azcopy.advisories.yaml

schema-version: 2.0.2

package:
  name: azcopy

advisories:
  - id: CGA-4365-mwxv-5qhf
    aliases:
      - CVE-2024-45337
      - GHSA-v778-237x-gjrc
    events:
      - timestamp: 2024-12-12T07:08:17Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azcopy
            componentID: 470740f39e9851d9
            componentName: golang.org/x/crypto
            componentVersion: v0.28.0
            componentType: go-module
            componentLocation: /usr/bin/azcopy
            scanner: grype
      - timestamp: 2024-12-12T12:01:17Z
        type: fixed
        data:
          fixed-version: 10.27.1-r1

  - id: CGA-4v8w-8w7r-3h52
    aliases:
      - CVE-2024-45338
      - GHSA-w32m-9786-jp63
    events:
      - timestamp: 2024-12-19T11:18:59Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azcopy
            componentID: f158945fda44c730
            componentName: golang.org/x/net
            componentVersion: v0.30.0
            componentType: go-module
            componentLocation: /usr/bin/azcopy
            scanner: grype
      - timestamp: 2024-12-19T20:14:34Z
        type: fixed
        data:
          fixed-version: 10.27.1-r2

  - id: CGA-5xqg-phpc-cj8f
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T07:05:46Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azcopy
            componentID: 1040029530ffbfd2
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/azcopy
            scanner: grype
      - timestamp: 2024-09-18T16:19:48Z
        type: fixed
        data:
          fixed-version: 10.26.0-r1

  - id: CGA-fpm4-hx6q-ww59
    aliases:
      - CVE-2025-22868
    events:
      - timestamp: 2025-03-06T06:34:41Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azcopy
            componentID: d7944cc591f5e203
            componentName: golang.org/x/oauth2
            componentVersion: v0.23.0
            componentType: go-module
            componentLocation: /usr/bin/azcopy
            scanner: grype

  - id: CGA-g4m4-3chq-jc6w
    aliases:
      - CVE-2025-22866
      - GHSA-3whm-j4xm-rv8x
    events:
      - timestamp: 2025-02-08T07:10:18Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azcopy
            componentID: 4db0451699a80abd
            componentName: stdlib
            componentVersion: go1.23.5
            componentType: go-module
            componentLocation: /usr/bin/azcopy
            scanner: grype
      - timestamp: 2025-02-08T18:19:30Z
        type: fixed
        data:
          fixed-version: 10.28.0-r1

  - id: CGA-p2c8-v2f6-34c7
    aliases:
      - CVE-2024-51744
      - GHSA-29wx-vh33-7x7r
    events:
      - timestamp: 2024-11-05T07:39:00Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azcopy
            componentID: 7621c7a7c7b877d6
            componentName: github.com/golang-jwt/jwt/v4
            componentVersion: v4.5.0
            componentType: go-module
            componentLocation: /usr/bin/azcopy
            scanner: grype
      - timestamp: 2024-11-06T07:01:50Z
        type: fixed
        data:
          fixed-version: 10.27.0-r1

  - id: CGA-p396-fcgp-8322
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T07:05:47Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azcopy
            componentID: 1040029530ffbfd2
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/azcopy
            scanner: grype
      - timestamp: 2024-09-18T16:19:49Z
        type: fixed
        data:
          fixed-version: 10.26.0-r1

  - id: CGA-pvj2-qwxq-h4xh
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T07:05:48Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azcopy
            componentID: 1040029530ffbfd2
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/azcopy
            scanner: grype
      - timestamp: 2024-09-18T16:19:49Z
        type: fixed
        data:
          fixed-version: 10.26.0-r1

  - id: CGA-xm55-3pw9-rjhp
    aliases:
      - CVE-2025-22869
    events:
      - timestamp: 2025-03-06T06:34:44Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: azcopy
            componentID: 63c630aafe06e45e
            componentName: golang.org/x/crypto
            componentVersion: v0.31.0
            componentType: go-module
            componentLocation: /usr/bin/azcopy
            scanner: grype