aws-network-policy-agent.advisories.yaml

schema-version: 2.0.2

package:
  name: aws-network-policy-agent

advisories:
  - id: CGA-752r-6jf6-pxgv
    aliases:
      - CVE-2024-45338
      - GHSA-w32m-9786-jp63
    events:
      - timestamp: 2024-12-19T18:44:00Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-network-policy-agent
            componentID: cb2e822c26f59f8a
            componentName: golang.org/x/net
            componentVersion: v0.23.0
            componentType: go-module
            componentLocation: /usr/bin/aws-eks-na-cli
            scanner: grype
      - timestamp: 2024-12-20T12:19:39Z
        type: fixed
        data:
          fixed-version: 1.1.5-r1

  - id: CGA-7fgg-37cg-5rhw
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T07:09:23Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-network-policy-agent
            componentID: 5b6aee2ab34bfadd
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/aws-eks-na-cli
            scanner: grype
      - timestamp: 2024-09-18T18:39:27Z
        type: fixed
        data:
          fixed-version: 1.1.2-r2

  - id: CGA-f3q7-mhw8-j7px
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T07:12:17Z
        type: fixed
        data:
          fixed-version: 1.1.2-r1

  - id: CGA-fxpr-g89j-699p
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-20T14:03:49Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-network-policy-agent
            componentID: 780cffc4e4398a3d
            componentName: golang.org/x/net
            componentVersion: v0.19.0
            componentType: go-module
            componentLocation: /usr/bin/aws-eks-na-cli
            scanner: grype
      - timestamp: 2024-04-20T14:55:44Z
        type: fixed
        data:
          fixed-version: 1.1.0-r1

  - id: CGA-pxp8-hq4q-52cq
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T07:09:21Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-network-policy-agent
            componentID: 5b6aee2ab34bfadd
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/aws-eks-na-cli
            scanner: grype
      - timestamp: 2024-09-18T18:39:26Z
        type: fixed
        data:
          fixed-version: 1.1.2-r2

  - id: CGA-w29v-g289-xf69
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T07:09:22Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-network-policy-agent
            componentID: 5b6aee2ab34bfadd
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/aws-eks-na-cli
            scanner: grype
      - timestamp: 2024-09-18T18:39:27Z
        type: fixed
        data:
          fixed-version: 1.1.2-r2