aws-flb-cloudwatch.advisories.yaml

schema-version: 2.0.2

package:
  name: aws-flb-cloudwatch

advisories:
  - id: CGA-2c45-5f9c-xhhx
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T12:44:12Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-cloudwatch
            componentID: 9c3ae8a41200da55
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/cloudwatch.so
            scanner: grype
      - timestamp: 2024-09-12T19:07:02Z
        type: fixed
        data:
          fixed-version: 1.9.4-r13

  - id: CGA-3r4x-29m7-9pf8
    aliases:
      - CVE-2023-39326
      - GHSA-9f76-wg39-x86h
    events:
      - timestamp: 2023-12-18T15:42:58Z
        type: fixed
        data:
          fixed-version: 1.9.4-r6

  - id: CGA-44m8-w3hq-9p4c
    aliases:
      - CVE-2024-24784
      - GHSA-fgq5-q76c-gx78
    events:
      - timestamp: 2024-03-12T07:11:56Z
        type: fixed
        data:
          fixed-version: 1.9.4-r7

  - id: CGA-4mvh-5jv6-h978
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-05T07:29:38Z
        type: fixed
        data:
          fixed-version: 1.9.4-r12

  - id: CGA-7965-v4j5-3hpp
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T12:44:07Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-cloudwatch
            componentID: 9c3ae8a41200da55
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/cloudwatch.so
            scanner: grype
      - timestamp: 2024-09-12T19:07:02Z
        type: fixed
        data:
          fixed-version: 1.9.4-r13

  - id: CGA-8gp3-hpjp-mrmj
    aliases:
      - CVE-2023-45290
      - GHSA-rr6r-cfgf-gc6h
    events:
      - timestamp: 2024-03-12T07:11:55Z
        type: fixed
        data:
          fixed-version: 1.9.4-r7

  - id: CGA-cc2m-9r9p-h4mf
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T14:36:29Z
        type: fixed
        data:
          fixed-version: 1.9.4-r11

  - id: CGA-g74f-m82v-pwj9
    aliases:
      - CVE-2023-45283
      - GHSA-vvjp-q62m-2vph
    events:
      - timestamp: 2023-11-07T19:23:25Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows

  - id: CGA-gw6w-9fr5-9j3m
    aliases:
      - CVE-2023-45285
      - GHSA-5f94-vhjq-rpg8
    events:
      - timestamp: 2023-12-18T15:41:21Z
        type: fixed
        data:
          fixed-version: 1.9.4-r6

  - id: CGA-jvmx-hwvv-2rwm
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T14:36:26Z
        type: fixed
        data:
          fixed-version: 1.9.4-r11

  - id: CGA-mmj3-q3m5-w43f
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T12:44:03Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-cloudwatch
            componentID: 9c3ae8a41200da55
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/cloudwatch.so
            scanner: grype
      - timestamp: 2024-09-12T19:07:01Z
        type: fixed
        data:
          fixed-version: 1.9.4-r13

  - id: CGA-pg24-52xv-94mf
    aliases:
      - CVE-2023-45289
      - GHSA-32ch-6x54-q4h9
    events:
      - timestamp: 2024-03-12T07:11:54Z
        type: fixed
        data:
          fixed-version: 1.9.4-r7

  - id: CGA-prm5-r3p2-8pcj
    aliases:
      - CVE-2024-24783
      - GHSA-3q2c-pvp5-3cqp
    events:
      - timestamp: 2024-03-12T07:11:56Z
        type: fixed
        data:
          fixed-version: 1.9.4-r7

  - id: CGA-q4pr-x4hh-r9q5
    aliases:
      - CVE-2023-45284
      - GHSA-rq3x-83w4-p28c
    events:
      - timestamp: 2023-11-07T19:23:26Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows

  - id: CGA-v4p2-8cwj-wmrc
    aliases:
      - CVE-2024-24785
      - GHSA-j6m3-gc37-6r6q
    events:
      - timestamp: 2024-03-12T07:11:57Z
        type: fixed
        data:
          fixed-version: 1.9.4-r7

  - id: CGA-vcgr-fqw9-435h
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-09T12:45:58Z
        type: fixed
        data:
          fixed-version: 1.9.4-r8