Skip to content

Commit 8567567

Browse files
actions-useractions-user
committed
chore: update security scan results
 - Updated scan data from workflow run 121 - Scan mode: git-only - Total scanned: 155 - Total vulnerabilities: 468
1 parent 0fa6743 commit 8567567

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

43 files changed

+543
-173
lines changed

‎data/master-ff97953b32.json‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,19 @@
11
{
22
"release_version": "master-ff97953b32",
3-
"scan_date": "2025-10-31T00:28:13.733138Z",
3+
"scan_date": "2025-11-01T00:29:36.938561Z",
44
"tool_version": "0.21.0",
55
"total_components": 0,
66
"vulnerabilities": [
7+
{
8+
"cve_id": "CVE-2025-54764",
9+
"component": "mbed_tls",
10+
"component_version": "3.6.4",
11+
"severity": "MEDIUM",
12+
"score": "6.2",
13+
"vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
14+
"description": "Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.",
15+
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-54764"
16+
},
717
{
818
"cve_id": "CVE-2025-59438",
919
"component": "mbed_tls",
@@ -16,11 +26,11 @@
1626
}
1727
],
1828
"summary": {
19-
"total_vulnerabilities": 1,
29+
"total_vulnerabilities": 2,
2030
"by_severity": {
2131
"CRITICAL": 0,
2232
"HIGH": 0,
23-
"MEDIUM": 1,
33+
"MEDIUM": 2,
2434
"LOW": 0
2535
}
2636
},

‎data/release_v5.0-d9f9b7d8ed.json‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"release_version": "release/v5.0-d9f9b7d8ed",
3-
"scan_date": "2025-10-31T00:27:47.649794Z",
3+
"scan_date": "2025-11-01T00:28:46.704170Z",
44
"tool_version": "0.21.0",
55
"total_components": 0,
66
"vulnerabilities": [
@@ -24,6 +24,16 @@
2424
"description": "Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.",
2525
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-52496"
2626
},
27+
{
28+
"cve_id": "CVE-2025-54764",
29+
"component": "mbed_tls",
30+
"component_version": "3.6.3",
31+
"severity": "MEDIUM",
32+
"score": "6.2",
33+
"vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
34+
"description": "Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.",
35+
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-54764"
36+
},
2737
{
2838
"cve_id": "CVE-2025-59438",
2939
"component": "mbed_tls",
@@ -86,11 +96,11 @@
8696
}
8797
],
8898
"summary": {
89-
"total_vulnerabilities": 8,
99+
"total_vulnerabilities": 9,
90100
"by_severity": {
91101
"CRITICAL": 0,
92102
"HIGH": 2,
93-
"MEDIUM": 6,
103+
"MEDIUM": 7,
94104
"LOW": 0
95105
}
96106
},

‎data/release_v5.1-dd37234fff.json‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,19 @@
11
{
22
"release_version": "release/v5.1-dd37234fff",
3-
"scan_date": "2025-10-31T00:27:30.799896Z",
3+
"scan_date": "2025-11-01T00:29:04.553699Z",
44
"tool_version": "0.21.0",
55
"total_components": 0,
66
"vulnerabilities": [
7+
{
8+
"cve_id": "CVE-2025-54764",
9+
"component": "mbed_tls",
10+
"component_version": "3.6.4",
11+
"severity": "MEDIUM",
12+
"score": "6.2",
13+
"vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
14+
"description": "Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.",
15+
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-54764"
16+
},
717
{
818
"cve_id": "CVE-2025-59438",
919
"component": "mbed_tls",
@@ -16,11 +26,11 @@
1626
}
1727
],
1828
"summary": {
19-
"total_vulnerabilities": 1,
29+
"total_vulnerabilities": 2,
2030
"by_severity": {
2131
"CRITICAL": 0,
2232
"HIGH": 0,
23-
"MEDIUM": 1,
33+
"MEDIUM": 2,
2434
"LOW": 0
2535
}
2636
},

‎data/release_v5.2-083e2bb56a.json‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,19 @@
11
{
22
"release_version": "release/v5.2-083e2bb56a",
3-
"scan_date": "2025-10-31T00:27:23.022452Z",
3+
"scan_date": "2025-11-01T00:29:20.302992Z",
44
"tool_version": "0.21.0",
55
"total_components": 0,
66
"vulnerabilities": [
7+
{
8+
"cve_id": "CVE-2025-54764",
9+
"component": "mbed_tls",
10+
"component_version": "3.6.4",
11+
"severity": "MEDIUM",
12+
"score": "6.2",
13+
"vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
14+
"description": "Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.",
15+
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-54764"
16+
},
717
{
818
"cve_id": "CVE-2025-59438",
919
"component": "mbed_tls",
@@ -16,11 +26,11 @@
1626
}
1727
],
1828
"summary": {
19-
"total_vulnerabilities": 1,
29+
"total_vulnerabilities": 2,
2030
"by_severity": {
2131
"CRITICAL": 0,
2232
"HIGH": 0,
23-
"MEDIUM": 1,
33+
"MEDIUM": 2,
2434
"LOW": 0
2535
}
2636
},

‎data/release_v5.3-13ec3f6f6f.json‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,19 @@
11
{
22
"release_version": "release/v5.3-13ec3f6f6f",
3-
"scan_date": "2025-10-31T00:28:05.485600Z",
3+
"scan_date": "2025-11-01T00:29:12.764566Z",
44
"tool_version": "0.21.0",
55
"total_components": 0,
66
"vulnerabilities": [
7+
{
8+
"cve_id": "CVE-2025-54764",
9+
"component": "mbed_tls",
10+
"component_version": "3.6.4",
11+
"severity": "MEDIUM",
12+
"score": "6.2",
13+
"vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
14+
"description": "Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.",
15+
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-54764"
16+
},
717
{
818
"cve_id": "CVE-2025-59438",
919
"component": "mbed_tls",
@@ -16,11 +26,11 @@
1626
}
1727
],
1828
"summary": {
19-
"total_vulnerabilities": 1,
29+
"total_vulnerabilities": 2,
2030
"by_severity": {
2131
"CRITICAL": 0,
2232
"HIGH": 0,
23-
"MEDIUM": 1,
33+
"MEDIUM": 2,
2434
"LOW": 0
2535
}
2636
},

‎data/release_v5.4-c94fdcdb48.json‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,19 @@
11
{
22
"release_version": "release/v5.4-c94fdcdb48",
3-
"scan_date": "2025-10-31T00:27:57.149367Z",
3+
"scan_date": "2025-11-01T00:29:28.655456Z",
44
"tool_version": "0.21.0",
55
"total_components": 0,
66
"vulnerabilities": [
7+
{
8+
"cve_id": "CVE-2025-54764",
9+
"component": "mbed_tls",
10+
"component_version": "3.6.4",
11+
"severity": "MEDIUM",
12+
"score": "6.2",
13+
"vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
14+
"description": "Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.",
15+
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-54764"
16+
},
717
{
818
"cve_id": "CVE-2025-59438",
919
"component": "mbed_tls",
@@ -16,11 +26,11 @@
1626
}
1727
],
1828
"summary": {
19-
"total_vulnerabilities": 1,
29+
"total_vulnerabilities": 2,
2030
"by_severity": {
2131
"CRITICAL": 0,
2232
"HIGH": 0,
23-
"MEDIUM": 1,
33+
"MEDIUM": 2,
2434
"LOW": 0
2535
}
2636
},

‎data/release_v5.5-f1a1df9b2e.json‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,19 @@
11
{
22
"release_version": "release/v5.5-f1a1df9b2e",
3-
"scan_date": "2025-10-31T00:27:39.201731Z",
3+
"scan_date": "2025-11-01T00:28:56.332338Z",
44
"tool_version": "0.21.0",
55
"total_components": 0,
66
"vulnerabilities": [
7+
{
8+
"cve_id": "CVE-2025-54764",
9+
"component": "mbed_tls",
10+
"component_version": "3.6.4",
11+
"severity": "MEDIUM",
12+
"score": "6.2",
13+
"vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
14+
"description": "Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.",
15+
"link": "https://nvd.nist.gov/vuln/detail/CVE-2025-54764"
16+
},
717
{
818
"cve_id": "CVE-2025-59438",
919
"component": "mbed_tls",
@@ -16,11 +26,11 @@
1626
}
1727
],
1828
"summary": {
19-
"total_vulnerabilities": 1,
29+
"total_vulnerabilities": 2,
2030
"by_severity": {
2131
"CRITICAL": 0,
2232
"HIGH": 0,
23-
"MEDIUM": 1,
33+
"MEDIUM": 2,
2434
"LOW": 0
2535
}
2636
},

‎data/scan_summary.json‎

Lines changed: 37 additions & 37 deletions
Original file line numberDiff line numberDiff line change
@@ -1,61 +1,61 @@
11
{
2-
"last_updated": "2025-10-31T00:28:13.733740Z",
2+
"last_updated": "2025-11-01T00:29:36.939095Z",
33
"scanned_versions": [
4-
"v5.1.2",
5-
"v5.5.1",
6-
"v5.1.6",
4+
"v5.0.2",
5+
"v5.0.6",
6+
"v5.1.3",
7+
"v5.0",
8+
"v5.4.3",
9+
"v5.2.3",
10+
"v5.2.4",
11+
"v5.0.9",
712
"v5.4.2",
8-
"v5.3.1",
9-
"v5.2",
10-
"v5.0.1",
13+
"v5.3",
14+
"v5.0.8",
1115
"v5.2.2",
12-
"v5.3.2",
16+
"v5.4",
17+
"v5.0.4",
18+
"v5.2.1",
1319
"v5.5",
14-
"v5.0.2",
20+
"v5.1",
1521
"v5.2.5",
16-
"v5.3.3",
17-
"v5.2.4",
22+
"v5.0.1",
23+
"v5.1.5",
24+
"v5.1.1",
1825
"v5.0.3",
19-
"v5.0.9",
26+
"v5.0.5",
2027
"v5.3.4",
21-
"v5.0.8",
22-
"v5.4.3",
23-
"v5.1.3",
24-
"v5.1.1",
28+
"v5.2.6",
29+
"v5.3.1",
30+
"v5.1.6",
31+
"v5.3.2",
32+
"v5.3.3",
33+
"v5.0.7",
34+
"v5.2",
2535
"v5.4.1",
26-
"v5.1",
36+
"v5.1.2",
37+
"v5.5.1",
2738
"v5.1.4",
28-
"v5.0.5",
29-
"v5.0",
30-
"v5.1.5",
31-
"v5.2.3",
32-
"v5.0.7",
33-
"v5.0.6",
34-
"v5.0.4",
35-
"v5.2.1",
36-
"v5.2.6",
37-
"v5.4",
38-
"v5.3",
39-
"release/v5.2-083e2bb56a",
40-
"release/v5.1-dd37234fff",
41-
"release/v5.5-f1a1df9b2e",
4239
"release/v5.0-d9f9b7d8ed",
43-
"release/v5.4-c94fdcdb48",
40+
"release/v5.5-f1a1df9b2e",
41+
"release/v5.1-dd37234fff",
4442
"release/v5.3-13ec3f6f6f",
43+
"release/v5.2-083e2bb56a",
44+
"release/v5.4-c94fdcdb48",
4545
"master-ff97953b32"
4646
],
4747
"failed_versions": [
48-
"release/v5.2",
49-
"release/v5.1",
50-
"release/v5.5",
5148
"release/v5.0",
52-
"release/v5.4",
49+
"release/v5.5",
50+
"release/v5.1",
5351
"release/v5.3",
52+
"release/v5.2",
53+
"release/v5.4",
5454
"master"
5555
],
5656
"total_scanned": 42,
5757
"scan_method": "git-batch",
58-
"workflow_run": "120",
58+
"workflow_run": "121",
5959
"scanner_info": {
6060
"tool": "esp-idf-security-dashboard",
6161
"esp_idf_sbom_version": "0.21.0",

‎data/v5.0.1.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"release_version": "v5.0.1",
3-
"scan_date": "2025-10-31T00:23:45.863605Z",
3+
"scan_date": "2025-11-01T00:26:32.456146Z",
44
"tool_version": "0.21.0",
55
"total_components": 0,
66
"vulnerabilities": [],

‎data/v5.0.2.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"release_version": "v5.0.2",
3-
"scan_date": "2025-10-31T00:24:15.245818Z",
3+
"scan_date": "2025-11-01T00:24:13.995167Z",
44
"tool_version": "0.21.0",
55
"total_components": 0,
66
"vulnerabilities": [],

0 commit comments

Comments
 (0)