chore: update security scan results

actions-user · actions-user · commit bcbb4baee683 · 2025-12-22T00:44:52.000Z
- Updated scan data from workflow run 173
    - Scan mode: git-only
    - Total scanned: 239
    - Total vulnerabilities: 514
diff --git a/data/master-1e87d43f1a.json b/data/master-1e87d43f1a.json
@@ -1,6 +1,6 @@
 {
   "release_version": "master-1e87d43f1a",
-  "scan_date": "2025-12-21T00:44:28.940803Z",
+  "scan_date": "2025-12-22T00:44:49.472771Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.0-d9f9b7d8ed.json b/data/release_v5.0-d9f9b7d8ed.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.0-d9f9b7d8ed",
-  "scan_date": "2025-12-21T00:40:51.019809Z",
+  "scan_date": "2025-12-22T00:42:13.510942Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/release_v5.1-8a19d06fb8.json b/data/release_v5.1-8a19d06fb8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.1-8a19d06fb8",
-  "scan_date": "2025-12-21T00:43:08.533022Z",
+  "scan_date": "2025-12-22T00:44:10.905982Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.2-87cdd77527.json b/data/release_v5.2-87cdd77527.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.2-87cdd77527",
-  "scan_date": "2025-12-21T00:41:24.150704Z",
+  "scan_date": "2025-12-22T00:44:40.565046Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.3-70aae5f8a7.json b/data/release_v5.3-70aae5f8a7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.3-70aae5f8a7",
-  "scan_date": "2025-12-21T00:41:12.201156Z",
+  "scan_date": "2025-12-22T00:44:20.527097Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.4-e6cad886e8.json b/data/release_v5.4-e6cad886e8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.4-e6cad886e8",
-  "scan_date": "2025-12-21T00:41:02.579028Z",
+  "scan_date": "2025-12-22T00:44:30.495570Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v5.5-e0577ae677.json b/data/release_v5.5-e0577ae677.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v5.5-e0577ae677",
-  "scan_date": "2025-12-21T00:41:55.242190Z",
+  "scan_date": "2025-12-22T00:42:49.770929Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/release_v6.0-25814db7b1.json b/data/release_v6.0-25814db7b1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "release/v6.0-25814db7b1",
-  "scan_date": "2025-12-21T00:44:21.370942Z",
+  "scan_date": "2025-12-22T00:42:01.892853Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/scan_summary.json b/data/scan_summary.json
@@ -1,63 +1,63 @@
 {
-  "last_updated": "2025-12-21T00:44:28.941304Z",
+  "last_updated": "2025-12-22T00:44:49.473234Z",
   "scanned_versions": [
-    "v5.1",
-    "v5.1.2",
-    "v5.0.1",
-    "v5.3.1",
-    "v5.0.2",
-    "v5.0.4",
-    "v5.2.2",
-    "v5.0.3",
+    "v5.2.6",
+    "v5.4.1",
     "v5.5",
-    "v5.2",
-    "v5.3.3",
-    "v5.0",
     "v5.3",
-    "v5.4.2",
-    "v5.0.7",
+    "v5.0.8",
+    "v5.1.3",
     "v5.0.5",
-    "v5.4",
-    "v5.1.6",
-    "v5.2.4",
+    "v5.0.2",
+    "v5.1.5",
+    "v5.0.4",
+    "v5.2",
     "v5.1.1",
-    "v5.0.9",
-    "v5.1.4",
+    "v5.0.7",
+    "v5.3.1",
     "v5.3.2",
+    "v5.0.3",
+    "v5.4.2",
+    "v5.3.3",
+    "v5.0",
+    "v5.2.1",
+    "v5.2.3",
+    "v5.4.3",
     "v5.0.6",
+    "v5.0.9",
+    "v5.2.4",
+    "v5.2.5",
     "v5.3.4",
-    "v5.1.3",
+    "v5.0.1",
+    "v5.2.2",
+    "v5.4",
+    "v5.1.6",
     "v5.5.1",
-    "v5.1.5",
-    "v5.4.3",
-    "v5.2.5",
-    "v5.2.6",
-    "v5.4.1",
-    "v5.2.1",
-    "v5.0.8",
-    "v5.2.3",
+    "v5.1",
+    "v5.1.4",
+    "v5.1.2",
+    "release/v6.0-25814db7b1",
     "release/v5.0-d9f9b7d8ed",
-    "release/v5.4-e6cad886e8",
-    "release/v5.3-70aae5f8a7",
-    "release/v5.2-87cdd77527",
     "release/v5.5-e0577ae677",
     "release/v5.1-8a19d06fb8",
-    "release/v6.0-25814db7b1",
+    "release/v5.3-70aae5f8a7",
+    "release/v5.4-e6cad886e8",
+    "release/v5.2-87cdd77527",
     "master-1e87d43f1a"
   ],
   "failed_versions": [
+    "release/v6.0",
     "release/v5.0",
-    "release/v5.4",
-    "release/v5.3",
-    "release/v5.2",
     "release/v5.5",
     "release/v5.1",
-    "release/v6.0",
+    "release/v5.3",
+    "release/v5.4",
+    "release/v5.2",
     "master"
   ],
   "total_scanned": 43,
   "scan_method": "git-batch",
-  "workflow_run": "172",
+  "workflow_run": "173",
   "scanner_info": {
     "tool": "esp-idf-security-dashboard",
     "esp_idf_sbom_version": "0.21.0",
diff --git a/data/v5.0.1.json b/data/v5.0.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.1",
-  "scan_date": "2025-12-21T00:25:08.155200Z",
+  "scan_date": "2025-12-22T00:37:41.875696Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.2.json b/data/v5.0.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.2",
-  "scan_date": "2025-12-21T00:26:17.862827Z",
+  "scan_date": "2025-12-22T00:28:39.644124Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.3.json b/data/v5.0.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.3",
-  "scan_date": "2025-12-21T00:27:18.771570Z",
+  "scan_date": "2025-12-22T00:31:47.168422Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.0.4.json b/data/v5.0.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.4",
-  "scan_date": "2025-12-21T00:26:40.465886Z",
+  "scan_date": "2025-12-22T00:29:35.301669Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.5.json b/data/v5.0.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.5",
-  "scan_date": "2025-12-21T00:31:35.872311Z",
+  "scan_date": "2025-12-22T00:28:37.830254Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.6.json b/data/v5.0.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.6",
-  "scan_date": "2025-12-21T00:34:08.024992Z",
+  "scan_date": "2025-12-22T00:35:57.137634Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.7.json b/data/v5.0.7.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.7",
-  "scan_date": "2025-12-21T00:31:28.946493Z",
+  "scan_date": "2025-12-22T00:30:05.235032Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.8.json b/data/v5.0.8.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.8",
-  "scan_date": "2025-12-21T00:40:32.818684Z",
+  "scan_date": "2025-12-22T00:27:57.555407Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.9.json b/data/v5.0.9.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0.9",
-  "scan_date": "2025-12-21T00:33:39.653748Z",
+  "scan_date": "2025-12-22T00:36:05.963577Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.0.json b/data/v5.0.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.0",
-  "scan_date": "2025-12-21T00:29:46.497633Z",
+  "scan_date": "2025-12-22T00:33:48.902321Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.1.1.json b/data/v5.1.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.1",
-  "scan_date": "2025-12-21T00:33:31.284501Z",
+  "scan_date": "2025-12-22T00:29:54.699072Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.2.json b/data/v5.1.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.2",
-  "scan_date": "2025-12-21T00:24:54.455584Z",
+  "scan_date": "2025-12-22T00:40:46.068312Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.3.json b/data/v5.1.3.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.3",
-  "scan_date": "2025-12-21T00:35:34.897507Z",
+  "scan_date": "2025-12-22T00:28:29.093802Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.4.json b/data/v5.1.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.4",
-  "scan_date": "2025-12-21T00:33:48.698147Z",
+  "scan_date": "2025-12-22T00:40:39.252103Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.5.json b/data/v5.1.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.5",
-  "scan_date": "2025-12-21T00:37:09.744192Z",
+  "scan_date": "2025-12-22T00:29:26.189257Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.6.json b/data/v5.1.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1.6",
-  "scan_date": "2025-12-21T00:32:36.944598Z",
+  "scan_date": "2025-12-22T00:39:04.980943Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.1.json b/data/v5.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.1",
-  "scan_date": "2025-12-21T00:24:18.525841Z",
+  "scan_date": "2025-12-22T00:40:26.633411Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [],
diff --git a/data/v5.2.1.json b/data/v5.2.1.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.1",
-  "scan_date": "2025-12-21T00:39:58.317840Z",
+  "scan_date": "2025-12-22T00:34:01.040735Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.2.json b/data/v5.2.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.2",
-  "scan_date": "2025-12-21T00:27:15.037739Z",
+  "scan_date": "2025-12-22T00:37:54.633315Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.3.json b/data/v5.2.3.json
@@ -1,9 +1,19 @@
 {
   "release_version": "v5.2.3",
-  "scan_date": "2025-12-21T00:40:42.669365Z",
+  "scan_date": "2025-12-22T00:34:14.586210Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
+    {
+      "cve_id": "CVE-2024-30949",
+      "component": "newlib",
+      "component_version": "4.3.0",
+      "severity": "CRITICAL",
+      "score": "9.8",
+      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
+      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
+    },
     {
       "cve_id": "CVE-2024-45158",
       "component": "mbed_tls",
@@ -34,16 +44,6 @@
       "description": "Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair",
       "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-49195"
     },
-    {
-      "cve_id": "CVE-2024-30949",
-      "component": "newlib",
-      "component_version": "4.3.0",
-      "severity": "CRITICAL",
-      "score": "9.8",
-      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
-      "description": "An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.",
-      "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-30949"
-    },
     {
       "cve_id": "CVE-2025-47917",
       "component": "mbed_tls",
diff --git a/data/v5.2.4.json b/data/v5.2.4.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.4",
-  "scan_date": "2025-12-21T00:33:23.635808Z",
+  "scan_date": "2025-12-22T00:36:17.674892Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.5.json b/data/v5.2.5.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.5",
-  "scan_date": "2025-12-21T00:38:40.788850Z",
+  "scan_date": "2025-12-22T00:36:24.431274Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.6.json b/data/v5.2.6.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2.6",
-  "scan_date": "2025-12-21T00:39:39.719398Z",
+  "scan_date": "2025-12-22T00:24:54.402328Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.2.json b/data/v5.2.json
@@ -1,6 +1,6 @@
 {
   "release_version": "v5.2",
-  "scan_date": "2025-12-21T00:28:50.276573Z",
+  "scan_date": "2025-12-22T00:29:47.385886Z",
   "tool_version": "0.21.0",
   "total_components": 0,
   "vulnerabilities": [
diff --git a/data/v5.3.1.json b/data/v5.3.1.json
diff --git a/data/v5.3.2.json b/data/v5.3.2.json
diff --git a/data/v5.3.3.json b/data/v5.3.3.json
diff --git a/data/v5.3.4.json b/data/v5.3.4.json
diff --git a/data/v5.3.json b/data/v5.3.json
diff --git a/data/v5.4.1.json b/data/v5.4.1.json
diff --git a/data/v5.4.2.json b/data/v5.4.2.json
diff --git a/data/v5.4.3.json b/data/v5.4.3.json
diff --git a/data/v5.4.json b/data/v5.4.json
diff --git a/data/v5.5.1.json b/data/v5.5.1.json
diff --git a/data/v5.5.json b/data/v5.5.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "master-1e87d43f1a",`
`3`		`- "scan_date": "2025-12-21T00:44:28.940803Z",`
	`3`	`+ "scan_date": "2025-12-22T00:44:49.472771Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.0-d9f9b7d8ed",`
`3`		`- "scan_date": "2025-12-21T00:40:51.019809Z",`
	`3`	`+ "scan_date": "2025-12-22T00:42:13.510942Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.1-8a19d06fb8",`
`3`		`- "scan_date": "2025-12-21T00:43:08.533022Z",`
	`3`	`+ "scan_date": "2025-12-22T00:44:10.905982Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.2-87cdd77527",`
`3`		`- "scan_date": "2025-12-21T00:41:24.150704Z",`
	`3`	`+ "scan_date": "2025-12-22T00:44:40.565046Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.3-70aae5f8a7",`
`3`		`- "scan_date": "2025-12-21T00:41:12.201156Z",`
	`3`	`+ "scan_date": "2025-12-22T00:44:20.527097Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.4-e6cad886e8",`
`3`		`- "scan_date": "2025-12-21T00:41:02.579028Z",`
	`3`	`+ "scan_date": "2025-12-22T00:44:30.495570Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v5.5-e0577ae677",`
`3`		`- "scan_date": "2025-12-21T00:41:55.242190Z",`
	`3`	`+ "scan_date": "2025-12-22T00:42:49.770929Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "release/v6.0-25814db7b1",`
`3`		`- "scan_date": "2025-12-21T00:44:21.370942Z",`
	`3`	`+ "scan_date": "2025-12-22T00:42:01.892853Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"release_version": "v5.0.1",`
`3`		`- "scan_date": "2025-12-21T00:25:08.155200Z",`
	`3`	`+ "scan_date": "2025-12-22T00:37:41.875696Z",`
`4`	`4`	`"tool_version": "0.21.0",`
`5`	`5`	`"total_components": 0,`
`6`	`6`	`"vulnerabilities": [],`