fleet/security/vex/fleetctl/CVE-2024-7254.vex.json
Lucas Manuel Rodriguez 895194d63b
Add scanning to released images and process to track vulnerabilities (#28087)
For #25902.

---------

Co-authored-by: Sharon Katz <121527325+sharon-fdm@users.noreply.github.com>
2025-04-16 11:50:10 -03:00

26 lines
718 B
JSON

{
"@context": "https://openvex.dev/ns/v0.2.0",
"@id": "https://openvex.dev/docs/public/vex-4cff85f80b944b78a8b5100dd0320e0cd86452461a330bfeb6cc1708cba5aadb",
"author": "@lucasmrod",
"timestamp": "2025-04-10T07:34:26.535554-03:00",
"version": 1,
"statements": [
{
"vulnerability": {
"name": "CVE-2024-7254"
},
"timestamp": "2025-04-10T07:34:26.535559-03:00",
"products": [
{
"@id": "fleetctl"
},
{
"@id": "pkg:maven/com.google.protobuf/protobuf-java"
}
],
"status": "not_affected",
"status_notes": "fleetctl does not use Java",
"justification": "vulnerable_code_not_in_execute_path"
}
]
}