADVISORY",
53+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37307"
54+
},
55+
{
56+
"type": "FIX",
57+
"url": "https://github.com/cilium/cilium/commit/0191b1ebcfdd61cefd06da0315a0e7d504167407"
58+
},
59+
{
60+
"type": "FIX",
61+
"url": "https://github.com/cilium/cilium/commit/224e288a5bf40d0bb0f16c9413693b319633431a"
62+
},
63+
{
64+
"type": "FIX",
65+
"url": "https://github.com/cilium/cilium/commit/9299c0fd0024e33397cffc666ff851e82af28741"
66+
},
67+
{
68+
"type": "FIX",
69+
"url": "https://github.com/cilium/cilium/commit/958d7b77274bf2c272d8cdfd812631d644250653"
70+
},
71+
{
72+
"type": "FIX",
73+
"url": "https://github.com/cilium/cilium/commit/9eb25ba40391a9b035d7e66401b862818f4aac4b"
74+
},
75+
{
76+
"type": "FIX",
77+
"url": "https://github.com/cilium/cilium/commit/bf9a1ae1b2d2b2c9cca329d7aa96aa4858032a61"
78+
}
79+
],
80+
"database_specific": {
81+
"url": "https://pkg.go.dev/vuln/GO-2024-2922",
82+
"review_status": "UNREVIEWED"
83+
}
84+
}

‎data/osv/GO-2024-2923.json

+47
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2024-2923",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"GHSA-85rg-8m6h-825p"
8+
],
9+
"summary": "Vulnerabilities with the k8sGPT in github.com/k8sgpt-ai/k8sgpt",
10+
"details": "Vulnerabilities with the k8sGPT in github.com/k8sgpt-ai/k8sgpt",
11+
"affected": [
12+
{
13+
"package": {
14+
"name": "github.com/k8sgpt-ai/k8sgpt",
15+
"ecosystem": "Go"
16+
},
17+
"ranges": [
18+
{
19+
"type": "SEMVER",
20+
"events": [
21+
{
22+
"introduced": "0"
23+
},
24+
{
25+
"fixed": "0.3.33"
26+
}
27+
]
28+
}
29+
],
30+
"ecosystem_specific": {}
31+
}
32+
],
33+
"references": [
34+
{
35+
"type": "ADVISORY",
36+
"url": "https://github.com/k8sgpt-ai/k8sgpt/security/advisories/GHSA-85rg-8m6h-825p"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://github.com/k8sgpt-ai/k8sgpt/releases/tag/v0.3.33"
41+
}
42+
],
43+
"database_specific": {
44+
"url": "https://pkg.go.dev/vuln/GO-2024-2923",
45+
"review_status": "UNREVIEWED"
46+
}
47+
}

‎data/reports/GO-2024-2922.yaml

+29
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
id: GO-2024-2922
2+
modules:
3+
- module: github.com/cilium/cilium
4+
versions:
5+
- introduced: 1.13.0
6+
fixed: 1.13.17
7+
- introduced: 1.14.0
8+
fixed: 1.14.12
9+
- introduced: 1.15.0
10+
fixed: 1.15.6
11+
vulnerable_at: 1.15.5
12+
summary: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium
13+
cves:
14+
- CVE-2024-37307
15+
ghsas:
16+
- GHSA-wh78-7948-358j
17+
references:
18+
- advisory: https://github.com/cilium/cilium/security/advisories/GHSA-wh78-7948-358j
19+
- advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-37307
20+
- fix: https://github.com/cilium/cilium/commit/0191b1ebcfdd61cefd06da0315a0e7d504167407
21+
- fix: https://github.com/cilium/cilium/commit/224e288a5bf40d0bb0f16c9413693b319633431a
22+
- fix: https://github.com/cilium/cilium/commit/9299c0fd0024e33397cffc666ff851e82af28741
23+
- fix: https://github.com/cilium/cilium/commit/958d7b77274bf2c272d8cdfd812631d644250653
24+
- fix: https://github.com/cilium/cilium/commit/9eb25ba40391a9b035d7e66401b862818f4aac4b
25+
- fix: https://github.com/cilium/cilium/commit/bf9a1ae1b2d2b2c9cca329d7aa96aa4858032a61
26+
source:
27+
id: GHSA-wh78-7948-358j
28+
created: 2024-06-14T13:47:58.347002-04:00
29+
review_status: UNREVIEWED

‎data/reports/GO-2024-2923.yaml

+16
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
id: GO-2024-2923
2+
modules:
3+
- module: github.com/k8sgpt-ai/k8sgpt
4+
versions:
5+
- fixed: 0.3.33
6+
vulnerable_at: 0.3.32
7+
summary: Vulnerabilities with the k8sGPT in github.com/k8sgpt-ai/k8sgpt
8+
ghsas:
9+
- GHSA-85rg-8m6h-825p
10+
references:
11+
- advisory: https://github.com/k8sgpt-ai/k8sgpt/security/advisories/GHSA-85rg-8m6h-825p
12+
- web: https://github.com/k8sgpt-ai/k8sgpt/releases/tag/v0.3.33
13+
source:
14+
id: GHSA-85rg-8m6h-825p
15+
created: 2024-06-14T13:47:55.972779-04:00
16+
review_status: UNREVIEWED

0 commit comments

Comments
 (0)