cass-operator.advisories.yaml

schema-version: 2.0.2

package:
  name: cass-operator

advisories:
  - id: CGA-32mr-xxg7-9r37
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T14:04:59Z
        type: fixed
        data:
          fixed-version: 1.21.0-r1

  - id: CGA-4f7p-m3mj-pfw4
    aliases:
      - CVE-2023-45289
      - GHSA-32ch-6x54-q4h9
    events:
      - timestamp: 2024-03-13T07:07:09Z
        type: fixed
        data:
          fixed-version: 1.18.2-r4

  - id: CGA-4q6x-q6mj-8753
    aliases:
      - CVE-2024-24786
      - GHSA-8r3f-844c-mc37
    events:
      - timestamp: 2024-03-14T14:18:39Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cass-operator
            componentID: 8fe7c7166196154b
            componentName: google.golang.org/protobuf
            componentVersion: v1.30.0
            componentType: go-module
            componentLocation: /usr/bin/manager
            scanner: grype
      - timestamp: 2024-03-15T13:45:56Z
        type: fixed
        data:
          fixed-version: 1.18.2-r5

  - id: CGA-4qqw-8x72-q8v8
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T08:17:32Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cass-operator
            componentID: 0de339ee143df8c3
            componentName: stdlib
            componentVersion: go1.23.0
            componentType: go-module
            componentLocation: /usr/bin/manager
            scanner: grype
      - timestamp: 2024-09-11T22:30:16Z
        type: fixed
        data:
          fixed-version: 1.22.2-r0

  - id: CGA-7922-98pg-98jr
    aliases:
      - CVE-2023-45290
      - GHSA-rr6r-cfgf-gc6h
    events:
      - timestamp: 2024-03-13T07:07:09Z
        type: fixed
        data:
          fixed-version: 1.18.2-r4

  - id: CGA-7v7p-pjm7-h6pw
    aliases:
      - CVE-2024-24784
      - GHSA-fgq5-q76c-gx78
    events:
      - timestamp: 2024-03-13T07:07:10Z
        type: fixed
        data:
          fixed-version: 1.18.2-r4

  - id: CGA-7xj2-9g24-v4h5
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T08:17:35Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cass-operator
            componentID: 0de339ee143df8c3
            componentName: stdlib
            componentVersion: go1.23.0
            componentType: go-module
            componentLocation: /usr/bin/manager
            scanner: grype
      - timestamp: 2024-09-11T22:30:16Z
        type: fixed
        data:
          fixed-version: 1.22.2-r0

  - id: CGA-8pf5-ffgv-882x
    aliases:
      - CVE-2023-39326
      - GHSA-9f76-wg39-x86h
    events:
      - timestamp: 2024-02-15T07:18:14Z
        type: fixed
        data:
          fixed-version: 1.18.2-r3

  - id: CGA-8w9j-wc9x-q23m
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T14:04:56Z
        type: fixed
        data:
          fixed-version: 1.21.0-r1

  - id: CGA-9c4v-2j9c-pcvp
    aliases:
      - CVE-2024-45338
      - GHSA-w32m-9786-jp63
    events:
      - timestamp: 2024-12-19T14:20:54Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cass-operator
            componentID: 9d26f4c7df95ea04
            componentName: golang.org/x/net
            componentVersion: v0.25.0
            componentType: go-module
            componentLocation: /usr/bin/manager
            scanner: grype
      - timestamp: 2024-12-20T02:16:30Z
        type: fixed
        data:
          fixed-version: 1.23.0-r1

  - id: CGA-g5jq-3vwf-3388
    aliases:
      - CVE-2024-24783
      - GHSA-3q2c-pvp5-3cqp
    events:
      - timestamp: 2024-03-13T07:07:10Z
        type: fixed
        data:
          fixed-version: 1.18.2-r4

  - id: CGA-pf4m-c4rq-6hvc
    aliases:
      - CVE-2023-45285
      - GHSA-5f94-vhjq-rpg8
    events:
      - timestamp: 2024-02-15T07:18:14Z
        type: fixed
        data:
          fixed-version: 1.18.2-r3

  - id: CGA-r6r5-wpp7-w9jx
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T07:07:15Z
        type: fixed
        data:
          fixed-version: 1.21.1-r1

  - id: CGA-wm9w-32jf-7fm5
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T08:17:28Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cass-operator
            componentID: 0de339ee143df8c3
            componentName: stdlib
            componentVersion: go1.23.0
            componentType: go-module
            componentLocation: /usr/bin/manager
            scanner: grype
      - timestamp: 2024-09-11T22:30:17Z
        type: fixed
        data:
          fixed-version: 1.22.2-r0

  - id: CGA-xfmc-m4g9-7626
    aliases:
      - CVE-2024-24785
      - GHSA-j6m3-gc37-6r6q
    events:
      - timestamp: 2024-03-13T07:07:11Z
        type: fixed
        data:
          fixed-version: 1.18.2-r4

  - id: CGA-xhwj-9fgp-2wg8
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-13T07:05:35Z
        type: fixed
        data:
          fixed-version: 1.19.1-r1