cargo-audit.advisories.yaml

schema-version: 2.0.2

package:
  name: cargo-audit

advisories:
  - id: CGA-2fmx-8fhg-29pr
    aliases:
      - CVE-2024-35186
      - GHSA-7w47-3wg8-547c
    events:
      - timestamp: 2024-07-29T18:25:13Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: befb0f41674c777a
            componentName: gix
            componentVersion: 0.58.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-2x5g-f6fw-jc38
    aliases:
      - CVE-2024-35197
      - GHSA-49jc-r788-3fc9
    events:
      - timestamp: 2024-07-29T18:25:11Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: befb0f41674c777a
            componentName: gix
            componentVersion: 0.58.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-467g-5xq8-cmgr
    aliases:
      - GHSA-cx7h-h87r-jpgr
    events:
      - timestamp: 2024-07-29T18:25:16Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: 8954b732e9c6ccf8
            componentName: gix-attributes
            componentVersion: 0.22.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-53mf-x56r-fg3j
    aliases:
      - GHSA-q6cp-qfwq-4gcv
    events:
      - timestamp: 2024-07-29T18:25:17Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: 66637d5324310c1d
            componentName: h2
            componentVersion: 0.3.24
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-898w-f7g8-6mjc
    aliases:
      - CVE-2024-27308
      - GHSA-r8w9-5wcg-vfj7
    events:
      - timestamp: 2024-07-29T18:25:19Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: f94b145271f6ef7b
            componentName: mio
            componentVersion: 0.8.10
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-j25c-xp3p-r5m4
    aliases:
      - CVE-2024-32650
      - GHSA-6g7w-8wpp-frhj
    events:
      - timestamp: 2024-07-29T18:25:12Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: 04b50949decc21d2
            componentName: rustls
            componentVersion: 0.21.10
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype

  - id: CGA-j7cm-qg23-32v5
    aliases:
      - CVE-2024-32884
      - GHSA-98p4-xjmm-8mfh
    events:
      - timestamp: 2024-07-29T18:25:14Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cargo-audit
            componentID: befb0f41674c777a
            componentName: gix
            componentVersion: 0.58.0
            componentType: rust-crate
            componentLocation: /usr/bin/cargo-audit
            scanner: grype