apicurio-registry.advisories.yaml

schema-version: 2.0.2

package:
  name: apicurio-registry

advisories:
  - id: CGA-5hr5-g6v2-4w72
    aliases:
      - CVE-2024-47535
      - GHSA-xq3w-v528-46rv
    events:
      - timestamp: 2024-12-02T09:29:58Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: apicurio-registry
            componentID: 5126e31e6af0c797
            componentName: netty-common
            componentVersion: 4.1.111.Final
            componentType: java-archive
            componentLocation: /usr/share/java/apicurio-registry/lib/io.netty.netty-common-4.1.111.Final.jar
            scanner: grype

  - id: CGA-9vf2-8c9q-q94f
    aliases:
      - CVE-2024-12397
      - GHSA-cxrx-q234-m22m
    events:
      - timestamp: 2024-12-13T07:03:43Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: apicurio-registry
            componentID: 103775bab44f729f
            componentName: quarkus-http-core
            componentVersion: 5.3.2
            componentType: java-archive
            componentLocation: /usr/share/java/apicurio-registry/lib/io.quarkus.http.quarkus-http-core-5.3.2.jar
            scanner: grype

  - id: CGA-x2pj-p6gm-xpqp
    aliases:
      - CVE-2012-5783
      - GHSA-3832-9276-x7gf
    events:
      - timestamp: 2024-12-03T09:26:09Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: apicurio-registry
            componentID: 3e0a7c38a5aed36d
            componentName: commons-httpclient
            componentVersion: "3.1"
            componentType: java-archive
            componentLocation: /usr/share/java/apicurio-registry/lib/commons-httpclient.commons-httpclient-3.1.jar
            scanner: grype