aws-flb-firehose.advisories.yaml

schema-version: 2.0.2

package:
  name: aws-flb-firehose

advisories:
  - id: CGA-2cvx-9qj3-23p9
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T10:35:36Z
        type: fixed
        data:
          fixed-version: 1.7.2-r11

  - id: CGA-3xc4-2pp3-7wqg
    aliases:
      - CVE-2023-45290
      - GHSA-rr6r-cfgf-gc6h
    events:
      - timestamp: 2024-03-12T07:10:46Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-7gcx-5vhp-fpv6
    aliases:
      - CVE-2024-24784
      - GHSA-fgq5-q76c-gx78
    events:
      - timestamp: 2024-03-12T07:10:48Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-7mmp-m5pp-wpgg
    aliases:
      - CVE-2023-45283
      - GHSA-vvjp-q62m-2vph
    events:
      - timestamp: 2023-11-07T19:23:28Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows

  - id: CGA-8342-42x5-92fr
    aliases:
      - CVE-2023-45289
      - GHSA-32ch-6x54-q4h9
    events:
      - timestamp: 2024-03-12T07:10:46Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-fc6m-h685-4ccp
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T07:05:45Z
        type: fixed
        data:
          fixed-version: 1.7.2-r12

  - id: CGA-g29c-gw92-j79r
    aliases:
      - CVE-2023-39326
      - GHSA-9f76-wg39-x86h
    events:
      - timestamp: 2023-12-18T15:43:55Z
        type: fixed
        data:
          fixed-version: 1.7.2-r6

  - id: CGA-gg6q-qxqc-c5gv
    aliases:
      - CVE-2023-45285
      - GHSA-5f94-vhjq-rpg8
    events:
      - timestamp: 2023-12-18T15:43:18Z
        type: fixed
        data:
          fixed-version: 1.7.2-r6

  - id: CGA-gmvf-6ppc-8vhp
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T07:04:10Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: af85ced8499bc64d
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2024-09-12T19:06:21Z
        type: fixed
        data:
          fixed-version: 1.7.2-r13

  - id: CGA-h557-wgwm-5v93
    aliases:
      - CVE-2024-24785
      - GHSA-j6m3-gc37-6r6q
    events:
      - timestamp: 2024-03-12T07:10:49Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-hfwm-9px4-qhw4
    aliases:
      - CVE-2024-24783
      - GHSA-3q2c-pvp5-3cqp
    events:
      - timestamp: 2024-03-12T07:10:47Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-m3mx-2rxc-fc5v
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T07:04:14Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: af85ced8499bc64d
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2024-09-12T19:06:22Z
        type: fixed
        data:
          fixed-version: 1.7.2-r13

  - id: CGA-vf4w-5vcf-f4m7
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T07:04:06Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: af85ced8499bc64d
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2024-09-12T19:06:22Z
        type: fixed
        data:
          fixed-version: 1.7.2-r13

  - id: CGA-wcpf-22vc-qp72
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T10:35:39Z
        type: fixed
        data:
          fixed-version: 1.7.2-r11

  - id: CGA-wgrp-cx25-p993
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-13T07:05:53Z
        type: fixed
        data:
          fixed-version: 1.7.2-r8

  - id: CGA-ww4f-3cgm-8g2r
    aliases:
      - CVE-2023-45284
      - GHSA-rq3x-83w4-p28c
    events:
      - timestamp: 2023-11-07T19:23:29Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows