diff --git a/sigstore-scaffolding.advisories.yaml b/sigstore-scaffolding.advisories.yaml index a1dd8e112f..fb59c4e090 100644 --- a/sigstore-scaffolding.advisories.yaml +++ b/sigstore-scaffolding.advisories.yaml @@ -251,6 +251,24 @@ advisories: data: fixed-version: 0.7.9-r0 + - id: CGA-jwq3-5872-8qv3 + aliases: + - CVE-2024-45338 + - GHSA-w32m-9786-jp63 + events: + - timestamp: 2024-12-19T20:26:04Z + type: detection + data: + type: scan/v1 + data: + subpackageName: sigstore-scaffolding + componentID: 44339d06b3026eed + componentName: golang.org/x/net + componentVersion: v0.31.0 + componentType: go-module + componentLocation: /usr/bin/rekor-createsecret + scanner: grype + - id: CGA-m4ph-vwfq-6p88 aliases: - CVE-2023-44487