calico-3.28.advisories.yaml

schema-version: 2.0.2

package:
  name: calico-3.28

advisories:
  - id: CGA-8gwv-9pxv-p9vw
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T09:16:41Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: calico-3.28
            componentID: 898616cdc92bc7b0
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/calico-apiserver
            scanner: grype
      - timestamp: 2024-09-12T18:03:08Z
        type: fixed
        data:
          fixed-version: 3.28.1-r1

  - id: CGA-hx23-8cgq-h8xc
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T09:16:40Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: calico-3.28
            componentID: 898616cdc92bc7b0
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/calico-apiserver
            scanner: grype
      - timestamp: 2024-09-12T18:03:09Z
        type: fixed
        data:
          fixed-version: 3.28.1-r1

  - id: CGA-r9qx-9mf2-r7cc
    aliases:
      - CVE-2024-5321
      - GHSA-82m2-cv7p-4m75
    events:
      - timestamp: 2024-07-19T07:13:31Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: calico-3.28
            componentID: 418bd39f929e54aa
            componentName: k8s.io/kubernetes
            componentVersion: v1.28.9
            componentType: go-module
            componentLocation: /usr/bin/calico-apiserver
            scanner: grype

  - id: CGA-wp87-2hxv-4rv2
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T09:16:39Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: calico-3.28
            componentID: 898616cdc92bc7b0
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/calico-apiserver
            scanner: grype
      - timestamp: 2024-09-12T18:03:09Z
        type: fixed
        data:
          fixed-version: 3.28.1-r1