azuredisk-csi-1.31.advisories.yaml

schema-version: 2.0.2

package:
  name: azuredisk-csi-1.31

advisories:
  - id: CGA-52q6-rp99-g282
    aliases:
      - CVE-2024-45338
      - GHSA-w32m-9786-jp63
    events:
      - timestamp: 2024-12-19T18:35:20Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azuredisk-csi-1.31
            componentID: 2371aae620e97aac
            componentName: golang.org/x/net
            componentVersion: v0.31.0
            componentType: go-module
            componentLocation: /usr/bin/azurediskplugin
            scanner: grype
      - timestamp: 2024-12-20T11:24:28Z
        type: fixed
        data:
          fixed-version: 1.31.1-r2

  - id: CGA-7pp9-w933-vxgj
    aliases:
      - CVE-2024-51744
      - GHSA-29wx-vh33-7x7r
    events:
      - timestamp: 2024-11-05T07:18:42Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azuredisk-csi-1.31-compat
            componentID: 6bb641c4b965cb56
            componentName: github.com/golang-jwt/jwt/v4
            componentVersion: v4.5.0
            componentType: go-module
            componentLocation: /usr/bin/azurediskplugin
            scanner: grype
      - timestamp: 2024-11-07T09:10:44Z
        type: fixed
        data:
          fixed-version: 1.31.0-r3

  - id: CGA-9q5r-g32c-5pxh
    aliases:
      - CVE-2024-45336
      - GHSA-7wrw-r4p8-38rx
    events:
      - timestamp: 2025-01-31T07:29:15Z
        type: fixed
        data:
          fixed-version: 1.31.2-r1

  - id: CGA-hcjv-vr4m-rwhf
    aliases:
      - CVE-2024-45341
      - GHSA-3f6r-qh9c-x6mm
    events:
      - timestamp: 2025-01-31T07:29:17Z
        type: fixed
        data:
          fixed-version: 1.31.2-r1

  - id: CGA-m3xj-72mw-5r55
    aliases:
      - CVE-2025-0426
      - GHSA-jgfp-53c3-624w
    events:
      - timestamp: 2025-02-14T10:24:57Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azuredisk-csi-1.31
            componentID: 124f3ac14eb5ac1c
            componentName: k8s.io/kubernetes
            componentVersion: v1.31.2
            componentType: go-module
            componentLocation: /usr/bin/azurediskplugin
            scanner: grype
      - timestamp: 2025-02-14T11:17:50Z
        type: fixed
        data:
          fixed-version: 1.31.3-r1

  - id: CGA-p8w9-w8gq-xjp4
    aliases:
      - CVE-2025-22866
      - GHSA-3whm-j4xm-rv8x
    events:
      - timestamp: 2025-02-08T07:26:59Z
        type: fixed
        data:
          fixed-version: 1.31.3-r0

  - id: CGA-w5qq-94m2-qmh9
    aliases:
      - CVE-2024-45337
      - GHSA-v778-237x-gjrc
    events:
      - timestamp: 2024-12-12T15:17:09Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azuredisk-csi-1.31
            componentID: 32130bebefd71c27
            componentName: golang.org/x/crypto
            componentVersion: v0.29.0
            componentType: go-module
            componentLocation: /usr/bin/azurediskplugin
            scanner: grype
      - timestamp: 2024-12-13T06:26:14Z
        type: fixed
        data:
          fixed-version: 1.31.1-r1