chezmoi.advisories.yaml

schema-version: 2.0.2

package:
  name: chezmoi

advisories:
  - id: CGA-4h4m-vrmw-mpqv
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-13T01:11:58Z
        type: fixed
        data:
          fixed-version: 2.47.4-r0

  - id: CGA-p2m3-6p29-22mr
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T17:19:56Z
        type: fixed
        data:
          fixed-version: 2.48.2-r1

  - id: CGA-qq9h-mcq3-678f
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T17:19:55Z
        type: fixed
        data:
          fixed-version: 2.48.2-r1

  - id: CGA-rqxq-m4c2-x9ph
    aliases:
      - CVE-2024-35255
      - GHSA-m5vv-6r4h-3vj9
    events:
      - timestamp: 2024-06-12T07:02:37Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: chezmoi
            componentID: 065246c9ae45c492
            componentName: github.com/Azure/azure-sdk-for-go/sdk/azidentity
            componentVersion: v1.5.2
            componentType: go-module
            componentLocation: /usr/bin/chezmoi
            scanner: grype
      - timestamp: 2024-06-12T12:08:48Z
        type: fixed
        data:
          fixed-version: 2.49.0-r1