advisories/aws-eks-pod-identity-agent.advisories.yaml at main · jamie-albert/advisories · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
schema-version: 2.0.2

package:
  name: aws-eks-pod-identity-agent

advisories:
  - id: CGA-85j8-6fqj-7pwj
    aliases:
      - CVE-2025-47907
      - GHSA-j5pm-7495-qmr3
    events:
      - timestamp: 2025-08-09T15:37:48Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-eks-pod-identity-agent
            componentID: 78df7faf01841c54
            componentName: stdlib
            componentVersion: go1.24.5
            componentType: go-module
            componentLocation: /usr/bin/eks-pod-identity-agent
            scanner: grype
      - timestamp: 2025-08-10T04:40:39Z
        type: fixed
        data:
          fixed-version: 0.1.32-r2

  - id: CGA-8g5w-gc5h-cm25
    aliases:
      - CVE-2025-47910
      - GHSA-8pjc-487g-w6p2
    events:
      - timestamp: 2025-09-24T13:23:09Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-eks-pod-identity-agent
            componentID: 92efbdb120f905b8
            componentName: stdlib
            componentVersion: go1.25.0
            componentType: go-module
            componentLocation: /usr/bin/eks-pod-identity-agent
            scanner: grype
      - timestamp: 2025-09-25T01:55:28Z
        type: fixed
        data:
          fixed-version: 0.1.33-r1

  - id: CGA-8v23-2crj-hxp9
    aliases:
      - CVE-2025-4673
      - GHSA-62jj-gr2r-5c34
    events:
      - timestamp: 2025-06-14T08:42:08Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-eks-pod-identity-agent
            componentID: d98d5b399b45ea5e
            componentName: stdlib
            componentVersion: go1.24.3
            componentType: go-module
            componentLocation: /usr/bin/eks-pod-identity-agent
            scanner: grype
      - timestamp: 2025-06-14T12:35:44Z
        type: fixed
        data:
          fixed-version: 0.1.30-r1

  - id: CGA-c5rp-xqmf-wcp6
    aliases:
      - CVE-2025-30204
      - GHSA-mh63-6h87-95cp
    events:
      - timestamp: 2025-03-22T08:43:21Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-eks-pod-identity-agent
            componentID: 98a7d8ceee851947
            componentName: github.com/golang-jwt/jwt/v5
            componentVersion: v5.2.0
            componentType: go-module
            componentLocation: /usr/bin/eks-pod-identity-agent
            scanner: grype
      - timestamp: 2025-03-22T14:18:26Z
        type: fixed
        data:
          fixed-version: 0.1.23-r1

  - id: CGA-m75v-5j69-9g69
    aliases:
      - CVE-2025-22874
      - GHSA-6f52-wpx2-hvf2
    events:
      - timestamp: 2025-06-14T08:42:07Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-eks-pod-identity-agent
            componentID: d98d5b399b45ea5e
            componentName: stdlib
            componentVersion: go1.24.3
            componentType: go-module
            componentLocation: /usr/bin/eks-pod-identity-agent
            scanner: grype
      - timestamp: 2025-06-14T12:35:45Z
        type: fixed
        data:
          fixed-version: 0.1.30-r1