chore: update security scan results

actions-user · actions-user · commit 2513ae3444c3 · 2025-12-04T00:31:52.000Z
- Updated scan data from workflow run 155
    - Scan mode: git-only
    - Total scanned: 203
    - Total vulnerabilities: 514
diff --git a/data/master-683ddf8a6e.json b/data/master-683ddf8a6e.json
@@ -1,6 +1,6 @@
 {
   "release_version": "master-683ddf8a6e",
-  "scan_date": "2025-12-03T00:28:02.785480Z",
+  "scan_date": "2025-12-04T00:31:50.441024Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-12-03T00:27:07.530648Z",
+  "scan_date": "2025-12-04T00:31:33.467025Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.1-11cdbbe428.json b/data/release_v5.1-11cdbbe428.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-11cdbbe428",
-  "scan_date": "2025-12-03T00:27:39.887428Z",
+  "scan_date": "2025-12-04T00:31:18.657720Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.2-914ab6f3e2.json b/data/release_v5.2-914ab6f3e2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.2-914ab6f3e2",
-  "scan_date": "2025-12-03T00:27:47.118676Z",
+  "scan_date": "2025-12-04T00:31:25.803141Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.3-563f462986.json b/data/release_v5.3-563f462986.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-563f462986",
-  "scan_date": "2025-12-03T00:27:54.818242Z",
+  "scan_date": "2025-12-04T00:31:11.392981Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.4-6a04f83375.json b/data/release_v5.4-6a04f83375.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-6a04f83375",
-  "scan_date": "2025-12-03T00:27:32.501858Z",
+  "scan_date": "2025-12-04T00:31:03.757277Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.5-64726df15e.json b/data/release_v5.5-64726df15e.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-64726df15e",
-  "scan_date": "2025-12-03T00:27:24.872449Z",
+  "scan_date": "2025-12-04T00:31:42.623686Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v6.0-6534932340.json b/data/release_v6.0-6534932340.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v6.0-6534932340",
-  "scan_date": "2025-12-03T00:27:16.902775Z",
+  "scan_date": "2025-12-04T00:30:55.785903Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,63 +1,63 @@
 {
-  "last_updated": "2025-12-03T00:28:02.785992Z",
+  "last_updated": "2025-12-04T00:31:50.441483Z",
   "scanned_versions": [
-    "v5.0",
-    "v5.3.2",
-    "v5.3.4",
-    "v5.1.4",
-    "v5.4.3",
-    "v5.4.1",
+    "v5.4.2",
     "v5.2.2",
+    "v5.0.1",
+    "v5.2.4",
+    "v5.4.1",
+    "v5.0.5",
+    "v5.3.4",
+    "v5.3.1",
+    "v5.3",
     "v5.1.3",
-    "v5.5.1",
-    "v5.1",
-    "v5.4.2",
+    "v5.0.7",
+    "v5.0.9",
     "v5.0.2",
-    "v5.4",
     "v5.0.8",
-    "v5.2.5",
-    "v5.1.5",
-    "v5.0.5",
-    "v5.0.1",
-    "v5.5",
-    "v5.0.7",
-    "v5.3.3",
-    "v5.0.4",
-    "v5.2.1",
     "v5.0.3",
-    "v5.3",
+    "v5.0.4",
+    "v5.1",
+    "v5.1.6",
+    "v5.2.6",
     "v5.1.1",
-    "v5.0.9",
-    "v5.3.1",
+    "v5.4",
+    "v5.4.3",
+    "v5.5.1",
+    "v5.1.4",
+    "v5.1.5",
     "v5.1.2",
-    "v5.2.6",
-    "v5.1.6",
+    "v5.3.2",
+    "v5.2.3",
     "v5.0.6",
+    "v5.5",
     "v5.2",
-    "v5.2.4",
-    "v5.2.3",
-    "release/v5.0-d9f9b7d8ed",
+    "v5.2.5",
+    "v5.3.3",
+    "v5.0",
+    "v5.2.1",
     "release/v6.0-6534932340",
-    "release/v5.5-64726df15e",
     "release/v5.4-6a04f83375",
+    "release/v5.3-563f462986",
     "release/v5.1-11cdbbe428",
     "release/v5.2-914ab6f3e2",
-    "release/v5.3-563f462986",
+    "release/v5.0-d9f9b7d8ed",
+    "release/v5.5-64726df15e",
     "master-683ddf8a6e"
   ],
   "failed_versions": [
-    "release/v5.0",
     "release/v6.0",
-    "release/v5.5",
     "release/v5.4",
+    "release/v5.3",
     "release/v5.1",
     "release/v5.2",
-    "release/v5.3",
+    "release/v5.0",
+    "release/v5.5",
     "master"
   ],
   "total_scanned": 43,
   "scan_method": "git-batch",
-  "workflow_run": "154",
+  "workflow_run": "155",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.21.0",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-12-03T00:24:48.459214Z",
+  "scan_date": "2025-12-04T00:26:56.616495Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-12-03T00:24:05.747531Z",
+  "scan_date": "2025-12-04T00:28:09.017578Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-12-03T00:25:33.919792Z",
+  "scan_date": "2025-12-04T00:28:17.981458Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-12-03T00:25:22.917377Z",
+  "scan_date": "2025-12-04T00:28:24.114630Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-12-03T00:24:46.308191Z",
+  "scan_date": "2025-12-04T00:27:21.523256Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-12-03T00:26:37.245718Z",
+  "scan_date": "2025-12-04T00:30:01.395382Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-12-03T00:25:06.164201Z",
+  "scan_date": "2025-12-04T00:28:00.373108Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-12-03T00:24:23.340156Z",
+  "scan_date": "2025-12-04T00:28:15.853035Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-12-03T00:25:57.518413Z",
+  "scan_date": "2025-12-04T00:28:07.148177Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-12-03T00:22:40.885016Z",
+  "scan_date": "2025-12-04T00:30:38.582354Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-12-03T00:25:49.882108Z",
+  "scan_date": "2025-12-04T00:28:49.241603Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-12-03T00:26:14.007694Z",
+  "scan_date": "2025-12-04T00:29:37.339025Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-12-03T00:23:39.764713Z",
+  "scan_date": "2025-12-04T00:27:52.909331Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-12-03T00:23:06.188567Z",
+  "scan_date": "2025-12-04T00:29:22.912965Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-12-03T00:24:38.820051Z",
+  "scan_date": "2025-12-04T00:29:30.163772Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-12-03T00:26:29.566986Z",
+  "scan_date": "2025-12-04T00:28:33.909168Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-12-03T00:23:52.814541Z",
+  "scan_date": "2025-12-04T00:28:26.361127Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-12-03T00:25:31.021067Z",
+  "scan_date": "2025-12-04T00:30:46.823744Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-12-03T00:23:32.307150Z",
+  "scan_date": "2025-12-04T00:26:52.655413Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-12-03T00:26:59.851230Z",
+  "scan_date": "2025-12-04T00:29:53.886366Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -34,16 +44,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2025-47917",
       "component": "mbed_tls",
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-12-03T00:26:52.578536Z",
+  "scan_date": "2025-12-04T00:27:04.790797Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.5",
-  "scan_date": "2025-12-03T00:24:31.488273Z",
+  "scan_date": "2025-12-04T00:30:27.330802Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.6.json b/data/v5.2.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.6",
-  "scan_date": "2025-12-03T00:26:22.041484Z",
+  "scan_date": "2025-12-04T00:28:41.536915Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.json b/data/v5.2.json
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
diff --git a/data/v5.3.4.json b/data/v5.3.4.json
diff --git a/data/v5.3.json b/data/v5.3.json
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.3.json b/data/v5.4.3.json
diff --git a/data/v5.4.json b/data/v5.4.json
diff --git a/data/v5.5.1.json b/data/v5.5.1.json
diff --git a/data/v5.5.json b/data/v5.5.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "master-683ddf8a6e",`
`3`		`- "scan_date": "2025-12-03T00:28:02.785480Z",`
	`3`	`+ "scan_date": "2025-12-04T00:31:50.441024Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-12-03T00:27:07.530648Z",`
	`3`	`+ "scan_date": "2025-12-04T00:31:33.467025Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-11cdbbe428",`
`3`		`- "scan_date": "2025-12-03T00:27:39.887428Z",`
	`3`	`+ "scan_date": "2025-12-04T00:31:18.657720Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.2-914ab6f3e2",`
`3`		`- "scan_date": "2025-12-03T00:27:47.118676Z",`
	`3`	`+ "scan_date": "2025-12-04T00:31:25.803141Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-563f462986",`
`3`		`- "scan_date": "2025-12-03T00:27:54.818242Z",`
	`3`	`+ "scan_date": "2025-12-04T00:31:11.392981Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-6a04f83375",`
`3`		`- "scan_date": "2025-12-03T00:27:32.501858Z",`
	`3`	`+ "scan_date": "2025-12-04T00:31:03.757277Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-64726df15e",`
`3`		`- "scan_date": "2025-12-03T00:27:24.872449Z",`
	`3`	`+ "scan_date": "2025-12-04T00:31:42.623686Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v6.0-6534932340",`
`3`		`- "scan_date": "2025-12-03T00:27:16.902775Z",`
	`3`	`+ "scan_date": "2025-12-04T00:30:55.785903Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-12-03T00:24:48.459214Z",`
	`3`	`+ "scan_date": "2025-12-04T00:26:56.616495Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`