chore: update security scan results

actions-user · actions-user · commit 0432729ffcd3 · 2025-09-30T00:26:28.000Z
- Updated scan data from workflow run 89
    - Scan mode: git-only
    - Total scanned: 117
    - Total vulnerabilities: 369
diff --git a/data/master-25c40d4563.json b/data/master-25c40d4563.json
@@ -1,6 +1,6 @@
 {
   "release_version": "master-25c40d4563",
-  "scan_date": "2025-09-29T00:27:21.082003Z",
+  "scan_date": "2025-09-30T00:26:27.280883Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-09-29T00:26:40.288792Z",
+  "scan_date": "2025-09-30T00:26:02.763795Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.1-d75d2ad5f4.json b/data/release_v5.1-d75d2ad5f4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-d75d2ad5f4",
-  "scan_date": "2025-09-29T00:27:12.613089Z",
+  "scan_date": "2025-09-30T00:25:37.771006Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.2-2bc90b1274.json b/data/release_v5.2-2bc90b1274.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.2-2bc90b1274",
-  "scan_date": "2025-09-29T00:26:57.214081Z",
+  "scan_date": "2025-09-30T00:26:10.995797Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.3-d94ddc0745.json b/data/release_v5.3-d94ddc0745.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-d94ddc0745",
-  "scan_date": "2025-09-29T00:26:32.128891Z",
+  "scan_date": "2025-09-30T00:25:54.687499Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.4-1bfe1595fa.json b/data/release_v5.4-1bfe1595fa.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-1bfe1595fa",
-  "scan_date": "2025-09-29T00:27:05.203257Z",
+  "scan_date": "2025-09-30T00:26:19.321362Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.5-4b2b5d7baf.json b/data/release_v5.5-4b2b5d7baf.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-4b2b5d7baf",
-  "scan_date": "2025-09-29T00:26:49.464788Z",
+  "scan_date": "2025-09-30T00:25:46.728038Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,59 +1,59 @@
 {
-  "last_updated": "2025-09-29T00:27:21.082503Z",
+  "last_updated": "2025-09-30T00:26:27.281437Z",
   "scanned_versions": [
-    "v5.0.4",
+    "v5.0.1",
     "v5.2",
-    "v5.2.5",
-    "v5.1.4",
-    "v5.5",
-    "v5.0.8",
+    "v5.3.3",
+    "v5.0.9",
     "v5.1.1",
-    "v5.4",
-    "v5.2.1",
-    "v5.1.2",
-    "v5.1.6",
-    "v5.0.1",
-    "v5.1.3",
-    "v5.4.2",
-    "v5.0.2",
-    "v5.0",
-    "v5.0.7",
-    "v5.2.2",
+    "v5.2.3",
+    "v5.0.4",
     "v5.1.5",
     "v5.3.1",
     "v5.5.1",
-    "v5.0.6",
-    "v5.0.9",
     "v5.3.4",
-    "v5.4.1",
+    "v5.2.1",
+    "v5.0.7",
+    "v5.0.2",
+    "v5.1.4",
+    "v5.1.6",
     "v5.0.5",
+    "v5.0.8",
+    "v5.4.1",
+    "v5.1.2",
+    "v5.3.2",
+    "v5.2.2",
     "v5.1",
+    "v5.3",
+    "v5.4.2",
+    "v5.2.5",
     "v5.2.4",
+    "v5.4",
+    "v5.0.6",
+    "v5.0",
+    "v5.5",
+    "v5.1.3",
     "v5.0.3",
-    "v5.3.3",
-    "v5.2.3",
-    "v5.3.2",
-    "v5.3",
+    "release/v5.1-d75d2ad5f4",
+    "release/v5.5-4b2b5d7baf",
     "release/v5.3-d94ddc0745",
     "release/v5.0-d9f9b7d8ed",
-    "release/v5.5-4b2b5d7baf",
     "release/v5.2-2bc90b1274",
     "release/v5.4-1bfe1595fa",
-    "release/v5.1-d75d2ad5f4",
     "master-25c40d4563"
   ],
   "failed_versions": [
+    "release/v5.1",
+    "release/v5.5",
     "release/v5.3",
     "release/v5.0",
-    "release/v5.5",
     "release/v5.2",
     "release/v5.4",
-    "release/v5.1",
     "master"
   ],
   "total_scanned": 40,
   "scan_method": "git-batch",
-  "workflow_run": "88",
+  "workflow_run": "89",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.21.0",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-09-29T00:23:55.812306Z",
+  "scan_date": "2025-09-30T00:21:34.870275Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-09-29T00:24:16.506082Z",
+  "scan_date": "2025-09-30T00:23:13.344435Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-09-29T00:25:51.593814Z",
+  "scan_date": "2025-09-30T00:25:29.580533Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-09-29T00:22:32.294956Z",
+  "scan_date": "2025-09-30T00:22:22.892718Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-09-29T00:25:37.517679Z",
+  "scan_date": "2025-09-30T00:23:35.593085Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-09-29T00:25:05.279512Z",
+  "scan_date": "2025-09-30T00:25:06.298663Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-09-29T00:24:25.213880Z",
+  "scan_date": "2025-09-30T00:23:11.196847Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-09-29T00:23:13.068178Z",
+  "scan_date": "2025-09-30T00:23:42.718443Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-09-29T00:25:12.266184Z",
+  "scan_date": "2025-09-30T00:22:00.137695Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-09-29T00:24:18.500906Z",
+  "scan_date": "2025-09-30T00:25:08.693582Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-09-29T00:23:20.567596Z",
+  "scan_date": "2025-09-30T00:22:07.602764Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-09-29T00:23:45.429461Z",
+  "scan_date": "2025-09-30T00:23:59.585170Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-09-29T00:24:03.545114Z",
+  "scan_date": "2025-09-30T00:25:26.686522Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-09-29T00:22:55.367255Z",
+  "scan_date": "2025-09-30T00:23:20.601966Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-09-29T00:24:40.199564Z",
+  "scan_date": "2025-09-30T00:22:31.076341Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-09-29T00:23:52.637955Z",
+  "scan_date": "2025-09-30T00:23:27.951944Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-09-29T00:25:40.211487Z",
+  "scan_date": "2025-09-30T00:24:19.234996Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-09-29T00:23:37.965304Z",
+  "scan_date": "2025-09-30T00:23:03.449548Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45159",
       "component": "mbed_tls",
@@ -24,16 +34,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2024-30166",
       "component": "mbed_tls",
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-09-29T00:24:32.849268Z",
+  "scan_date": "2025-09-30T00:24:16.286007Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-09-29T00:26:08.489619Z",
+  "scan_date": "2025-09-30T00:22:15.326899Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-09-29T00:25:48.193529Z",
+  "scan_date": "2025-09-30T00:24:50.593519Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.5",
-  "scan_date": "2025-09-29T00:22:47.844496Z",
+  "scan_date": "2025-09-30T00:24:44.377469Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.json b/data/v5.2.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2",
-  "scan_date": "2025-09-29T00:22:40.253090Z",
+  "scan_date": "2025-09-30T00:21:43.247822Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45159",
       "component": "mbed_tls",
@@ -24,16 +34,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2024-30166",
       "component": "mbed_tls",
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
diff --git a/data/v5.3.4.json b/data/v5.3.4.json
diff --git a/data/v5.3.json b/data/v5.3.json
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.json b/data/v5.4.json
diff --git a/data/v5.5.1.json b/data/v5.5.1.json
diff --git a/data/v5.5.json b/data/v5.5.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "master-25c40d4563",`
`3`		`- "scan_date": "2025-09-29T00:27:21.082003Z",`
	`3`	`+ "scan_date": "2025-09-30T00:26:27.280883Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-09-29T00:26:40.288792Z",`
	`3`	`+ "scan_date": "2025-09-30T00:26:02.763795Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-d75d2ad5f4",`
`3`		`- "scan_date": "2025-09-29T00:27:12.613089Z",`
	`3`	`+ "scan_date": "2025-09-30T00:25:37.771006Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.2-2bc90b1274",`
`3`		`- "scan_date": "2025-09-29T00:26:57.214081Z",`
	`3`	`+ "scan_date": "2025-09-30T00:26:10.995797Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-d94ddc0745",`
`3`		`- "scan_date": "2025-09-29T00:26:32.128891Z",`
	`3`	`+ "scan_date": "2025-09-30T00:25:54.687499Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-1bfe1595fa",`
`3`		`- "scan_date": "2025-09-29T00:27:05.203257Z",`
	`3`	`+ "scan_date": "2025-09-30T00:26:19.321362Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-4b2b5d7baf",`
`3`		`- "scan_date": "2025-09-29T00:26:49.464788Z",`
	`3`	`+ "scan_date": "2025-09-30T00:25:46.728038Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-09-29T00:23:55.812306Z",`
	`3`	`+ "scan_date": "2025-09-30T00:21:34.870275Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.2",`
`3`		`- "scan_date": "2025-09-29T00:24:16.506082Z",`
	`3`	`+ "scan_date": "2025-09-30T00:23:13.344435Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`