cloudwatch-exporter.advisories.yaml

schema-version: 2.0.2

package:
  name: cloudwatch-exporter

advisories:
  - id: CGA-cp7x-r3q6-pfcj
    aliases:
      - CVE-2023-34462
      - GHSA-6mjq-h674-j845
    events:
      - timestamp: 2023-08-11T21:39:51Z
        type: detection
        data:
          type: manual
      - timestamp: 2023-08-14T15:53:34Z
        type: fixed
        data:
          fixed-version: 0.15.4-r2

  - id: CGA-fq64-7x7j-66q4
    aliases:
      - CVE-2023-36479
      - GHSA-3gh6-v5v9-6v9j
    events:
      - timestamp: 2023-09-22T19:31:25Z
        type: fixed
        data:
          fixed-version: 0.15.4-r3

  - id: CGA-vqpm-qwj8-mfq5
    aliases:
      - CVE-2023-40167
      - GHSA-hmr7-m48g-48f6
    events:
      - timestamp: 2023-09-22T19:32:39Z
        type: fixed
        data:
          fixed-version: 0.15.4-r3

  - id: CGA-gxjq-vrjj-q4mq
    aliases:
      - CVE-2023-41900
      - GHSA-pwh8-58vv-vw48
    events:
      - timestamp: 2023-09-22T19:33:07Z
        type: fixed
        data:
          fixed-version: 0.15.4-r3

  - id: CGA-7p98-j4rx-8p2r
    aliases:
      - CVE-2024-29025
      - GHSA-5jpm-x58v-624v
    events:
      - timestamp: 2024-04-05T07:51:05Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cloudwatch-exporter
            componentID: eea085595569c39d
            componentName: netty-codec-http
            componentVersion: 4.1.100.Final
            componentType: java-archive
            componentLocation: /usr/share/java/cloudwatch_exporter/cloudwatch_exporter.jar
            scanner: grype
      - timestamp: 2024-04-13T07:09:23Z
        type: fixed
        data:
          fixed-version: 0.15.5-r1

  - id: CGA-f5mc-g9q8-mr85
    aliases:
      - GHSA-xpw8-rcwv-8f8p
    events:
      - timestamp: 2024-02-21T07:15:39Z
        type: fixed
        data:
          fixed-version: 0.15.5-r0