chore: update security scan results

actions-user · actions-user · commit d23d511276aa · 2025-10-08T00:26:27.000Z
- Updated scan data from workflow run 97
    - Scan mode: git-only
    - Total scanned: 126
    - Total vulnerabilities: 369
diff --git a/data/master-800f141f94.json b/data/master-800f141f94.json
@@ -1,6 +1,6 @@
 {
   "release_version": "master-800f141f94",
-  "scan_date": "2025-10-07T00:26:13.919435Z",
+  "scan_date": "2025-10-08T00:26:25.571390Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-10-07T00:25:34.308381Z",
+  "scan_date": "2025-10-08T00:25:53.231923Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.1-01602a7f60.json b/data/release_v5.1-01602a7f60.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-01602a7f60",
-  "scan_date": "2025-10-07T00:26:05.463206Z",
+  "scan_date": "2025-10-08T00:26:16.974870Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.2-7884606c41.json b/data/release_v5.2-7884606c41.json
@@ -0,0 +1,21 @@
+{
+  "release_version": "release/v5.2-7884606c41",
+  "scan_date": "2025-10-08T00:26:01.651632Z",
+  "tool_version": "0.21.0",
+  "total_components": 0,
+  "vulnerabilities": [],
+  "summary": {
+    "total_vulnerabilities": 0,
+    "by_severity": {
+      "CRITICAL": 0,
+      "HIGH": 0,
+      "MEDIUM": 0,
+      "LOW": 0
+    }
+  },
+  "metadata": {
+    "scanner": "esp-idf-security-dashboard",
+    "scan_method": "git-release-branch",
+    "docker_image": null
+  }
+}
diff --git a/data/release_v5.3-d94ddc0745.json b/data/release_v5.3-d94ddc0745.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-d94ddc0745",
-  "scan_date": "2025-10-07T00:25:51.472560Z",
+  "scan_date": "2025-10-08T00:26:09.572796Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.4-8574a0a609.json b/data/release_v5.4-8574a0a609.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-8574a0a609",
-  "scan_date": "2025-10-07T00:25:43.224802Z",
+  "scan_date": "2025-10-08T00:25:37.015571Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.5-07e9bf4970.json b/data/release_v5.5-07e9bf4970.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-07e9bf4970",
-  "scan_date": "2025-10-07T00:25:25.892338Z",
+  "scan_date": "2025-10-08T00:25:45.270088Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,60 +1,60 @@
 {
-  "last_updated": "2025-10-07T00:26:13.919885Z",
+  "last_updated": "2025-10-08T00:26:25.571901Z",
   "scanned_versions": [
-    "v5.0.3",
-    "v5.0",
-    "v5.1.5",
-    "v5.3.3",
-    "v5.0.7",
-    "v5.2.3",
-    "v5.2.2",
-    "v5.0.9",
-    "v5.2",
-    "v5.5.1",
-    "v5.3.1",
-    "v5.3.2",
-    "v5.1.1",
     "v5.1.6",
-    "v5.3.4",
-    "v5.4",
-    "v5.2.6",
-    "v5.0.4",
+    "v5.0.1",
+    "v5.1.2",
+    "v5.5.1",
+    "v5.0.2",
     "v5.5",
+    "v5.2.1",
+    "v5.2.2",
+    "v5.2.4",
+    "v5.3.3",
+    "v5.0",
+    "v5.0.5",
+    "v5.0.8",
+    "v5.2.5",
+    "v5.0.3",
     "v5.3",
-    "v5.1.2",
-    "v5.4.1",
+    "v5.3.2",
+    "v5.1.5",
     "v5.0.6",
-    "v5.0.1",
-    "v5.0.5",
+    "v5.3.4",
     "v5.1",
-    "v5.2.4",
-    "v5.2.5",
-    "v5.1.3",
-    "v5.0.2",
-    "v5.2.1",
     "v5.4.2",
-    "v5.0.8",
+    "v5.4.1",
+    "v5.0.9",
+    "v5.2.6",
+    "v5.2.3",
+    "v5.0.7",
+    "v5.1.3",
+    "v5.4",
+    "v5.3.1",
+    "v5.0.4",
     "v5.1.4",
+    "v5.2",
+    "v5.1.1",
+    "release/v5.4-8574a0a609",
     "release/v5.5-07e9bf4970",
     "release/v5.0-d9f9b7d8ed",
-    "release/v5.4-8574a0a609",
+    "release/v5.2-7884606c41",
     "release/v5.3-d94ddc0745",
-    "release/v5.2-79fbd88e7a",
     "release/v5.1-01602a7f60",
     "master-800f141f94"
   ],
   "failed_versions": [
+    "release/v5.4",
     "release/v5.5",
     "release/v5.0",
-    "release/v5.4",
-    "release/v5.3",
     "release/v5.2",
+    "release/v5.3",
     "release/v5.1",
     "master"
   ],
   "total_scanned": 41,
   "scan_method": "git-batch",
-  "workflow_run": "96",
+  "workflow_run": "97",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.21.0",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-10-07T00:24:09.738829Z",
+  "scan_date": "2025-10-08T00:21:29.293467Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-10-07T00:24:43.668599Z",
+  "scan_date": "2025-10-08T00:21:50.362258Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-10-07T00:21:12.662532Z",
+  "scan_date": "2025-10-08T00:22:59.996958Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-10-07T00:23:23.859436Z",
+  "scan_date": "2025-10-08T00:25:06.069035Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-10-07T00:24:16.310533Z",
+  "scan_date": "2025-10-08T00:22:41.984039Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-10-07T00:24:07.479418Z",
+  "scan_date": "2025-10-08T00:23:31.330665Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-10-07T00:21:39.497596Z",
+  "scan_date": "2025-10-08T00:24:33.362307Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-10-07T00:25:09.069344Z",
+  "scan_date": "2025-10-08T00:22:48.702430Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-10-07T00:22:02.617045Z",
+  "scan_date": "2025-10-08T00:24:10.127511Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-10-07T00:21:14.876258Z",
+  "scan_date": "2025-10-08T00:22:35.027003Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-10-07T00:22:43.855679Z",
+  "scan_date": "2025-10-08T00:25:28.138142Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-10-07T00:23:49.875226Z",
+  "scan_date": "2025-10-08T00:21:37.050706Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-10-07T00:24:40.852912Z",
+  "scan_date": "2025-10-08T00:24:40.844968Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-10-07T00:25:16.655758Z",
+  "scan_date": "2025-10-08T00:25:13.815638Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-10-07T00:21:22.855537Z",
+  "scan_date": "2025-10-08T00:23:23.901696Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-10-07T00:22:51.468102Z",
+  "scan_date": "2025-10-08T00:21:25.663912Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-10-07T00:24:18.952366Z",
+  "scan_date": "2025-10-08T00:23:44.480371Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-10-07T00:24:51.610597Z",
+  "scan_date": "2025-10-08T00:22:08.800130Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-10-07T00:21:54.908864Z",
+  "scan_date": "2025-10-08T00:22:16.241423Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -34,16 +44,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2025-47917",
       "component": "mbed_tls",
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-10-07T00:21:47.720351Z",
+  "scan_date": "2025-10-08T00:24:25.908079Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -34,16 +44,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2025-47917",
       "component": "mbed_tls",
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-10-07T00:24:26.932877Z",
+  "scan_date": "2025-10-08T00:22:23.652857Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
diff --git a/data/v5.2.6.json b/data/v5.2.6.json
diff --git a/data/v5.2.json b/data/v5.2.json
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
diff --git a/data/v5.3.4.json b/data/v5.3.4.json
diff --git a/data/v5.3.json b/data/v5.3.json
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.json b/data/v5.4.json
diff --git a/data/v5.5.1.json b/data/v5.5.1.json
diff --git a/data/v5.5.json b/data/v5.5.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "master-800f141f94",`
`3`		`- "scan_date": "2025-10-07T00:26:13.919435Z",`
	`3`	`+ "scan_date": "2025-10-08T00:26:25.571390Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-10-07T00:25:34.308381Z",`
	`3`	`+ "scan_date": "2025-10-08T00:25:53.231923Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-01602a7f60",`
`3`		`- "scan_date": "2025-10-07T00:26:05.463206Z",`
	`3`	`+ "scan_date": "2025-10-08T00:26:16.974870Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-d94ddc0745",`
`3`		`- "scan_date": "2025-10-07T00:25:51.472560Z",`
	`3`	`+ "scan_date": "2025-10-08T00:26:09.572796Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-8574a0a609",`
`3`		`- "scan_date": "2025-10-07T00:25:43.224802Z",`
	`3`	`+ "scan_date": "2025-10-08T00:25:37.015571Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-07e9bf4970",`
`3`		`- "scan_date": "2025-10-07T00:25:25.892338Z",`
	`3`	`+ "scan_date": "2025-10-08T00:25:45.270088Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-10-07T00:24:09.738829Z",`
	`3`	`+ "scan_date": "2025-10-08T00:21:29.293467Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.2",`
`3`		`- "scan_date": "2025-10-07T00:24:43.668599Z",`
	`3`	`+ "scan_date": "2025-10-08T00:21:50.362258Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`