chartmuseum.advisories.yaml

schema-version: 2.0.2

package:
  name: chartmuseum

advisories:
  - id: CVE-2023-39325
    aliases:
      - GHSA-4374-p667-p6c8
    events:
      - timestamp: 2023-10-13T16:43:17Z
        type: fixed
        data:
          fixed-version: 0.16.0-r6

  - id: CVE-2023-3978
    aliases:
      - GHSA-2wrh-6pvc-2jm9
    events:
      - timestamp: 2023-10-13T16:44:30Z
        type: fixed
        data:
          fixed-version: 0.16.0-r6

  - id: CVE-2023-45283
    aliases:
      - GHSA-vvjp-q62m-2vph
    events:
      - timestamp: 2023-11-07T19:24:12Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows

  - id: CVE-2023-45284
    aliases:
      - GHSA-rq3x-83w4-p28c
    events:
      - timestamp: 2023-11-07T19:24:14Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows

  - id: CVE-2024-25620
    aliases:
      - GHSA-v53g-5gjp-272r
    events:
      - timestamp: 2024-02-16T07:23:13Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: chartmuseum
            componentID: b5a9321567f6fc7d
            componentName: helm.sh/helm/v3
            componentVersion: v3.12.3
            componentType: go-module
            componentLocation: /usr/bin/chartmuseum
            scanner: grype
      - timestamp: 2024-02-16T12:51:01Z
        type: fixed
        data:
          fixed-version: 0.16.1-r2

  - id: GHSA-jq35-85cj-fj4p
    events:
      - timestamp: 2023-12-27T14:29:46Z
        type: fixed
        data:
          fixed-version: 0.16.0-r9