cargo-audit.advisories.yaml

schema-version: 2.0.2

package:
  name: cargo-audit

advisories:
  - id: CGA-2fmx-8fhg-29pr
    aliases:
      - CVE-2024-35186
      - GHSA-7w47-3wg8-547c
    events:
      - timestamp: 2024-07-29T18:25:13Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: befb0f41674c777a
            componentName: gix
            componentVersion: 0.58.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-2x5g-f6fw-jc38
    aliases:
      - CVE-2024-35197
      - GHSA-49jc-r788-3fc9
    events:
      - timestamp: 2024-07-29T18:25:11Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: befb0f41674c777a
            componentName: gix
            componentVersion: 0.58.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-467g-5xq8-cmgr
    aliases:
      - GHSA-cx7h-h87r-jpgr
    events:
      - timestamp: 2024-07-29T18:25:16Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: 8954b732e9c6ccf8
            componentName: gix-attributes
            componentVersion: 0.22.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-53mf-x56r-fg3j
    aliases:
      - GHSA-q6cp-qfwq-4gcv
    events:
      - timestamp: 2024-07-29T18:25:17Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: 66637d5324310c1d
            componentName: h2
            componentVersion: 0.3.24
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-898w-f7g8-6mjc
    aliases:
      - CVE-2024-27308
      - GHSA-r8w9-5wcg-vfj7
    events:
      - timestamp: 2024-07-29T18:25:19Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: f94b145271f6ef7b
            componentName: mio
            componentVersion: 0.8.10
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-hvm6-mwr3-fcwv
    aliases:
      - CVE-2024-45405
      - GHSA-m8rp-vv92-46c7
    events:
      - timestamp: 2024-09-07T08:22:40Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: 39996560f5b2d1e7
            componentName: gix-path
            componentVersion: 0.10.5
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-j25c-xp3p-r5m4
    aliases:
      - CVE-2024-32650
      - GHSA-6g7w-8wpp-frhj
    events:
      - timestamp: 2024-07-29T18:25:12Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: 04b50949decc21d2
            componentName: rustls
            componentVersion: 0.21.10
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-j7cm-qg23-32v5
    aliases:
      - CVE-2024-32884
      - GHSA-98p4-xjmm-8mfh
    events:
      - timestamp: 2024-07-29T18:25:14Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: befb0f41674c777a
            componentName: gix
            componentVersion: 0.58.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-jjm7-phrf-rhgm
    aliases:
      - CVE-2024-45305
      - GHSA-v26r-4c9c-h3j6
    events:
      - timestamp: 2024-09-04T08:44:41Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: 39996560f5b2d1e7
            componentName: gix-path
            componentVersion: 0.10.5
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-rw93-4897-mx23
    aliases:
      - GHSA-qg5g-gv98-5ffh
    events:
      - timestamp: 2024-11-26T10:14:01Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: bd2bb3b149c12ed6
            componentName: rustls
            componentVersion: 0.23.16
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype
      - timestamp: 2024-11-26T11:30:46Z
        type: fixed
        data:
          fixed-version: 0.21.0-r2

  - id: CGA-w8c5-crm7-p3m9
    aliases:
      - CVE-2024-12224
      - GHSA-h97m-ww89-6jmq
    events:
      - timestamp: 2024-12-10T10:04:35Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: 687073fd7c0870ab
            componentName: idna
            componentVersion: 0.5.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-w9xm-mhpf-8rw7
    aliases:
      - GHSA-wwq9-3cpr-mm53
    events:
      - timestamp: 2024-12-05T08:06:45Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: ab896412a68cfb17
            componentName: hashbrown
            componentVersion: 0.15.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype