chore: update security scan results

actions-user · actions-user · commit a34069955280 · 2025-09-08T00:26:53.000Z
- Updated scan data from workflow run 67
    - Scan mode: git-only
    - Total scanned: 107
    - Total vulnerabilities: 342
diff --git a/data/master-2044fba6e7.json b/data/master-2044fba6e7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "master-2044fba6e7",
-  "scan_date": "2025-09-07T00:28:12.500207Z",
+  "scan_date": "2025-09-08T00:26:51.703050Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-09-07T00:28:03.526947Z",
+  "scan_date": "2025-09-08T00:26:34.498626Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.1-876bbf9c30.json b/data/release_v5.1-876bbf9c30.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-876bbf9c30",
-  "scan_date": "2025-09-07T00:27:40.060926Z",
+  "scan_date": "2025-09-08T00:26:10.626609Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.2-814d50bb1b.json b/data/release_v5.2-814d50bb1b.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.2-814d50bb1b",
-  "scan_date": "2025-09-07T00:27:25.377279Z",
+  "scan_date": "2025-09-08T00:26:03.499699Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.3-b019b2e63d.json b/data/release_v5.3-b019b2e63d.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-b019b2e63d",
-  "scan_date": "2025-09-07T00:27:33.026843Z",
+  "scan_date": "2025-09-08T00:26:26.776653Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.4-11edebdbbe.json b/data/release_v5.4-11edebdbbe.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-11edebdbbe",
-  "scan_date": "2025-09-07T00:27:47.917949Z",
+  "scan_date": "2025-09-08T00:26:43.660551Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.5-129cd0d247.json b/data/release_v5.5-129cd0d247.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-129cd0d247",
-  "scan_date": "2025-09-07T00:27:55.413757Z",
+  "scan_date": "2025-09-08T00:26:18.902285Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,59 +1,59 @@
 {
-  "last_updated": "2025-09-07T00:28:12.500657Z",
+  "last_updated": "2025-09-08T00:26:51.703561Z",
   "scanned_versions": [
-    "v5.0.1",
-    "v5.2.2",
-    "v5.3.1",
-    "v5.1",
-    "v5.3",
     "v5.0.7",
-    "v5.0.3",
+    "v5.0.2",
+    "v5.0.8",
+    "v5.1.4",
+    "v5.3",
+    "v5.0.9",
+    "v5.2.3",
+    "v5.3.2",
+    "v5.0.1",
+    "v5.1.3",
+    "v5.2.1",
+    "v5.5.1",
     "v5.2.4",
+    "v5.1.6",
+    "v5.0.6",
+    "v5.0.3",
     "v5.3.3",
+    "v5.0.5",
+    "v5.4.2",
     "v5.4",
-    "v5.5.1",
-    "v5.1.2",
-    "v5.4.1",
     "v5.2.5",
-    "v5.3.4",
-    "v5.1.1",
-    "v5.0.9",
     "v5.0",
-    "v5.1.3",
-    "v5.0.4",
-    "v5.1.6",
+    "v5.2.2",
+    "v5.3.1",
+    "v5.5",
+    "v5.3.4",
+    "v5.4.1",
     "v5.2",
+    "v5.0.4",
+    "v5.1.1",
+    "v5.1",
+    "v5.1.2",
     "v5.1.5",
-    "v5.4.2",
-    "v5.0.6",
-    "v5.2.1",
-    "v5.0.8",
-    "v5.0.2",
-    "v5.2.3",
-    "v5.1.4",
-    "v5.5",
-    "v5.0.5",
-    "v5.3.2",
     "release/v5.2-814d50bb1b",
-    "release/v5.3-b019b2e63d",
     "release/v5.1-876bbf9c30",
-    "release/v5.4-11edebdbbe",
     "release/v5.5-129cd0d247",
+    "release/v5.3-b019b2e63d",
     "release/v5.0-d9f9b7d8ed",
+    "release/v5.4-11edebdbbe",
     "master-2044fba6e7"
   ],
   "failed_versions": [
     "release/v5.2",
-    "release/v5.3",
     "release/v5.1",
-    "release/v5.4",
     "release/v5.5",
+    "release/v5.3",
     "release/v5.0",
+    "release/v5.4",
     "master"
   ],
   "total_scanned": 40,
   "scan_method": "git-batch",
-  "workflow_run": "66",
+  "workflow_run": "67",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.21.0",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-09-07T00:23:16.262088Z",
+  "scan_date": "2025-09-08T00:23:02.234701Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-09-07T00:26:34.667341Z",
+  "scan_date": "2025-09-08T00:22:12.797275Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-09-07T00:23:54.623854Z",
+  "scan_date": "2025-09-08T00:23:50.779589Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-09-07T00:25:34.933627Z",
+  "scan_date": "2025-09-08T00:25:32.869675Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-09-07T00:27:08.172671Z",
+  "scan_date": "2025-09-08T00:24:07.597686Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-09-07T00:26:16.949562Z",
+  "scan_date": "2025-09-08T00:23:48.629128Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-09-07T00:23:52.723462Z",
+  "scan_date": "2025-09-08T00:22:10.699401Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-09-07T00:26:32.377631Z",
+  "scan_date": "2025-09-08T00:22:19.492801Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-09-07T00:25:17.397032Z",
+  "scan_date": "2025-09-08T00:22:42.808139Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-09-07T00:25:19.882155Z",
+  "scan_date": "2025-09-08T00:24:35.403190Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-09-07T00:25:09.694339Z",
+  "scan_date": "2025-09-08T00:25:40.060027Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-09-07T00:24:36.084083Z",
+  "scan_date": "2025-09-08T00:25:48.544757Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-09-07T00:25:27.434773Z",
+  "scan_date": "2025-09-08T00:23:09.857322Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-09-07T00:26:50.572489Z",
+  "scan_date": "2025-09-08T00:22:26.828951Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-09-07T00:25:59.242870Z",
+  "scan_date": "2025-09-08T00:25:55.775343Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-09-07T00:25:43.197425Z",
+  "scan_date": "2025-09-08T00:23:41.305303Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-09-07T00:23:36.106553Z",
+  "scan_date": "2025-09-08T00:25:41.955799Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-09-07T00:26:24.900187Z",
+  "scan_date": "2025-09-08T00:23:17.048823Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-09-07T00:23:24.560806Z",
+  "scan_date": "2025-09-08T00:24:43.805692Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-09-07T00:26:42.733683Z",
+  "scan_date": "2025-09-08T00:22:50.878955Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -34,16 +44,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2025-47917",
       "component": "mbed_tls",
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-09-07T00:24:02.969691Z",
+  "scan_date": "2025-09-08T00:23:34.425189Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.5",
-  "scan_date": "2025-09-07T00:24:53.577930Z",
+  "scan_date": "2025-09-08T00:24:32.509821Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.json b/data/v5.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2",
-  "scan_date": "2025-09-07T00:25:51.395896Z",
+  "scan_date": "2025-09-08T00:25:25.443191Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.1",
-  "scan_date": "2025-09-07T00:23:32.677902Z",
+  "scan_date": "2025-09-08T00:24:51.826748Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.2",
-  "scan_date": "2025-09-07T00:27:17.257402Z",
+  "scan_date": "2025-09-08T00:22:58.900224Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.3",
-  "scan_date": "2025-09-07T00:24:11.603043Z",
+  "scan_date": "2025-09-08T00:23:59.478378Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.4.json b/data/v5.3.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.4",
-  "scan_date": "2025-09-07T00:25:01.723236Z",
+  "scan_date": "2025-09-08T00:25:08.539366Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.3.json b/data/v5.3.json
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.json b/data/v5.4.json
diff --git a/data/v5.5.1.json b/data/v5.5.1.json
diff --git a/data/v5.5.json b/data/v5.5.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "master-2044fba6e7",`
`3`		`- "scan_date": "2025-09-07T00:28:12.500207Z",`
	`3`	`+ "scan_date": "2025-09-08T00:26:51.703050Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-09-07T00:28:03.526947Z",`
	`3`	`+ "scan_date": "2025-09-08T00:26:34.498626Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-876bbf9c30",`
`3`		`- "scan_date": "2025-09-07T00:27:40.060926Z",`
	`3`	`+ "scan_date": "2025-09-08T00:26:10.626609Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.2-814d50bb1b",`
`3`		`- "scan_date": "2025-09-07T00:27:25.377279Z",`
	`3`	`+ "scan_date": "2025-09-08T00:26:03.499699Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-b019b2e63d",`
`3`		`- "scan_date": "2025-09-07T00:27:33.026843Z",`
	`3`	`+ "scan_date": "2025-09-08T00:26:26.776653Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-11edebdbbe",`
`3`		`- "scan_date": "2025-09-07T00:27:47.917949Z",`
	`3`	`+ "scan_date": "2025-09-08T00:26:43.660551Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-129cd0d247",`
`3`		`- "scan_date": "2025-09-07T00:27:55.413757Z",`
	`3`	`+ "scan_date": "2025-09-08T00:26:18.902285Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-09-07T00:23:16.262088Z",`
	`3`	`+ "scan_date": "2025-09-08T00:23:02.234701Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.2",`
`3`		`- "scan_date": "2025-09-07T00:26:34.667341Z",`
	`3`	`+ "scan_date": "2025-09-08T00:22:12.797275Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`