cert-manager-1.11.advisories.yaml

schema-version: 2.0.2

package:
  name: cert-manager-1.11

advisories:
  - id: CVE-2019-25210
    aliases:
      - GHSA-jw44-4f3j-q396
    events:
      - timestamp: 2024-03-06T07:32:09Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cmctl-1.11
            componentID: 981ed19f8d2784d8
            componentName: helm.sh/helm/v3
            componentVersion: v3.11.1
            componentType: go-module
            componentLocation: /usr/bin/cmctl
            scanner: grype

  - id: CVE-2020-8552
    aliases:
      - GHSA-82hx-w2r5-c2wq
    events:
      - timestamp: 2023-09-19T16:40:51Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Go vulndb has marked this code NOT_IMPORTABLE.

  - id: CVE-2023-44487
    aliases:
      - GHSA-m425-mq94-257g
      - GHSA-qppj-fm5r-hxr3
    events:
      - timestamp: 2023-11-01T14:25:13Z
        type: fix-not-planned
        data:
          note: This package is end of life and will not receive more updates.

  - id: CVE-2023-45142
    aliases:
      - GHSA-rcjv-mgp8-qvmr
    events:
      - timestamp: 2023-10-19T12:34:57Z
        type: fixed
        data:
          fixed-version: 1.11.5-r5

  - id: CVE-2023-45283
    aliases:
      - GHSA-vvjp-q62m-2vph
    events:
      - timestamp: 2023-11-07T19:23:58Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows

  - id: CVE-2023-45284
    aliases:
      - GHSA-rq3x-83w4-p28c
    events:
      - timestamp: 2023-11-07T19:23:59Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows

  - id: CVE-2023-47108
    aliases:
      - GHSA-8pgv-569h-w5rw
    events:
      - timestamp: 2023-11-17T11:21:11Z
        type: fixed
        data:
          fixed-version: 1.11.5-r6

  - id: CVE-2023-48795
    aliases:
      - GHSA-45x7-px36-x8w8
    events:
      - timestamp: 2023-12-19T16:57:47Z
        type: fixed
        data:
          fixed-version: 1.11.5-r9

  - id: CVE-2024-25620
    aliases:
      - GHSA-v53g-5gjp-272r
    events:
      - timestamp: 2024-02-16T07:45:47Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cmctl-1.11
            componentID: 44c6ed56f650c30c
            componentName: helm.sh/helm/v3
            componentVersion: v3.11.1
            componentType: go-module
            componentLocation: /usr/bin/cmctl
            scanner: grype

  - id: CVE-2024-26147
    aliases:
      - GHSA-r53h-jv2g-vpx6
    events:
      - timestamp: 2024-02-23T07:02:24Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cmctl-1.11
            componentID: 44c6ed56f650c30c
            componentName: helm.sh/helm/v3
            componentVersion: v3.11.1
            componentType: go-module
            componentLocation: /usr/bin/cmctl
            scanner: grype

  - id: GHSA-7ww5-4wqc-m92c
    events:
      - timestamp: 2024-01-11T07:15:48Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cmctl-1.11
            componentID: 88e1fd4d413b10c6
            componentName: github.com/containerd/containerd
            componentVersion: v1.7.6
            componentType: go-module
            componentLocation: /usr/bin/cmctl
            scanner: grype
      - timestamp: 2024-01-25T07:04:30Z
        type: fixed
        data:
          fixed-version: 1.11.5-r10

  - id: GHSA-jq35-85cj-fj4p
    events:
      - timestamp: 2023-11-17T11:21:22Z
        type: fixed
        data:
          fixed-version: 1.11.5-r6