cert-manager-webhook-pdns.advisories.yaml

schema-version: 2.0.2

package:
  name: cert-manager-webhook-pdns

advisories:
  - id: CGA-26rf-9hmp-54w4
    aliases:
      - CVE-2024-24787
      - GHSA-5fq7-4mxc-535h
    events:
      - timestamp: 2024-05-14T11:17:26Z
        type: fixed
        data:
          fixed-version: 2.5.1-r3

  - id: CGA-3336-xcgc-m4h8
    aliases:
      - CVE-2024-45338
      - GHSA-w32m-9786-jp63
    events:
      - timestamp: 2024-12-19T07:15:23Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-manager-webhook-pdns
            componentID: a3c015555efd53c1
            componentName: golang.org/x/net
            componentVersion: v0.26.0
            componentType: go-module
            componentLocation: /usr/bin/webhook
            scanner: grype
      - timestamp: 2024-12-20T07:35:49Z
        type: fixed
        data:
          fixed-version: 2.5.1-r9

  - id: CGA-4h67-68h3-pg8m
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T07:11:17Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-manager-webhook-pdns
            componentID: c79ef47ae6d114e2
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/webhook
            scanner: grype
      - timestamp: 2024-09-12T18:08:58Z
        type: fixed
        data:
          fixed-version: 2.5.1-r6

  - id: CGA-5vqg-559j-m232
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T10:07:55Z
        type: fixed
        data:
          fixed-version: 2.5.1-r4

  - id: CGA-c658-r73m-8ch5
    aliases:
      - CVE-2024-45337
      - GHSA-v778-237x-gjrc
    events:
      - timestamp: 2024-12-12T08:05:58Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-manager-webhook-pdns
            componentID: 39a1f0004270af3b
            componentName: golang.org/x/crypto
            componentVersion: v0.24.0
            componentType: go-module
            componentLocation: /usr/bin/webhook
            scanner: grype
      - timestamp: 2024-12-12T16:30:28Z
        type: fixed
        data:
          fixed-version: 2.5.1-r8

  - id: CGA-crx2-mhj6-m6r4
    aliases:
      - CVE-2024-24788
      - GHSA-2jwv-jmq4-4j3r
    events:
      - timestamp: 2024-05-14T11:17:27Z
        type: fixed
        data:
          fixed-version: 2.5.1-r3

  - id: CGA-f4cv-hrr9-m9qw
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T07:11:22Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-manager-webhook-pdns
            componentID: c79ef47ae6d114e2
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/webhook
            scanner: grype
      - timestamp: 2024-09-12T18:08:59Z
        type: fixed
        data:
          fixed-version: 2.5.1-r6

  - id: CGA-fhmf-gc2p-m5gv
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T07:11:20Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-manager-webhook-pdns
            componentID: c79ef47ae6d114e2
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/webhook
            scanner: grype
      - timestamp: 2024-09-12T18:08:59Z
        type: fixed
        data:
          fixed-version: 2.5.1-r6

  - id: CGA-m269-jv4h-pv4m
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T10:07:54Z
        type: fixed
        data:
          fixed-version: 2.5.1-r4

  - id: CGA-mwxx-49fx-j4g7
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T08:32:37Z
        type: fixed
        data:
          fixed-version: 2.5.1-r5

  - id: CGA-w9w3-5frp-6gvv
    aliases:
      - GHSA-r4pg-vg54-wxx4
    events:
      - timestamp: 2024-11-21T07:34:21Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-manager-webhook-pdns
            componentID: f73a8c096991d5cc
            componentName: github.com/cert-manager/cert-manager
            componentVersion: v1.12.2
            componentType: go-module
            componentLocation: /usr/bin/webhook
            scanner: grype
      - timestamp: 2024-11-22T07:09:35Z
        type: fixed
        data:
          fixed-version: 2.5.1-r7

  - id: CGA-wwfj-2vcc-vv9w
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-26T09:01:32Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cert-manager-webhook-pdns
            componentID: 85610989b0bdc5bc
            componentName: golang.org/x/net
            componentVersion: v0.17.0
            componentType: go-module
            componentLocation: /usr/bin/webhook
            scanner: grype
      - timestamp: 2024-05-07T15:19:54Z
        type: fixed
        data:
          fixed-version: 2.5.1-r2