diff --git a/cosign.advisories.yaml b/cosign.advisories.yaml
index 629138a4e0..358e962d00 100644
--- a/cosign.advisories.yaml
+++ b/cosign.advisories.yaml
@@ -144,6 +144,24 @@ advisories:
         data:
           fixed-version: 2.2.4-r1
 
+  - id: CGA-7338-rp7v-4jcf
+    aliases:
+      - CVE-2024-45338
+      - GHSA-w32m-9786-jp63
+    events:
+      - timestamp: 2024-12-19T20:24:00Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: cosign
+            componentID: 0fc2c4222e3e9566
+            componentName: golang.org/x/net
+            componentVersion: v0.28.0
+            componentType: go-module
+            componentLocation: /usr/bin/cosign
+            scanner: grype
+
   - id: CGA-7rpp-fx65-27rr
     aliases:
       - CVE-2023-45284