cloudnative-pg.advisories.yaml

schema-version: 2.0.2

package:
  name: cloudnative-pg

advisories:
  - id: CGA-236w-r283-f75v
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T13:43:02Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cloudnative-pg
            componentID: a31952e5e5f0657a
            componentName: stdlib
            componentVersion: go1.23.0
            componentType: go-module
            componentLocation: /bin/manager_amd64
            scanner: grype
      - timestamp: 2024-09-12T18:36:24Z
        type: fixed
        data:
          fixed-version: 1.24.0-r1

  - id: CGA-3r5q-j6c8-mg53
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T13:43:01Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cloudnative-pg
            componentID: a31952e5e5f0657a
            componentName: stdlib
            componentVersion: go1.23.0
            componentType: go-module
            componentLocation: /bin/manager_amd64
            scanner: grype
      - timestamp: 2024-09-12T18:36:25Z
        type: fixed
        data:
          fixed-version: 1.24.0-r1

  - id: CGA-3v9q-6vpg-xhf7
    aliases:
      - GHSA-xr7q-jx4m-x55m
    events:
      - timestamp: 2024-07-10T07:20:26Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cloudnative-pg
            componentID: 35cbb62e461a66e4
            componentName: google.golang.org/grpc
            componentVersion: v1.64.0
            componentType: go-module
            componentLocation: /bin/manager_amd64
            scanner: grype
      - timestamp: 2024-07-10T09:14:05Z
        type: fixed
        data:
          fixed-version: 1.23.2-r7

  - id: CGA-474r-wv9p-rh69
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T13:43:03Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cloudnative-pg
            componentID: a31952e5e5f0657a
            componentName: stdlib
            componentVersion: go1.23.0
            componentType: go-module
            componentLocation: /bin/manager_amd64
            scanner: grype
      - timestamp: 2024-09-12T18:36:25Z
        type: fixed
        data:
          fixed-version: 1.24.0-r1

  - id: CGA-7q93-27rj-v79f
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T08:12:50Z
        type: fixed
        data:
          fixed-version: 1.23.2-r5