conversion for snyk records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 21, 2024 · 559013b · 559013b
1 parent f9e87eb
commit 559013b
Show file tree

Hide file tree

Showing 12 changed files with 455 additions and 0 deletions.
diff --git a/data/anchore/2024/CVE-2024-21492.json b/data/anchore/2024/CVE-2024-21492.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "snyk",
+    "cveId": "CVE-2024-21492",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://github.com/greenpau/caddy-security/issues/272",
+      "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-5920787",
+      "https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "packageName": "github.com/greenpau/caddy-security",
+        "repo": "https://github.com/greenpau/caddy-security",
+        "cpes": [
+          "cpe:2.3:a:greenpau:caddy-security:*:*:*:*:*:*:*:*"
+        ],
+        "product": "github.com/greenpau/caddy-security",
+        "vendor": "greenpau",
+        "versions": [
+          {
+            "lessThanOrEqual": "*",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-21493.json b/data/anchore/2024/CVE-2024-21493.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "snyk",
+    "cveId": "CVE-2024-21493",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-5961078",
+      "https://github.com/greenpau/caddy-security/issues/263",
+      "https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "packageName": "github.com/greenpau/caddy-security",
+        "repo": "https://github.com/greenpau/caddy-security",
+        "cpes": [
+          "cpe:2.3:a:greenpau:caddy-security:*:*:*:*:*:*:*:*"
+        ],
+        "product": "github.com/greenpau/caddy-security",
+        "vendor": "greenpau",
+        "versions": [
+          {
+            "lessThanOrEqual": "*",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-21494.json b/data/anchore/2024/CVE-2024-21494.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "snyk",
+    "cveId": "CVE-2024-21494",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/",
+      "https://github.com/greenpau/caddy-security/issues/266",
+      "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249859"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "packageName": "github.com/greenpau/caddy-security",
+        "repo": "https://github.com/greenpau/caddy-security",
+        "cpes": [
+          "cpe:2.3:a:greenpau:caddy-security:*:*:*:*:*:*:*:*"
+        ],
+        "product": "github.com/greenpau/caddy-security",
+        "vendor": "greenpau",
+        "versions": [
+          {
+            "lessThanOrEqual": "*",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-21495.json b/data/anchore/2024/CVE-2024-21495.json
@@ -0,0 +1,39 @@
+{
+  "additionalMetadata": {
+    "cna": "snyk",
+    "cveId": "CVE-2024-21495",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://github.com/greenpau/caddy-security/issues/265",
+      "https://github.com/greenpau/go-authcrunch/commit/ecd3725baf2683eb1519bb3c81ae41085fbf7dc2",
+      "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6248275",
+      "https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "packageName": "github.com/greenpau/caddy-security",
+        "repo": "https://github.com/greenpau/caddy-security",
+        "cpes": [
+          "cpe:2.3:a:greenpau:caddy-security:*:*:*:*:*:*:*:*"
+        ],
+        "product": "github.com/greenpau/caddy-security",
+        "vendor": "greenpau",
+        "versions": [
+          {
+            "lessThan": "1.0.42",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-21496.json b/data/anchore/2024/CVE-2024-21496.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "snyk",
+    "cveId": "CVE-2024-21496",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249860",
+      "https://github.com/greenpau/caddy-security/issues/267",
+      "https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "packageName": "github.com/greenpau/caddy-security",
+        "repo": "https://github.com/greenpau/caddy-security",
+        "cpes": [
+          "cpe:2.3:a:greenpau:caddy-security:*:*:*:*:*:*:*:*"
+        ],
+        "product": "github.com/greenpau/caddy-security",
+        "vendor": "greenpau",
+        "versions": [
+          {
+            "lessThanOrEqual": "*",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-21497.json b/data/anchore/2024/CVE-2024-21497.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "snyk",
+    "cveId": "CVE-2024-21497",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249861",
+      "https://github.com/greenpau/caddy-security/issues/268",
+      "https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "packageName": "github.com/greenpau/caddy-security",
+        "repo": "https://github.com/greenpau/caddy-security",
+        "cpes": [
+          "cpe:2.3:a:greenpau:caddy-security:*:*:*:*:*:*:*:*"
+        ],
+        "product": "github.com/greenpau/caddy-security",
+        "vendor": "greenpau",
+        "versions": [
+          {
+            "lessThanOrEqual": "*",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-21498.json b/data/anchore/2024/CVE-2024-21498.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "snyk",
+    "cveId": "CVE-2024-21498",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/",
+      "https://github.com/greenpau/caddy-security/issues/269",
+      "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249862"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "packageName": "github.com/greenpau/caddy-security",
+        "repo": "https://github.com/greenpau/caddy-security",
+        "cpes": [
+          "cpe:2.3:a:greenpau:caddy-security:*:*:*:*:*:*:*:*"
+        ],
+        "product": "github.com/greenpau/caddy-security",
+        "vendor": "greenpau",
+        "versions": [
+          {
+            "lessThanOrEqual": "*",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-21499.json b/data/anchore/2024/CVE-2024-21499.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "snyk",
+    "cveId": "CVE-2024-21499",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249863",
+      "https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/",
+      "https://github.com/greenpau/caddy-security/issues/270"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "packageName": "github.com/greenpau/caddy-security",
+        "repo": "https://github.com/greenpau/caddy-security",
+        "cpes": [
+          "cpe:2.3:a:greenpau:caddy-security:*:*:*:*:*:*:*:*"
+        ],
+        "product": "github.com/greenpau/caddy-security",
+        "vendor": "greenpau",
+        "versions": [
+          {
+            "lessThanOrEqual": "*",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-21500.json b/data/anchore/2024/CVE-2024-21500.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "snyk",
+    "cveId": "CVE-2024-21500",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249864",
+      "https://github.com/greenpau/caddy-security/issues/271",
+      "https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pkg.go.dev",
+        "packageName": "github.com/greenpau/caddy-security",
+        "repo": "https://github.com/greenpau/caddy-security",
+        "cpes": [
+          "cpe:2.3:a:greenpau:caddy-security:*:*:*:*:*:*:*:*"
+        ],
+        "product": "github.com/greenpau/caddy-security",
+        "vendor": "greenpau",
+        "versions": [
+          {
+            "lessThanOrEqual": "*",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}