Adding detection events for flux-2.4 (#11125)

* Adding Advisory GHSA-r9px-m959-cxf4 for flux-2.4 * Adding Advisory GHSA-v725-9546-7q7m for flux-2.4 --------- Co-authored-by: octo-sts[bot] <[email protected]>
wolfi-dev · Jan 7, 2025 · 2310017 · 2310017
1 parent f0e3ae2
commit 2310017
Showing 1 changed file with 36 additions and 0 deletions.
diff --git a/flux-2.4.advisories.yaml b/flux-2.4.advisories.yaml
@@ -47,3 +47,39 @@ advisories:
         type: fixed
         data:
           fixed-version: 2.4.0-r1
+
+  - id: CGA-wjw3-52wx-2q53
+    aliases:
+      - CVE-2025-21613
+      - GHSA-v725-9546-7q7m
+    events:
+      - timestamp: 2025-01-07T07:37:25Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: flux-2.4
+            componentID: 426d34e19c16c58b
+            componentName: github.com/go-git/go-git/v5
+            componentVersion: v5.12.0
+            componentType: go-module
+            componentLocation: /usr/bin/flux
+            scanner: grype
+
+  - id: CGA-x982-x58x-37xq
+    aliases:
+      - CVE-2025-21614
+      - GHSA-r9px-m959-cxf4
+    events:
+      - timestamp: 2025-01-07T07:37:24Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: flux-2.4
+            componentID: 426d34e19c16c58b
+            componentName: github.com/go-git/go-git/v5
+            componentVersion: v5.12.0
+            componentType: go-module
+            componentLocation: /usr/bin/flux
+            scanner: grype