chore: update security scan results

actions-user · actions-user · commit e477a7661f6c · 2025-07-15T09:34:58.000Z
- Updated scan data from workflow run 1
    - Scan mode: git-only
    - Total scanned: 40
    - Total vulnerabilities: 150
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-07-15T08:24:19.578243Z",
+  "scan_date": "2025-07-15T09:34:36.075875Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.1-e3a508cded.json b/data/release_v5.1-e3a508cded.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-e3a508cded",
-  "scan_date": "2025-07-15T08:24:12.531259Z",
+  "scan_date": "2025-07-15T09:34:04.177337Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.2-91d8d970a4.json b/data/release_v5.2-91d8d970a4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.2-91d8d970a4",
-  "scan_date": "2025-07-15T08:24:42.689856Z",
+  "scan_date": "2025-07-15T09:34:56.922324Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.3-bf79937908.json b/data/release_v5.3-bf79937908.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-bf79937908",
-  "scan_date": "2025-07-15T08:24:35.911227Z",
+  "scan_date": "2025-07-15T09:34:47.237694Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.4-f10ac3eec2.json b/data/release_v5.4-f10ac3eec2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-f10ac3eec2",
-  "scan_date": "2025-07-15T08:24:28.279887Z",
+  "scan_date": "2025-07-15T09:34:25.731172Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.5-cf8dad0746.json b/data/release_v5.5-cf8dad0746.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-cf8dad0746",
-  "scan_date": "2025-07-15T08:24:04.755805Z",
+  "scan_date": "2025-07-15T09:34:15.350769Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,54 +1,54 @@
 {
-  "last_updated": "2025-07-15T08:24:42.690326Z",
+  "last_updated": "2025-07-15T09:34:56.922824Z",
   "scanned_versions": [
-    "v5.0.7",
-    "v5.3.3",
-    "v5.0.5",
-    "v5.1.1",
     "v5.1",
-    "v5.1.3",
     "v5.3",
-    "v5.4",
+    "v5.3.1",
     "v5.1.4",
-    "v5.1.5",
-    "v5.1.2",
-    "v5.3.2",
-    "v5.2.3",
-    "v5.2.4",
-    "v5.1.6",
-    "v5.0",
-    "v5.0.1",
-    "v5.2.5",
-    "v5.0.8",
-    "v5.2.1",
     "v5.4.2",
+    "v5.0.7",
     "v5.2.2",
-    "v5.4.1",
-    "v5.0.4",
+    "v5.4",
+    "v5.1.5",
+    "v5.3.2",
     "v5.0.3",
-    "v5.3.1",
-    "v5.0.6",
     "v5.0.9",
-    "v5.2",
+    "v5.0.4",
+    "v5.2.1",
+    "v5.1.3",
+    "v5.0.6",
     "v5.0.2",
-    "release/v5.5-cf8dad0746",
+    "v5.0.1",
+    "v5.4.1",
+    "v5.0.8",
+    "v5.0",
+    "v5.2.5",
+    "v5.1.6",
+    "v5.0.5",
+    "v5.2.4",
+    "v5.2.3",
+    "v5.2",
+    "v5.3.3",
+    "v5.1.1",
+    "v5.1.2",
     "release/v5.1-e3a508cded",
-    "release/v5.0-d9f9b7d8ed",
+    "release/v5.5-cf8dad0746",
     "release/v5.4-f10ac3eec2",
+    "release/v5.0-d9f9b7d8ed",
     "release/v5.3-bf79937908",
     "release/v5.2-91d8d970a4"
   ],
   "failed_versions": [
-    "release/v5.5",
     "release/v5.1",
-    "release/v5.0",
+    "release/v5.5",
     "release/v5.4",
+    "release/v5.0",
     "release/v5.3",
     "release/v5.2"
   ],
   "total_scanned": 36,
   "scan_method": "git-batch",
-  "workflow_run": "28",
+  "workflow_run": "1",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.20.1",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-07-15T08:22:23.163916Z",
+  "scan_date": "2025-07-15T09:31:59.929983Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-07-15T08:23:55.527750Z",
+  "scan_date": "2025-07-15T09:31:58.419085Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-07-15T08:23:22.553404Z",
+  "scan_date": "2025-07-15T09:31:09.447224Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-07-15T08:23:20.389606Z",
+  "scan_date": "2025-07-15T09:31:27.948145Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-07-15T08:20:56.152561Z",
+  "scan_date": "2025-07-15T09:32:54.385971Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-07-15T08:23:38.592702Z",
+  "scan_date": "2025-07-15T09:31:56.551415Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-07-15T08:20:39.052087Z",
+  "scan_date": "2025-07-15T09:30:24.668664Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-07-15T08:22:38.359056Z",
+  "scan_date": "2025-07-15T09:32:21.810782Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-07-15T08:23:45.166059Z",
+  "scan_date": "2025-07-15T09:31:19.165774Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-07-15T08:22:21.232020Z",
+  "scan_date": "2025-07-15T09:32:24.442111Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-07-15T08:21:03.351471Z",
+  "scan_date": "2025-07-15T09:33:45.537601Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-07-15T08:21:49.325846Z",
+  "scan_date": "2025-07-15T09:33:54.562313Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-07-15T08:21:11.647283Z",
+  "scan_date": "2025-07-15T09:31:47.187480Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-07-15T08:21:35.731833Z",
+  "scan_date": "2025-07-15T09:30:02.794139Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-07-15T08:21:42.553991Z",
+  "scan_date": "2025-07-15T09:30:55.938829Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-07-15T08:22:18.432403Z",
+  "scan_date": "2025-07-15T09:32:44.620007Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-07-15T08:21:05.254355Z",
+  "scan_date": "2025-07-15T09:29:33.124619Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-07-15T08:22:46.125745Z",
+  "scan_date": "2025-07-15T09:31:38.069460Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45159",
       "component": "mbed_tls",
@@ -24,16 +34,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2024-30166",
       "component": "mbed_tls",
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-07-15T08:23:03.645929Z",
+  "scan_date": "2025-07-15T09:30:34.962356Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -34,16 +44,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2024-28115",
       "component": "freertos",
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-07-15T08:22:05.243441Z",
+  "scan_date": "2025-07-15T09:33:14.930608Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -34,16 +44,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2024-28755",
       "component": "mbed_tls",
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-07-15T08:22:11.993309Z",
+  "scan_date": "2025-07-15T09:33:05.053128Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.5",
-  "scan_date": "2025-07-15T08:22:30.831804Z",
+  "scan_date": "2025-07-15T09:32:34.998531Z",
   "tool_version": "0.20.1",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.json b/data/v5.2.json
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
diff --git a/data/v5.3.json b/data/v5.3.json
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.json b/data/v5.4.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-07-15T08:24:19.578243Z",`
	`3`	`+ "scan_date": "2025-07-15T09:34:36.075875Z",`
`4`	`4`	`"tool_version": "0.20.1",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-e3a508cded",`
`3`		`- "scan_date": "2025-07-15T08:24:12.531259Z",`
	`3`	`+ "scan_date": "2025-07-15T09:34:04.177337Z",`
`4`	`4`	`"tool_version": "0.20.1",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.2-91d8d970a4",`
`3`		`- "scan_date": "2025-07-15T08:24:42.689856Z",`
	`3`	`+ "scan_date": "2025-07-15T09:34:56.922324Z",`
`4`	`4`	`"tool_version": "0.20.1",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-bf79937908",`
`3`		`- "scan_date": "2025-07-15T08:24:35.911227Z",`
	`3`	`+ "scan_date": "2025-07-15T09:34:47.237694Z",`
`4`	`4`	`"tool_version": "0.20.1",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-f10ac3eec2",`
`3`		`- "scan_date": "2025-07-15T08:24:28.279887Z",`
	`3`	`+ "scan_date": "2025-07-15T09:34:25.731172Z",`
`4`	`4`	`"tool_version": "0.20.1",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-cf8dad0746",`
`3`		`- "scan_date": "2025-07-15T08:24:04.755805Z",`
	`3`	`+ "scan_date": "2025-07-15T09:34:15.350769Z",`
`4`	`4`	`"tool_version": "0.20.1",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-07-15T08:22:23.163916Z",`
	`3`	`+ "scan_date": "2025-07-15T09:31:59.929983Z",`
`4`	`4`	`"tool_version": "0.20.1",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.2",`
`3`		`- "scan_date": "2025-07-15T08:23:55.527750Z",`
	`3`	`+ "scan_date": "2025-07-15T09:31:58.419085Z",`
`4`	`4`	`"tool_version": "0.20.1",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.3",`
`3`		`- "scan_date": "2025-07-15T08:23:22.553404Z",`
	`3`	`+ "scan_date": "2025-07-15T09:31:09.447224Z",`
`4`	`4`	`"tool_version": "0.20.1",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`