chore: update security scan results

actions-user · actions-user · commit ba03447df81f · 2025-11-02T00:28:59.000Z
- Updated scan data from workflow run 122
    - Scan mode: git-only
    - Total scanned: 155
    - Total vulnerabilities: 468
diff --git a/data/master-ff97953b32.json b/data/master-ff97953b32.json
@@ -1,6 +1,6 @@
 {
   "release_version": "master-ff97953b32",
-  "scan_date": "2025-11-01T00:29:36.938561Z",
+  "scan_date": "2025-11-02T00:28:58.180915Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-11-01T00:28:46.704170Z",
+  "scan_date": "2025-11-02T00:28:11.769549Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.1-dd37234fff.json b/data/release_v5.1-dd37234fff.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-dd37234fff",
-  "scan_date": "2025-11-01T00:29:04.553699Z",
+  "scan_date": "2025-11-02T00:28:50.096548Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.2-083e2bb56a.json b/data/release_v5.2-083e2bb56a.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.2-083e2bb56a",
-  "scan_date": "2025-11-01T00:29:20.302992Z",
+  "scan_date": "2025-11-02T00:28:43.358804Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.3-13ec3f6f6f.json b/data/release_v5.3-13ec3f6f6f.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-13ec3f6f6f",
-  "scan_date": "2025-11-01T00:29:12.764566Z",
+  "scan_date": "2025-11-02T00:28:20.296302Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.4-c94fdcdb48.json b/data/release_v5.4-c94fdcdb48.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-c94fdcdb48",
-  "scan_date": "2025-11-01T00:29:28.655456Z",
+  "scan_date": "2025-11-02T00:28:28.359114Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.5-f1a1df9b2e.json b/data/release_v5.5-f1a1df9b2e.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-f1a1df9b2e",
-  "scan_date": "2025-11-01T00:28:56.332338Z",
+  "scan_date": "2025-11-02T00:28:35.949108Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,61 +1,61 @@
 {
-  "last_updated": "2025-11-01T00:29:36.939095Z",
+  "last_updated": "2025-11-02T00:28:58.181379Z",
   "scanned_versions": [
+    "v5.5",
+    "v5.5.1",
+    "v5.0.4",
     "v5.0.2",
-    "v5.0.6",
-    "v5.1.3",
+    "v5.2",
+    "v5.0.1",
+    "v5.0.9",
+    "v5.3.1",
+    "v5.1.6",
     "v5.0",
-    "v5.4.3",
+    "v5.3",
+    "v5.4.2",
+    "v5.1.2",
     "v5.2.3",
+    "v5.0.7",
+    "v5.2.6",
+    "v5.1.1",
     "v5.2.4",
-    "v5.0.9",
-    "v5.4.2",
-    "v5.3",
-    "v5.0.8",
-    "v5.2.2",
+    "v5.0.3",
+    "v5.1.3",
     "v5.4",
-    "v5.0.4",
-    "v5.2.1",
-    "v5.5",
-    "v5.1",
+    "v5.3.2",
+    "v5.0.6",
+    "v5.1.4",
     "v5.2.5",
-    "v5.0.1",
-    "v5.1.5",
-    "v5.1.1",
-    "v5.0.3",
+    "v5.1",
+    "v5.2.1",
+    "v5.4.1",
     "v5.0.5",
     "v5.3.4",
-    "v5.2.6",
-    "v5.3.1",
-    "v5.1.6",
-    "v5.3.2",
+    "v5.2.2",
     "v5.3.3",
-    "v5.0.7",
-    "v5.2",
-    "v5.4.1",
-    "v5.1.2",
-    "v5.5.1",
-    "v5.1.4",
+    "v5.4.3",
+    "v5.1.5",
+    "v5.0.8",
     "release/v5.0-d9f9b7d8ed",
-    "release/v5.5-f1a1df9b2e",
-    "release/v5.1-dd37234fff",
     "release/v5.3-13ec3f6f6f",
-    "release/v5.2-083e2bb56a",
     "release/v5.4-c94fdcdb48",
+    "release/v5.5-f1a1df9b2e",
+    "release/v5.2-083e2bb56a",
+    "release/v5.1-dd37234fff",
     "master-ff97953b32"
   ],
   "failed_versions": [
     "release/v5.0",
-    "release/v5.5",
-    "release/v5.1",
     "release/v5.3",
-    "release/v5.2",
     "release/v5.4",
+    "release/v5.5",
+    "release/v5.2",
+    "release/v5.1",
     "master"
   ],
   "total_scanned": 42,
   "scan_method": "git-batch",
-  "workflow_run": "121",
+  "workflow_run": "122",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.21.0",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-11-01T00:26:32.456146Z",
+  "scan_date": "2025-11-02T00:24:24.529989Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-11-01T00:24:13.995167Z",
+  "scan_date": "2025-11-02T00:24:14.193478Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-11-01T00:26:50.748570Z",
+  "scan_date": "2025-11-02T00:26:00.115863Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-11-01T00:25:58.957609Z",
+  "scan_date": "2025-11-02T00:24:12.306295Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-11-01T00:26:57.343651Z",
+  "scan_date": "2025-11-02T00:27:15.816910Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-11-01T00:24:21.461405Z",
+  "scan_date": "2025-11-02T00:26:32.382181Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-11-01T00:27:54.647889Z",
+  "scan_date": "2025-11-02T00:25:32.293939Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-11-01T00:25:32.716155Z",
+  "scan_date": "2025-11-02T00:28:05.276553Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-11-01T00:25:05.363313Z",
+  "scan_date": "2025-11-02T00:24:31.674473Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-11-01T00:24:31.256746Z",
+  "scan_date": "2025-11-02T00:24:50.983221Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-11-01T00:26:48.190468Z",
+  "scan_date": "2025-11-02T00:25:48.399935Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-11-01T00:28:20.492973Z",
+  "scan_date": "2025-11-02T00:25:16.564919Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-11-01T00:24:28.682419Z",
+  "scan_date": "2025-11-02T00:26:07.831077Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-11-01T00:28:38.686227Z",
+  "scan_date": "2025-11-02T00:26:39.607844Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-11-01T00:26:40.679662Z",
+  "scan_date": "2025-11-02T00:27:57.963432Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-11-01T00:27:30.569447Z",
+  "scan_date": "2025-11-02T00:24:48.122010Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-11-01T00:26:20.309564Z",
+  "scan_date": "2025-11-02T00:26:50.655257Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,19 +1,9 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-11-01T00:26:07.077126Z",
+  "scan_date": "2025-11-02T00:26:58.378540Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2024-45159",
       "component": "mbed_tls",
@@ -34,6 +24,16 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-30166",
       "component": "mbed_tls",
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-11-01T00:25:41.449646Z",
+  "scan_date": "2025-11-02T00:27:32.833200Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-11-01T00:24:49.695987Z",
+  "scan_date": "2025-11-02T00:25:24.552231Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-11-01T00:24:57.229770Z",
+  "scan_date": "2025-11-02T00:25:56.585131Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.5",
-  "scan_date": "2025-11-01T00:26:28.925999Z",
+  "scan_date": "2025-11-02T00:26:47.246963Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.6.json b/data/v5.2.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.6",
-  "scan_date": "2025-11-01T00:27:14.391661Z",
+  "scan_date": "2025-11-02T00:25:40.516304Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.json b/data/v5.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2",
-  "scan_date": "2025-11-01T00:28:02.951925Z",
+  "scan_date": "2025-11-02T00:24:21.766800Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.1",
-  "scan_date": "2025-11-01T00:27:22.517797Z",
+  "scan_date": "2025-11-02T00:24:40.196925Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.2",
-  "scan_date": "2025-11-01T00:27:38.864669Z",
+  "scan_date": "2025-11-02T00:26:24.538650Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.3.3",
-  "scan_date": "2025-11-01T00:27:46.535735Z",
+  "scan_date": "2025-11-02T00:27:41.423935Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.4.json b/data/v5.3.4.json
diff --git a/data/v5.3.json b/data/v5.3.json
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.3.json b/data/v5.4.3.json
diff --git a/data/v5.4.json b/data/v5.4.json
diff --git a/data/v5.5.1.json b/data/v5.5.1.json
diff --git a/data/v5.5.json b/data/v5.5.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "master-ff97953b32",`
`3`		`- "scan_date": "2025-11-01T00:29:36.938561Z",`
	`3`	`+ "scan_date": "2025-11-02T00:28:58.180915Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-11-01T00:28:46.704170Z",`
	`3`	`+ "scan_date": "2025-11-02T00:28:11.769549Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-dd37234fff",`
`3`		`- "scan_date": "2025-11-01T00:29:04.553699Z",`
	`3`	`+ "scan_date": "2025-11-02T00:28:50.096548Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.2-083e2bb56a",`
`3`		`- "scan_date": "2025-11-01T00:29:20.302992Z",`
	`3`	`+ "scan_date": "2025-11-02T00:28:43.358804Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-13ec3f6f6f",`
`3`		`- "scan_date": "2025-11-01T00:29:12.764566Z",`
	`3`	`+ "scan_date": "2025-11-02T00:28:20.296302Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-c94fdcdb48",`
`3`		`- "scan_date": "2025-11-01T00:29:28.655456Z",`
	`3`	`+ "scan_date": "2025-11-02T00:28:28.359114Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-f1a1df9b2e",`
`3`		`- "scan_date": "2025-11-01T00:28:56.332338Z",`
	`3`	`+ "scan_date": "2025-11-02T00:28:35.949108Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-11-01T00:26:32.456146Z",`
	`3`	`+ "scan_date": "2025-11-02T00:24:24.529989Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.2",`
`3`		`- "scan_date": "2025-11-01T00:24:13.995167Z",`
	`3`	`+ "scan_date": "2025-11-02T00:24:14.193478Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`