From c787f56bc4a571cc871a008af727eca2fb31bcd7 Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts[bot]@users.noreply.github.com> Date: Thu, 19 Dec 2024 22:45:10 +0000 Subject: [PATCH] Adding Advisory GHSA-w32m-9786-jp63 for victoriametrics-cluster (#10614) Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com> --- victoriametrics-cluster.advisories.yaml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/victoriametrics-cluster.advisories.yaml b/victoriametrics-cluster.advisories.yaml index ff1bf8a6a3..d8f53a062e 100644 --- a/victoriametrics-cluster.advisories.yaml +++ b/victoriametrics-cluster.advisories.yaml @@ -26,6 +26,24 @@ advisories: data: fixed-version: 1.103.0-r1 + - id: CGA-fgj7-g95g-6j84 + aliases: + - CVE-2024-45338 + - GHSA-w32m-9786-jp63 + events: + - timestamp: 2024-12-19T20:34:13Z + type: detection + data: + type: scan/v1 + data: + subpackageName: victoriametrics-cluster + componentID: b1e163a13805fc84 + componentName: golang.org/x/net + componentVersion: v0.31.0 + componentType: go-module + componentLocation: /usr/bin/vmagent + scanner: grype + - id: CGA-q43m-qhhh-2x77 aliases: - CVE-2024-34156