addon-resizer.advisories.yaml

schema-version: 2.0.2

package:
  name: addon-resizer

advisories:
  - id: CGA-474w-x2w8-938x
    aliases:
      - CVE-2024-45338
      - GHSA-w32m-9786-jp63
    events:
      - timestamp: 2024-12-19T07:34:23Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: 32754bbb8366484f
            componentName: golang.org/x/net
            componentVersion: v0.23.0
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2024-12-19T17:10:53Z
        type: fixed
        data:
          fixed-version: 1.8.22-r4

  - id: CGA-5659-fjq5-5p8r
    aliases:
      - CVE-2025-22866
      - GHSA-3whm-j4xm-rv8x
    events:
      - timestamp: 2025-02-08T07:03:35Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: bac464ecb66034de
            componentName: stdlib
            componentVersion: go1.23.5
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2025-02-08T17:03:46Z
        type: fixed
        data:
          fixed-version: 1.8.23-r1

  - id: CGA-6pp8-fjrm-gjvc
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T09:11:04Z
        type: fixed
        data:
          fixed-version: 1.8.21-r1

  - id: CGA-78gf-x5gp-8fw8
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T21:23:49Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: 86f92a06ac2b7622
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2024-09-12T19:04:21Z
        type: fixed
        data:
          fixed-version: 1.8.22-r2

  - id: CGA-7c5q-2rqv-m9gr
    aliases:
      - CVE-2025-22868
    events:
      - timestamp: 2025-03-06T13:08:02Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: 861f9591d3f45b13
            componentName: golang.org/x/oauth2
            componentVersion: v0.24.0
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2025-03-11T20:40:35Z
        type: fixed
        data:
          fixed-version: 1.8.23-r2

  - id: CGA-7r4j-52c3-q459
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T07:10:39Z
        type: fixed
        data:
          fixed-version: 1.8.22-r1

  - id: CGA-c33r-655h-735v
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T21:23:46Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: 86f92a06ac2b7622
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2024-09-12T19:04:22Z
        type: fixed
        data:
          fixed-version: 1.8.22-r2

  - id: CGA-h78f-7366-m58c
    aliases:
      - CVE-2025-22870
      - GHSA-qxp5-gwg8-xv66
    events:
      - timestamp: 2025-03-14T02:31:41Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: 266ffe2cf3153be1
            componentName: golang.org/x/net
            componentVersion: v0.33.0
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2025-03-15T09:09:11Z
        type: fixed
        data:
          fixed-version: 1.8.23-r3

  - id: CGA-qj6c-p38g-3p9c
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-20T11:03:15Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: e9f2f6256b30ed90
            componentName: golang.org/x/net
            componentVersion: v0.17.0
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2024-04-23T17:01:12Z
        type: fixed
        data:
          fixed-version: 1.8.20-r1

  - id: CGA-rww9-3384-v6g8
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T09:11:03Z
        type: fixed
        data:
          fixed-version: 1.8.21-r1

  - id: CGA-v46w-436g-m6x6
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T21:23:52Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: addon-resizer
            componentID: 86f92a06ac2b7622
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/pod_nanny
            scanner: grype
      - timestamp: 2024-09-12T19:04:21Z
        type: fixed
        data:
          fixed-version: 1.8.22-r2