Adding Advisory GHSA-c6gw-w398-hv78 for trufflehog (#13379)

Co-authored-by: octo-sts[bot] <[email protected]>
wolfi-dev · Feb 25, 2025 · 58866ca · 58866ca
1 parent 35be138
commit 58866ca
Showing 1 changed file with 23 additions and 0 deletions.
diff --git a/trufflehog.advisories.yaml b/trufflehog.advisories.yaml
@@ -0,0 +1,23 @@
+schema-version: 2.0.2
+
+package:
+  name: trufflehog
+
+advisories:
+  - id: CGA-f37v-m3vv-pqgv
+    aliases:
+      - CVE-2025-27144
+      - GHSA-c6gw-w398-hv78
+    events:
+      - timestamp: 2025-02-25T16:01:59Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: trufflehog
+            componentID: 630232dc825f8705
+            componentName: github.com/go-jose/go-jose/v4
+            componentVersion: v4.0.2
+            componentType: go-module
+            componentLocation: /usr/bin/trufflehog
+            scanner: grype