conversion for go records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 20, 2024 · 7d6a1b3 · 7d6a1b3
1 parent 35c5c4b
commit 7d6a1b3
Show file tree

Hide file tree

Showing 9 changed files with 455 additions and 0 deletions.
diff --git a/data/anchore/2023/CVE-2023-45288.json b/data/anchore/2023/CVE-2023-45288.json
@@ -0,0 +1,65 @@
+{
+  "additionalMetadata": {
+    "cna": "go",
+    "cveId": "CVE-2023-45288",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "http://www.openwall.com/lists/oss-security/2024/04/05/4",
+      "https://security.netapp.com/advisory/ntap-20240419-0009/",
+      "https://go.dev/cl/576155",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/",
+      "https://go.dev/issue/65051",
+      "https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M",
+      "https://pkg.go.dev/vuln/GO-2024-2687",
+      "http://www.openwall.com/lists/oss-security/2024/04/03/16"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "net/http",
+        "product": "net/http",
+        "vendor": "Go standard library",
+        "versions": [
+          {
+            "lessThan": "1.21.9",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "1.22.2",
+            "status": "affected",
+            "version": "1.22.0-0",
+            "versionType": "semver"
+          }
+        ]
+      },
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:golang:http2:*:*:*:*:*:go:*:*"
+        ],
+        "packageName": "golang.org/x/net/http2",
+        "product": "golang.org/x/net/http2",
+        "vendor": "golang.org/x/net",
+        "versions": [
+          {
+            "lessThan": "0.23.0",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-45289.json b/data/anchore/2023/CVE-2023-45289.json
@@ -0,0 +1,69 @@
+{
+  "additionalMetadata": {
+    "cna": "go",
+    "cveId": "CVE-2023-45289",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
+      "https://pkg.go.dev/vuln/GO-2024-2600",
+      "https://go.dev/cl/569340",
+      "http://www.openwall.com/lists/oss-security/2024/03/08/4",
+      "https://go.dev/issue/65065",
+      "https://security.netapp.com/advisory/ntap-20240329-0006/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "net/http",
+        "product": "net/http",
+        "vendor": "Go standard library",
+        "versions": [
+          {
+            "lessThan": "1.21.8",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "1.22.1",
+            "status": "affected",
+            "version": "1.22.0-0",
+            "versionType": "semver"
+          }
+        ]
+      },
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "net/http/cookiejar",
+        "product": "net/http/cookiejar",
+        "vendor": "Go standard library",
+        "versions": [
+          {
+            "lessThan": "1.21.8",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "1.22.1",
+            "status": "affected",
+            "version": "1.22.0-0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-45290.json b/data/anchore/2023/CVE-2023-45290.json
@@ -0,0 +1,46 @@
+{
+  "additionalMetadata": {
+    "cna": "go",
+    "cveId": "CVE-2023-45290",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
+      "https://go.dev/issue/65383",
+      "https://security.netapp.com/advisory/ntap-20240329-0004/",
+      "https://pkg.go.dev/vuln/GO-2024-2599",
+      "http://www.openwall.com/lists/oss-security/2024/03/08/4",
+      "https://go.dev/cl/569341"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "net/textproto",
+        "product": "net/textproto",
+        "vendor": "Go standard library",
+        "versions": [
+          {
+            "lessThan": "1.21.8",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "1.22.1",
+            "status": "affected",
+            "version": "1.22.0-0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-24783.json b/data/anchore/2024/CVE-2024-24783.json
@@ -0,0 +1,46 @@
+{
+  "additionalMetadata": {
+    "cna": "go",
+    "cveId": "CVE-2024-24783",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
+      "https://go.dev/issue/65390",
+      "https://go.dev/cl/569339",
+      "https://pkg.go.dev/vuln/GO-2024-2598",
+      "http://www.openwall.com/lists/oss-security/2024/03/08/4",
+      "https://security.netapp.com/advisory/ntap-20240329-0005/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "crypto/x509",
+        "product": "crypto/x509",
+        "vendor": "Go standard library",
+        "versions": [
+          {
+            "lessThan": "1.21.8",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "1.22.1",
+            "status": "affected",
+            "version": "1.22.0-0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-24784.json b/data/anchore/2024/CVE-2024-24784.json
@@ -0,0 +1,46 @@
+{
+  "additionalMetadata": {
+    "cna": "go",
+    "cveId": "CVE-2024-24784",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://go.dev/issue/65083",
+      "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
+      "https://pkg.go.dev/vuln/GO-2024-2609",
+      "http://www.openwall.com/lists/oss-security/2024/03/08/4",
+      "https://security.netapp.com/advisory/ntap-20240329-0007/",
+      "https://go.dev/cl/555596"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "net/mail",
+        "product": "net/mail",
+        "vendor": "Go standard library",
+        "versions": [
+          {
+            "lessThan": "1.21.8",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "1.22.1",
+            "status": "affected",
+            "version": "1.22.0-0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-24785.json b/data/anchore/2024/CVE-2024-24785.json
@@ -0,0 +1,46 @@
+{
+  "additionalMetadata": {
+    "cna": "go",
+    "cveId": "CVE-2024-24785",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
+      "https://pkg.go.dev/vuln/GO-2024-2610",
+      "https://go.dev/cl/564196",
+      "https://go.dev/issue/65697",
+      "http://www.openwall.com/lists/oss-security/2024/03/08/4",
+      "https://security.netapp.com/advisory/ntap-20240329-0008/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "html/template",
+        "product": "html/template",
+        "vendor": "Go standard library",
+        "versions": [
+          {
+            "lessThan": "1.21.8",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "1.22.1",
+            "status": "affected",
+            "version": "1.22.0-0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-24786.json b/data/anchore/2024/CVE-2024-24786.json
@@ -0,0 +1,55 @@
+{
+  "additionalMetadata": {
+    "cna": "go",
+    "cveId": "CVE-2024-24786",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "http://www.openwall.com/lists/oss-security/2024/03/08/4",
+      "https://pkg.go.dev/vuln/GO-2024-2611",
+      "https://go.dev/cl/569356",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:protobuf:protobuf:*:*:*:*:*:go:*:*"
+        ],
+        "packageName": "google.golang.org/protobuf/encoding/protojson",
+        "product": "google.golang.org/protobuf/encoding/protojson",
+        "vendor": "google.golang.org/protobuf",
+        "versions": [
+          {
+            "lessThan": "1.33.0",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      },
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "cpes": [
+          "cpe:2.3:a:protobuf:protobuf:*:*:*:*:*:go:*:*"
+        ],
+        "packageName": "google.golang.org/protobuf/internal/encoding/json",
+        "product": "google.golang.org/protobuf/internal/encoding/json",
+        "vendor": "google.golang.org/protobuf",
+        "versions": [
+          {
+            "lessThan": "1.33.0",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}