checkov.advisories.yaml

schema-version: 2.0.2

package:
  name: checkov

advisories:
  - id: CVE-2024-22190
    aliases:
      - GHSA-2mqj-m65w-jghx
    events:
      - timestamp: 2024-02-14T11:01:34Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: checkov
            componentID: 106278fb52508a9f
            componentName: GitPython
            componentVersion: 3.1.40
            componentType: python
            componentLocation: /usr/share/app/checkov/.venv/lib/python3.11/site-packages/GitPython-3.1.40.dist-info/METADATA, /usr/share/app/checkov/.venv/lib/python3.11/site-packages/GitPython-3.1.40.dist-info/RECORD, /usr/share/app/checkov/.venv/lib/python3.11/site-packages/GitPython-3.1.40.dist-info/top_level.txt
            scanner: grype

  - id: CVE-2024-22195
    aliases:
      - GHSA-h5c8-rqwp-cp95
    events:
      - timestamp: 2024-02-14T11:01:35Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: checkov
            componentID: 3039931a624f94cb
            componentName: Jinja2
            componentVersion: 3.1.2
            componentType: python
            componentLocation: /usr/share/app/checkov/.venv/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA, /usr/share/app/checkov/.venv/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD, /usr/share/app/checkov/.venv/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt
            scanner: grype

  - id: CVE-2024-23334
    aliases:
      - GHSA-5h86-8mv2-jq9f
    events:
      - timestamp: 2024-02-14T11:01:34Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: checkov
            componentID: c01daedbcb8c778c
            componentName: aiohttp
            componentVersion: 3.9.1
            componentType: python
            componentLocation: /usr/share/app/checkov/.venv/lib/python3.11/site-packages/aiohttp-3.9.1.dist-info/METADATA, /usr/share/app/checkov/.venv/lib/python3.11/site-packages/aiohttp-3.9.1.dist-info/RECORD, /usr/share/app/checkov/.venv/lib/python3.11/site-packages/aiohttp-3.9.1.dist-info/top_level.txt
            scanner: grype

  - id: CVE-2024-23829
    aliases:
      - GHSA-8qpw-xqxj-h4r2
    events:
      - timestamp: 2024-02-14T11:01:35Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: checkov
            componentID: c01daedbcb8c778c
            componentName: aiohttp
            componentVersion: 3.9.1
            componentType: python
            componentLocation: /usr/share/app/checkov/.venv/lib/python3.11/site-packages/aiohttp-3.9.1.dist-info/METADATA, /usr/share/app/checkov/.venv/lib/python3.11/site-packages/aiohttp-3.9.1.dist-info/RECORD, /usr/share/app/checkov/.venv/lib/python3.11/site-packages/aiohttp-3.9.1.dist-info/top_level.txt
            scanner: grype