Adding detection events for bom (#11124)

* Adding Advisory GHSA-r9px-m959-cxf4 for bom * Adding Advisory GHSA-v725-9546-7q7m for bom --------- Co-authored-by: octo-sts[bot] <[email protected]>
wolfi-dev · Jan 7, 2025 · f0e3ae2 · f0e3ae2
1 parent 3e9c751
commit f0e3ae2
Showing 1 changed file with 36 additions and 0 deletions.
diff --git a/bom.advisories.yaml b/bom.advisories.yaml
@@ -172,6 +172,24 @@ advisories:
         data:
           fixed-version: 0.6.0-r0
 
+  - id: CGA-fwcg-h4x9-8xr4
+    aliases:
+      - CVE-2025-21614
+      - GHSA-r9px-m959-cxf4
+    events:
+      - timestamp: 2025-01-07T07:34:33Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: bom
+            componentID: f6c10ea68758396c
+            componentName: github.com/go-git/go-git/v5
+            componentVersion: v5.11.0
+            componentType: go-module
+            componentLocation: /usr/bin/bom
+            scanner: grype
+
   - id: CGA-g948-hqm4-fxxh
     aliases:
       - CVE-2024-24791
@@ -401,6 +419,24 @@ advisories:
         data:
           fixed-version: 0.6.0-r1
 
+  - id: CGA-xw2h-vxp4-vfvg
+    aliases:
+      - CVE-2025-21613
+      - GHSA-v725-9546-7q7m
+    events:
+      - timestamp: 2025-01-07T07:34:42Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: bom
+            componentID: f6c10ea68758396c
+            componentName: github.com/go-git/go-git/v5
+            componentVersion: v5.11.0
+            componentType: go-module
+            componentLocation: /usr/bin/bom
+            scanner: grype
+
   - id: CGA-xxmc-xq95-99j2
     aliases:
       - CVE-2023-44487