Merge pull request wolfi-dev#1113 from chainguardian/adv-logstash-8.1…

…2.0-r0 Adding detection events for logstash
sergio-chainguard · Feb 5, 2024 · 71ce6b8 · 71ce6b8
2 parents ec464e5 + ff0ba77
commit 71ce6b8
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/logstash.advisories.yaml b/logstash.advisories.yaml
@@ -0,0 +1,22 @@
+schema-version: 2.0.2
+
+package:
+  name: logstash
+
+advisories:
+  - id: CVE-2023-36617
+    aliases:
+      - GHSA-hww2-5g85-429m
+    events:
+      - timestamp: 2024-02-05T22:10:49Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: logstash
+            componentID: 4dac9346772e0d48
+            componentName: uri
+            componentVersion: 0.12.1
+            componentType: gem
+            componentLocation: /usr/share/java/logstash/vendor/jruby/lib/ruby/gems/shared/specifications/default/uri-0.12.1.gemspec
+            scanner: grype