chore: update security scan results

actions-user · actions-user · commit 11a17baab5ea · 2025-11-17T00:28:27.000Z
- Updated scan data from workflow run 137
    - Scan mode: git-only
    - Total scanned: 176
    - Total vulnerabilities: 506
diff --git a/data/master-8f1e7bc4e0.json b/data/master-8f1e7bc4e0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "master-8f1e7bc4e0",
-  "scan_date": "2025-11-16T00:29:33.986912Z",
+  "scan_date": "2025-11-17T00:28:26.237016Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-11-16T00:29:24.774046Z",
+  "scan_date": "2025-11-17T00:28:08.863309Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.1-23d4af4fe3.json b/data/release_v5.1-23d4af4fe3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-23d4af4fe3",
-  "scan_date": "2025-11-16T00:29:08.764822Z",
+  "scan_date": "2025-11-17T00:28:01.503493Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.2-72d06017df.json b/data/release_v5.2-72d06017df.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.2-72d06017df",
-  "scan_date": "2025-11-16T00:28:44.166009Z",
+  "scan_date": "2025-11-17T00:27:54.691452Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.3-cb920e3225.json b/data/release_v5.3-cb920e3225.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-cb920e3225",
-  "scan_date": "2025-11-16T00:29:16.615065Z",
+  "scan_date": "2025-11-17T00:27:47.792499Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.4-aac5b37fa3.json b/data/release_v5.4-aac5b37fa3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-aac5b37fa3",
-  "scan_date": "2025-11-16T00:28:52.929847Z",
+  "scan_date": "2025-11-17T00:28:17.982278Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.5-d1e854920a.json b/data/release_v5.5-d1e854920a.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-d1e854920a",
-  "scan_date": "2025-11-16T00:29:01.104739Z",
+  "scan_date": "2025-11-17T00:27:39.747299Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,61 +1,61 @@
 {
-  "last_updated": "2025-11-16T00:29:33.987383Z",
+  "last_updated": "2025-11-17T00:28:26.237416Z",
   "scanned_versions": [
-    "v5.1.2",
-    "v5.2.6",
-    "v5.3.3",
+    "v5.0.9",
+    "v5.0.5",
+    "v5.2.5",
     "v5.1.1",
-    "v5.0.4",
-    "v5.0.7",
+    "v5.2.3",
+    "v5.5",
+    "v5.0.6",
     "v5.3.4",
-    "v5.1.3",
+    "v5.2.2",
     "v5.0",
-    "v5.1.5",
-    "v5.2.5",
+    "v5.2",
+    "v5.3.3",
+    "v5.0.1",
+    "v5.0.3",
     "v5.5.1",
-    "v5.3.2",
-    "v5.0.6",
-    "v5.3",
+    "v5.2.6",
+    "v5.4",
+    "v5.0.4",
+    "v5.1.6",
+    "v5.1.3",
+    "v5.3.1",
+    "v5.4.3",
+    "v5.1",
+    "v5.4.1",
+    "v5.1.2",
     "v5.2.4",
     "v5.0.2",
-    "v5.0.8",
-    "v5.0.5",
+    "v5.3.2",
     "v5.1.4",
-    "v5.4.1",
-    "v5.4",
-    "v5.5",
-    "v5.1",
-    "v5.4.2",
-    "v5.2.2",
-    "v5.1.6",
-    "v5.2",
+    "v5.1.5",
+    "v5.3",
+    "v5.0.7",
     "v5.2.1",
-    "v5.4.3",
-    "v5.0.3",
-    "v5.0.1",
-    "v5.3.1",
-    "v5.2.3",
-    "v5.0.9",
-    "release/v5.2-72d06017df",
-    "release/v5.4-aac5b37fa3",
+    "v5.0.8",
+    "v5.4.2",
     "release/v5.5-d1e854920a",
-    "release/v5.1-23d4af4fe3",
     "release/v5.3-cb920e3225",
+    "release/v5.2-72d06017df",
+    "release/v5.1-23d4af4fe3",
     "release/v5.0-d9f9b7d8ed",
+    "release/v5.4-aac5b37fa3",
     "master-8f1e7bc4e0"
   ],
   "failed_versions": [
-    "release/v5.2",
-    "release/v5.4",
     "release/v5.5",
-    "release/v5.1",
     "release/v5.3",
+    "release/v5.2",
+    "release/v5.1",
     "release/v5.0",
+    "release/v5.4",
     "master"
   ],
   "total_scanned": 42,
   "scan_method": "git-batch",
-  "workflow_run": "136",
+  "workflow_run": "137",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.21.0",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-11-16T00:28:11.825444Z",
+  "scan_date": "2025-11-17T00:24:45.053766Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-11-16T00:26:25.703918Z",
+  "scan_date": "2025-11-17T00:26:26.273054Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-11-16T00:28:09.810124Z",
+  "scan_date": "2025-11-17T00:24:47.058278Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-11-16T00:24:57.540130Z",
+  "scan_date": "2025-11-17T00:25:20.784173Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-11-16T00:26:39.618190Z",
+  "scan_date": "2025-11-17T00:23:23.226333Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-11-16T00:26:05.701469Z",
+  "scan_date": "2025-11-17T00:24:04.194594Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-11-16T00:25:04.321624Z",
+  "scan_date": "2025-11-17T00:27:06.521406Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-11-16T00:26:32.952794Z",
+  "scan_date": "2025-11-17T00:27:21.959001Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-11-16T00:28:35.774566Z",
+  "scan_date": "2025-11-17T00:23:16.334167Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-11-16T00:25:24.210514Z",
+  "scan_date": "2025-11-17T00:24:25.157185Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-11-16T00:24:50.610507Z",
+  "scan_date": "2025-11-17T00:23:39.131014Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-11-16T00:24:26.135610Z",
+  "scan_date": "2025-11-17T00:26:14.805250Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-11-16T00:25:21.436874Z",
+  "scan_date": "2025-11-17T00:25:36.491512Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-11-16T00:26:47.020499Z",
+  "scan_date": "2025-11-17T00:26:43.396237Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-11-16T00:25:32.310144Z",
+  "scan_date": "2025-11-17T00:26:50.585222Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-11-16T00:27:41.434522Z",
+  "scan_date": "2025-11-17T00:25:28.909618Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-11-16T00:27:15.680083Z",
+  "scan_date": "2025-11-17T00:25:57.257729Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-11-16T00:27:56.648582Z",
+  "scan_date": "2025-11-17T00:27:14.221751Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-11-16T00:27:33.620744Z",
+  "scan_date": "2025-11-17T00:24:21.936053Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-11-16T00:28:28.013248Z",
+  "scan_date": "2025-11-17T00:23:46.957899Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-11-16T00:26:22.394012Z",
+  "scan_date": "2025-11-17T00:26:23.069767Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.5",
-  "scan_date": "2025-11-16T00:25:40.121875Z",
+  "scan_date": "2025-11-17T00:23:31.314279Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.6.json b/data/v5.2.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.6",
-  "scan_date": "2025-11-16T00:24:34.322149Z",
+  "scan_date": "2025-11-17T00:25:04.304908Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.json b/data/v5.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2",
-  "scan_date": "2025-11-16T00:27:49.615704Z",
+  "scan_date": "2025-11-17T00:24:33.208090Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.3.1",
-  "scan_date": "2025-11-16T00:28:20.432080Z",
+  "scan_date": "2025-11-17T00:25:44.744060Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -34,16 +44,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2025-47917",
       "component": "mbed_tls",
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.2",
-  "scan_date": "2025-11-16T00:25:57.657048Z",
+  "scan_date": "2025-11-17T00:26:35.211624Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.3",
-  "scan_date": "2025-11-16T00:24:42.791348Z",
+  "scan_date": "2025-11-17T00:24:41.818842Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.4.json b/data/v5.3.4.json
diff --git a/data/v5.3.json b/data/v5.3.json
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.3.json b/data/v5.4.3.json
diff --git a/data/v5.4.json b/data/v5.4.json
diff --git a/data/v5.5.1.json b/data/v5.5.1.json
diff --git a/data/v5.5.json b/data/v5.5.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "master-8f1e7bc4e0",`
`3`		`- "scan_date": "2025-11-16T00:29:33.986912Z",`
	`3`	`+ "scan_date": "2025-11-17T00:28:26.237016Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-11-16T00:29:24.774046Z",`
	`3`	`+ "scan_date": "2025-11-17T00:28:08.863309Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-23d4af4fe3",`
`3`		`- "scan_date": "2025-11-16T00:29:08.764822Z",`
	`3`	`+ "scan_date": "2025-11-17T00:28:01.503493Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.2-72d06017df",`
`3`		`- "scan_date": "2025-11-16T00:28:44.166009Z",`
	`3`	`+ "scan_date": "2025-11-17T00:27:54.691452Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-cb920e3225",`
`3`		`- "scan_date": "2025-11-16T00:29:16.615065Z",`
	`3`	`+ "scan_date": "2025-11-17T00:27:47.792499Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-aac5b37fa3",`
`3`		`- "scan_date": "2025-11-16T00:28:52.929847Z",`
	`3`	`+ "scan_date": "2025-11-17T00:28:17.982278Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-d1e854920a",`
`3`		`- "scan_date": "2025-11-16T00:29:01.104739Z",`
	`3`	`+ "scan_date": "2025-11-17T00:27:39.747299Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-11-16T00:28:11.825444Z",`
	`3`	`+ "scan_date": "2025-11-17T00:24:45.053766Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.2",`
`3`		`- "scan_date": "2025-11-16T00:26:25.703918Z",`
	`3`	`+ "scan_date": "2025-11-17T00:26:26.273054Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`