chore: update security scan results

actions-user · actions-user · commit e090e3d2adca · 2025-10-19T00:28:37.000Z
- Updated scan data from workflow run 108
    - Scan mode: git-only
    - Total scanned: 147
    - Total vulnerabilities: 369
diff --git a/data/master-ab149384e1.json b/data/master-ab149384e1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "master-ab149384e1",
-  "scan_date": "2025-10-18T00:25:20.231304Z",
+  "scan_date": "2025-10-19T00:28:36.360554Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-10-18T00:24:32.656796Z",
+  "scan_date": "2025-10-19T00:27:48.747902Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.1-91993ac48e.json b/data/release_v5.1-91993ac48e.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-91993ac48e",
-  "scan_date": "2025-10-18T00:25:12.187432Z",
+  "scan_date": "2025-10-19T00:28:13.325424Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.2-083e2bb56a.json b/data/release_v5.2-083e2bb56a.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.2-083e2bb56a",
-  "scan_date": "2025-10-18T00:24:56.649171Z",
+  "scan_date": "2025-10-19T00:28:20.264070Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.3-1301145ea1.json b/data/release_v5.3-1301145ea1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-1301145ea1",
-  "scan_date": "2025-10-18T00:24:49.545698Z",
+  "scan_date": "2025-10-19T00:28:05.882520Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.4-7863b3c419.json b/data/release_v5.4-7863b3c419.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-7863b3c419",
-  "scan_date": "2025-10-18T00:24:41.560266Z",
+  "scan_date": "2025-10-19T00:27:57.692079Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.5-1a6bc9685a.json b/data/release_v5.5-1a6bc9685a.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-1a6bc9685a",
-  "scan_date": "2025-10-18T00:25:04.794940Z",
+  "scan_date": "2025-10-19T00:28:28.531142Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,60 +1,60 @@
 {
-  "last_updated": "2025-10-18T00:25:20.231732Z",
+  "last_updated": "2025-10-19T00:28:36.361126Z",
   "scanned_versions": [
-    "v5.2.1",
+    "v5.3.3",
+    "v5.0.9",
+    "v5.1.6",
     "v5.4.1",
-    "v5.1.5",
-    "v5.2.6",
-    "v5.1.3",
+    "v5.0.6",
     "v5.1.1",
-    "v5.4.2",
-    "v5.1.2",
-    "v5.0.4",
-    "v5.3.1",
-    "v5.4",
-    "v5.1.6",
-    "v5.5.1",
-    "v5.2.3",
-    "v5.0.9",
-    "v5.2.4",
     "v5.5",
-    "v5.0.6",
-    "v5.0.3",
-    "v5.0.8",
-    "v5.2.5",
+    "v5.0.4",
     "v5.3.4",
     "v5.0.7",
-    "v5.0.1",
-    "v5.0.2",
+    "v5.0.3",
+    "v5.4",
+    "v5.1.3",
     "v5.1.4",
+    "v5.2",
+    "v5.0",
+    "v5.2.1",
+    "v5.1",
+    "v5.1.2",
+    "v5.5.1",
+    "v5.0.1",
+    "v5.3.1",
+    "v5.2.5",
+    "v5.3.2",
     "v5.0.5",
+    "v5.0.2",
+    "v5.1.5",
     "v5.2.2",
     "v5.3",
-    "v5.3.2",
-    "v5.0",
-    "v5.1",
-    "v5.3.3",
-    "v5.2",
+    "v5.2.6",
+    "v5.2.4",
+    "v5.4.2",
+    "v5.2.3",
+    "v5.0.8",
     "release/v5.0-d9f9b7d8ed",
     "release/v5.4-7863b3c419",
     "release/v5.3-1301145ea1",
+    "release/v5.1-91993ac48e",
     "release/v5.2-083e2bb56a",
     "release/v5.5-1a6bc9685a",
-    "release/v5.1-91993ac48e",
     "master-ab149384e1"
   ],
   "failed_versions": [
     "release/v5.0",
     "release/v5.4",
     "release/v5.3",
+    "release/v5.1",
     "release/v5.2",
     "release/v5.5",
-    "release/v5.1",
     "master"
   ],
   "total_scanned": 41,
   "scan_method": "git-batch",
-  "workflow_run": "107",
+  "workflow_run": "108",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.21.0",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-10-18T00:23:22.548347Z",
+  "scan_date": "2025-10-19T00:26:04.322441Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-10-18T00:23:23.969530Z",
+  "scan_date": "2025-10-19T00:26:38.365119Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-10-18T00:22:49.076491Z",
+  "scan_date": "2025-10-19T00:24:59.430801Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-10-18T00:21:31.472569Z",
+  "scan_date": "2025-10-19T00:24:39.877187Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-10-18T00:23:38.587514Z",
+  "scan_date": "2025-10-19T00:26:36.487178Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-10-18T00:22:46.955041Z",
+  "scan_date": "2025-10-19T00:24:14.937379Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-10-18T00:23:20.275108Z",
+  "scan_date": "2025-10-19T00:24:57.199524Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-10-18T00:22:55.771133Z",
+  "scan_date": "2025-10-19T00:27:41.976954Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-10-18T00:22:21.429213Z",
+  "scan_date": "2025-10-19T00:23:50.335501Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-10-18T00:24:05.114346Z",
+  "scan_date": "2025-10-19T00:25:33.293154Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-10-18T00:21:06.389912Z",
+  "scan_date": "2025-10-19T00:24:22.328443Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-10-18T00:21:24.037401Z",
+  "scan_date": "2025-10-19T00:25:51.171015Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-10-18T00:20:59.152305Z",
+  "scan_date": "2025-10-19T00:25:17.093424Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-10-18T00:23:31.200778Z",
+  "scan_date": "2025-10-19T00:25:23.550906Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-10-18T00:20:43.799029Z",
+  "scan_date": "2025-10-19T00:26:45.995699Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-10-18T00:21:56.127572Z",
+  "scan_date": "2025-10-19T00:23:58.190502Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-10-18T00:24:07.932094Z",
+  "scan_date": "2025-10-19T00:25:44.311693Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-10-18T00:20:26.631930Z",
+  "scan_date": "2025-10-19T00:25:41.380320Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-10-18T00:23:46.472637Z",
+  "scan_date": "2025-10-19T00:26:53.806772Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-10-18T00:22:13.479292Z",
+  "scan_date": "2025-10-19T00:27:33.854024Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-10-18T00:22:29.697288Z",
+  "scan_date": "2025-10-19T00:27:16.788198Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.5",
-  "scan_date": "2025-10-18T00:23:03.643058Z",
+  "scan_date": "2025-10-19T00:26:21.028735Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.6.json b/data/v5.2.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.6",
-  "scan_date": "2025-10-18T00:20:51.306895Z",
+  "scan_date": "2025-10-19T00:27:09.300693Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.json b/data/v5.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2",
-  "scan_date": "2025-10-18T00:24:24.700817Z",
+  "scan_date": "2025-10-19T00:25:30.624380Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.3.1",
-  "scan_date": "2025-10-18T00:21:39.950037Z",
+  "scan_date": "2025-10-19T00:26:12.911526Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -34,16 +44,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2025-47917",
       "component": "mbed_tls",
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.2",
-  "scan_date": "2025-10-18T00:24:01.819521Z",
+  "scan_date": "2025-10-19T00:26:28.608235Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.3",
-  "scan_date": "2025-10-18T00:24:16.586318Z",
+  "scan_date": "2025-10-19T00:23:41.843937Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.4.json b/data/v5.3.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.4",
-  "scan_date": "2025-10-18T00:23:12.047063Z",
+  "scan_date": "2025-10-19T00:24:49.032471Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.3.json b/data/v5.3.json
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.json b/data/v5.4.json
diff --git a/data/v5.5.1.json b/data/v5.5.1.json
diff --git a/data/v5.5.json b/data/v5.5.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "master-ab149384e1",`
`3`		`- "scan_date": "2025-10-18T00:25:20.231304Z",`
	`3`	`+ "scan_date": "2025-10-19T00:28:36.360554Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-10-18T00:24:32.656796Z",`
	`3`	`+ "scan_date": "2025-10-19T00:27:48.747902Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-91993ac48e",`
`3`		`- "scan_date": "2025-10-18T00:25:12.187432Z",`
	`3`	`+ "scan_date": "2025-10-19T00:28:13.325424Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.2-083e2bb56a",`
`3`		`- "scan_date": "2025-10-18T00:24:56.649171Z",`
	`3`	`+ "scan_date": "2025-10-19T00:28:20.264070Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-1301145ea1",`
`3`		`- "scan_date": "2025-10-18T00:24:49.545698Z",`
	`3`	`+ "scan_date": "2025-10-19T00:28:05.882520Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-7863b3c419",`
`3`		`- "scan_date": "2025-10-18T00:24:41.560266Z",`
	`3`	`+ "scan_date": "2025-10-19T00:27:57.692079Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-1a6bc9685a",`
`3`		`- "scan_date": "2025-10-18T00:25:04.794940Z",`
	`3`	`+ "scan_date": "2025-10-19T00:28:28.531142Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-10-18T00:23:22.548347Z",`
	`3`	`+ "scan_date": "2025-10-19T00:26:04.322441Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.2",`
`3`		`- "scan_date": "2025-10-18T00:23:23.969530Z",`
	`3`	`+ "scan_date": "2025-10-19T00:26:38.365119Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`