age.advisories.yaml

schema-version: 2.0.2

package:
  name: age

advisories:
  - id: CGA-3fq9-mg48-v2ch
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T20:20:24Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: age
            componentID: 02c890e439f7e6b4
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/age
            scanner: grype
      - timestamp: 2024-09-18T16:07:19Z
        type: fixed
        data:
          fixed-version: 1.2.0-r2

  - id: CGA-5v3x-5xqc-284j
    aliases:
      - GHSA-32gq-x56h-299c
    events:
      - timestamp: 2024-12-19T07:02:08Z
        type: fixed
        data:
          fixed-version: 1.2.1-r0

  - id: CGA-947g-33qg-h8mj
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T07:31:16Z
        type: fixed
        data:
          fixed-version: 1.1.1-r1

  - id: CGA-mrpp-qrw2-pj4q
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T07:31:16Z
        type: fixed
        data:
          fixed-version: 1.1.1-r1

  - id: CGA-qr7p-rgfg-r5mm
    aliases:
      - CVE-2024-45337
      - GHSA-v778-237x-gjrc
    events:
      - timestamp: 2024-12-12T12:33:19Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: age
            componentID: 42d39f1aff8dcdf8
            componentName: golang.org/x/crypto
            componentVersion: v0.24.0
            componentType: go-module
            componentLocation: /usr/bin/age
            scanner: grype
      - timestamp: 2024-12-13T03:35:37Z
        type: fixed
        data:
          fixed-version: 1.2.0-r3

  - id: CGA-vvc5-x2vg-m97w
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T20:20:34Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: age
            componentID: 02c890e439f7e6b4
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/age
            scanner: grype
      - timestamp: 2024-09-18T16:07:18Z
        type: fixed
        data:
          fixed-version: 1.2.0-r2

  - id: CGA-wvp8-28wg-f5mf
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T20:20:28Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: age
            componentID: 02c890e439f7e6b4
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/age
            scanner: grype
      - timestamp: 2024-09-18T16:07:17Z
        type: fixed
        data:
          fixed-version: 1.2.0-r2

  - id: CGA-xgv3-v6mg-89fm
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T08:08:13Z
        type: fixed
        data:
          fixed-version: 1.2.0-r1