chore: update security scan results

actions-user · actions-user · commit 83c88baa42d8 · 2025-08-05T00:34:26.000Z
- Updated scan data from workflow run 29
    - Scan mode: git-only
    - Total scanned: 70
    - Total vulnerabilities: 272
diff --git a/data/master-4e036983a7.json b/data/master-4e036983a7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "master-4e036983a7",
-  "scan_date": "2025-08-04T00:29:58.012087Z",
+  "scan_date": "2025-08-05T00:34:24.562012Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-08-04T00:29:41.166540Z",
+  "scan_date": "2025-08-05T00:33:39.494691Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.1-ee97e0aa6b.json b/data/release_v5.1-ee97e0aa6b.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-ee97e0aa6b",
-  "scan_date": "2025-08-04T00:29:34.071089Z",
+  "scan_date": "2025-08-05T00:34:02.730657Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.2-814d50bb1b.json b/data/release_v5.2-814d50bb1b.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.2-814d50bb1b",
-  "scan_date": "2025-08-04T00:29:10.678032Z",
+  "scan_date": "2025-08-05T00:34:09.155924Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.3-6045e49afd.json b/data/release_v5.3-6045e49afd.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-6045e49afd",
-  "scan_date": "2025-08-04T00:29:49.761449Z",
+  "scan_date": "2025-08-05T00:33:55.860821Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.4-51257119d5.json b/data/release_v5.4-51257119d5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-51257119d5",
-  "scan_date": "2025-08-04T00:29:26.891036Z",
+  "scan_date": "2025-08-05T00:33:48.376689Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.5-b66b5448e0.json b/data/release_v5.5-b66b5448e0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-b66b5448e0",
-  "scan_date": "2025-08-04T00:29:19.480680Z",
+  "scan_date": "2025-08-05T00:34:17.129810Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,57 +1,57 @@
 {
-  "last_updated": "2025-08-04T00:29:58.012541Z",
+  "last_updated": "2025-08-05T00:34:24.562452Z",
   "scanned_versions": [
-    "v5.2.1",
-    "v5.1.3",
-    "v5.1.5",
+    "v5.4.2",
     "v5.0.7",
-    "v5.1.6",
     "v5.4.1",
+    "v5.0.3",
     "v5.1.1",
-    "v5.0.1",
-    "v5.3.2",
-    "v5.4.2",
-    "v5.0.5",
-    "v5.3.3",
     "v5.5",
-    "v5.0.6",
+    "v5.1.6",
     "v5.2",
-    "v5.0.3",
     "v5.0.9",
     "v5.2.3",
-    "v5.0",
+    "v5.4",
+    "v5.3",
+    "v5.2.5",
+    "v5.2.2",
+    "v5.3.3",
     "v5.1",
     "v5.1.2",
-    "v5.3",
-    "v5.0.4",
+    "v5.0.2",
+    "v5.1.5",
     "v5.2.4",
-    "v5.4",
+    "v5.0",
+    "v5.2.1",
+    "v5.1.3",
+    "v5.0.1",
+    "v5.1.4",
     "v5.3.1",
-    "v5.2.2",
-    "v5.2.5",
+    "v5.0.5",
     "v5.0.8",
-    "v5.1.4",
-    "v5.0.2",
-    "release/v5.2-814d50bb1b",
-    "release/v5.5-b66b5448e0",
-    "release/v5.4-51257119d5",
-    "release/v5.1-ee97e0aa6b",
+    "v5.0.4",
+    "v5.0.6",
+    "v5.3.2",
     "release/v5.0-d9f9b7d8ed",
+    "release/v5.4-51257119d5",
     "release/v5.3-6045e49afd",
+    "release/v5.1-ee97e0aa6b",
+    "release/v5.2-814d50bb1b",
+    "release/v5.5-b66b5448e0",
     "master-4e036983a7"
   ],
   "failed_versions": [
-    "release/v5.2",
-    "release/v5.5",
-    "release/v5.4",
-    "release/v5.1",
     "release/v5.0",
+    "release/v5.4",
     "release/v5.3",
+    "release/v5.1",
+    "release/v5.2",
+    "release/v5.5",
     "master"
   ],
   "total_scanned": 38,
   "scan_method": "git-batch",
-  "workflow_run": "28",
+  "workflow_run": "29",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.21.0",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-08-04T00:26:19.895431Z",
+  "scan_date": "2025-08-05T00:32:41.258089Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-08-04T00:29:02.379250Z",
+  "scan_date": "2025-08-05T00:32:06.041968Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-08-04T00:27:22.322679Z",
+  "scan_date": "2025-08-05T00:30:27.223217Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-08-04T00:28:05.576351Z",
+  "scan_date": "2025-08-05T00:33:17.010784Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-08-04T00:26:45.299592Z",
+  "scan_date": "2025-08-05T00:33:04.380059Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-08-04T00:27:11.410237Z",
+  "scan_date": "2025-08-05T00:33:23.136066Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-08-04T00:25:53.398396Z",
+  "scan_date": "2025-08-05T00:30:14.896554Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-08-04T00:28:52.102170Z",
+  "scan_date": "2025-08-05T00:33:10.833812Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-08-04T00:27:29.404021Z",
+  "scan_date": "2025-08-05T00:31:05.670079Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-08-04T00:27:40.594591Z",
+  "scan_date": "2025-08-05T00:32:24.242976Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-08-04T00:26:17.403227Z",
+  "scan_date": "2025-08-05T00:30:33.980022Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-08-04T00:27:50.264928Z",
+  "scan_date": "2025-08-05T00:32:03.535324Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-08-04T00:25:38.449751Z",
+  "scan_date": "2025-08-05T00:32:38.909562Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-08-04T00:28:59.705477Z",
+  "scan_date": "2025-08-05T00:32:48.592036Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-08-04T00:25:45.365905Z",
+  "scan_date": "2025-08-05T00:32:13.785806Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-08-04T00:26:01.092220Z",
+  "scan_date": "2025-08-05T00:30:50.551208Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-08-04T00:27:43.520224Z",
+  "scan_date": "2025-08-05T00:31:56.765319Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-08-04T00:25:31.558857Z",
+  "scan_date": "2025-08-05T00:32:32.189972Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-08-04T00:28:37.282779Z",
+  "scan_date": "2025-08-05T00:31:44.809271Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,19 +1,9 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-08-04T00:27:37.178742Z",
+  "scan_date": "2025-08-05T00:31:13.593023Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -44,6 +34,16 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-28755",
       "component": "mbed_tls",
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-08-04T00:28:13.792187Z",
+  "scan_date": "2025-08-05T00:32:21.102495Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.5",
-  "scan_date": "2025-08-04T00:28:44.518329Z",
+  "scan_date": "2025-08-05T00:31:37.491531Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.json b/data/v5.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2",
-  "scan_date": "2025-08-04T00:27:19.345033Z",
+  "scan_date": "2025-08-05T00:30:57.981922Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.1",
-  "scan_date": "2025-08-04T00:28:29.956044Z",
+  "scan_date": "2025-08-05T00:32:56.509181Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.2",
-  "scan_date": "2025-08-04T00:26:28.661412Z",
+  "scan_date": "2025-08-05T00:33:31.472977Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.3",
-  "scan_date": "2025-08-04T00:26:54.588417Z",
+  "scan_date": "2025-08-05T00:31:53.010342Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.json b/data/v5.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3",
-  "scan_date": "2025-08-04T00:27:58.014013Z",
+  "scan_date": "2025-08-05T00:31:29.911608Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.4.1",
-  "scan_date": "2025-08-04T00:26:09.585029Z",
+  "scan_date": "2025-08-05T00:30:23.696780Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.json b/data/v5.4.json
diff --git a/data/v5.5.json b/data/v5.5.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "master-4e036983a7",`
`3`		`- "scan_date": "2025-08-04T00:29:58.012087Z",`
	`3`	`+ "scan_date": "2025-08-05T00:34:24.562012Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-08-04T00:29:41.166540Z",`
	`3`	`+ "scan_date": "2025-08-05T00:33:39.494691Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-ee97e0aa6b",`
`3`		`- "scan_date": "2025-08-04T00:29:34.071089Z",`
	`3`	`+ "scan_date": "2025-08-05T00:34:02.730657Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.2-814d50bb1b",`
`3`		`- "scan_date": "2025-08-04T00:29:10.678032Z",`
	`3`	`+ "scan_date": "2025-08-05T00:34:09.155924Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-6045e49afd",`
`3`		`- "scan_date": "2025-08-04T00:29:49.761449Z",`
	`3`	`+ "scan_date": "2025-08-05T00:33:55.860821Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-51257119d5",`
`3`		`- "scan_date": "2025-08-04T00:29:26.891036Z",`
	`3`	`+ "scan_date": "2025-08-05T00:33:48.376689Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-b66b5448e0",`
`3`		`- "scan_date": "2025-08-04T00:29:19.480680Z",`
	`3`	`+ "scan_date": "2025-08-05T00:34:17.129810Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-08-04T00:26:19.895431Z",`
	`3`	`+ "scan_date": "2025-08-05T00:32:41.258089Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.2",`
`3`		`- "scan_date": "2025-08-04T00:29:02.379250Z",`
	`3`	`+ "scan_date": "2025-08-05T00:32:06.041968Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`