diff --git a/flux-2.4.advisories.yaml b/flux-2.4.advisories.yaml index 5a5649b60..c9c87a19d 100644 --- a/flux-2.4.advisories.yaml +++ b/flux-2.4.advisories.yaml @@ -47,3 +47,39 @@ advisories: type: fixed data: fixed-version: 2.4.0-r1 + + - id: CGA-wjw3-52wx-2q53 + aliases: + - CVE-2025-21613 + - GHSA-v725-9546-7q7m + events: + - timestamp: 2025-01-07T07:37:25Z + type: detection + data: + type: scan/v1 + data: + subpackageName: flux-2.4 + componentID: 426d34e19c16c58b + componentName: github.com/go-git/go-git/v5 + componentVersion: v5.12.0 + componentType: go-module + componentLocation: /usr/bin/flux + scanner: grype + + - id: CGA-x982-x58x-37xq + aliases: + - CVE-2025-21614 + - GHSA-r9px-m959-cxf4 + events: + - timestamp: 2025-01-07T07:37:24Z + type: detection + data: + type: scan/v1 + data: + subpackageName: flux-2.4 + componentID: 426d34e19c16c58b + componentName: github.com/go-git/go-git/v5 + componentVersion: v5.12.0 + componentType: go-module + componentLocation: /usr/bin/flux + scanner: grype