az.advisories.yaml

schema-version: 2.0.2

package:
  name: az

advisories:
  - id: CGA-374g-f8mr-whvm
    aliases:
      - CVE-2024-6345
      - GHSA-cx63-2mw6-8hw5
    events:
      - timestamp: 2024-07-16T07:45:26Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: az
            componentID: 7c4098c37fb54176
            componentName: setuptools
            componentVersion: 65.5.1
            componentType: python
            componentLocation: /usr/share/az/.venv/lib/python3.11/site-packages/setuptools-65.5.1.dist-info/METADATA, /usr/share/az/.venv/lib/python3.11/site-packages/setuptools-65.5.1.dist-info/RECORD, /usr/share/az/.venv/lib/python3.11/site-packages/setuptools-65.5.1.dist-info/top_level.txt
            scanner: grype
      - timestamp: 2024-07-16T20:00:37Z
        type: fixed
        data:
          fixed-version: 2.62.0-r1

  - id: CGA-3q54-hjw3-8927
    aliases:
      - CVE-2023-50782
      - GHSA-3ww4-gg4f-jr7f
    events:
      - timestamp: 2024-02-07T07:04:48Z
        type: fixed
        data:
          fixed-version: 2.57.0-r0

  - id: CGA-8493-6499-2mc5
    aliases:
      - CVE-2024-39689
      - GHSA-248v-346w-9cwc
    events:
      - timestamp: 2024-07-06T07:12:11Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: az
            componentID: 3227f55c892bba4e
            componentName: certifi
            componentVersion: 2024.6.2
            componentType: python
            componentLocation: /usr/share/az/.venv/lib/python3.11/site-packages/certifi-2024.6.2.dist-info/METADATA, /usr/share/az/.venv/lib/python3.11/site-packages/certifi-2024.6.2.dist-info/RECORD, /usr/share/az/.venv/lib/python3.11/site-packages/certifi-2024.6.2.dist-info/top_level.txt
            scanner: grype
      - timestamp: 2024-07-08T16:38:02Z
        type: fixed
        data:
          fixed-version: 2.61.0-r2

  - id: CGA-f62w-c924-7874
    aliases:
      - CVE-2024-26130
      - GHSA-6vqw-3v5j-54x4
    events:
      - timestamp: 2024-02-22T07:52:30Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: az
            componentID: 80dfa92ea72185c4
            componentName: cryptography
            componentVersion: 42.0.2
            componentType: python
            componentLocation: /usr/share/az/.venv/lib/python3.11/site-packages/cryptography-42.0.2.dist-info/METADATA, /usr/share/az/.venv/lib/python3.11/site-packages/cryptography-42.0.2.dist-info/RECORD, /usr/share/az/.venv/lib/python3.11/site-packages/cryptography-42.0.2.dist-info/top_level.txt
            scanner: grype
      - timestamp: 2024-03-05T04:04:00Z
        type: fixed
        data:
          fixed-version: 2.58.0-r0

  - id: CGA-fjwf-jr66-v335
    aliases:
      - CVE-2023-45803
      - GHSA-g4mx-q9vg-27p4
    events:
      - timestamp: 2024-09-03T10:30:29Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: az
            componentID: 48c213778a6fc48e
            componentName: urllib3
            componentVersion: 1.26.17
            componentType: python
            componentLocation: /usr/share/az/.venv/lib/python3.11/site-packages/pip/_vendor/vendor.txt
            scanner: grype

  - id: CGA-gpgf-5mhx-g7f3
    aliases:
      - GHSA-h4gh-qq45-vh27
    events:
      - timestamp: 2024-09-04T09:06:27Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: az
            componentID: 870a6cc86e1762a5
            componentName: cryptography
            componentVersion: 43.0.0
            componentType: python
            componentLocation: /usr/share/az/.venv/lib/python3.11/site-packages/cryptography-43.0.0.dist-info/METADATA, /usr/share/az/.venv/lib/python3.11/site-packages/cryptography-43.0.0.dist-info/RECORD
            scanner: grype

  - id: CGA-mrr8-97mj-749q
    aliases:
      - CVE-2024-37891
      - GHSA-34jh-p97f-mpxf
    events:
      - timestamp: 2024-06-18T07:01:07Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: az
            componentID: 96ae283d102d0112
            componentName: urllib3
            componentVersion: 2.2.1
            componentType: python
            componentLocation: /usr/share/az/.venv/lib/python3.11/site-packages/urllib3-2.2.1.dist-info/METADATA, /usr/share/az/.venv/lib/python3.11/site-packages/urllib3-2.2.1.dist-info/RECORD
            scanner: grype
      - timestamp: 2024-06-19T14:35:31Z
        type: fixed
        data:
          fixed-version: 2.61.0-r1

  - id: CGA-v263-vf6g-w8hh
    aliases:
      - CVE-2024-35195
      - GHSA-9wx4-h78v-vm56
    events:
      - timestamp: 2024-05-22T09:07:08Z
        type: fixed
        data:
          fixed-version: 2.61.0-r0

  - id: CGA-v6gj-ww59-2g5w
    aliases:
      - CVE-2024-0727
      - GHSA-9v9h-cgj8-h64p
    events:
      - timestamp: 2024-02-17T07:03:06Z
        type: fixed
        data:
          fixed-version: 2.57.0-r0

  - id: CGA-v6qx-945c-jj8w
    aliases:
      - CVE-2024-3651
      - GHSA-jjg7-2v4v-x38h
    events:
      - timestamp: 2024-04-14T07:14:25Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: az
            componentID: 3f18f59888c8bc37
            componentName: idna
            componentVersion: "3.6"
            componentType: python
            componentLocation: /usr/share/az/.venv/lib/python3.11/site-packages/idna-3.6.dist-info/METADATA, /usr/share/az/.venv/lib/python3.11/site-packages/idna-3.6.dist-info/RECORD
            scanner: grype
      - timestamp: 2024-04-30T07:00:26Z
        type: fixed
        data:
          fixed-version: 2.60.0-r0