trino/CVE-2024-34156,CVE-2024-34158,CVE-2024-34155 advisory updates (#…

…11278)
wolfi-dev · Jan 15, 2025 · 67696c0 · 67696c0
1 parent c940d1f
commit 67696c0
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/trino.advisories.yaml b/trino.advisories.yaml
@@ -275,6 +275,10 @@ advisories:
             componentType: go-module
             componentLocation: /usr/lib/trino/bin/darwin-amd64/launcher
             scanner: grype
+      - timestamp: 2025-01-15T08:45:12Z
+        type: pending-upstream-fix
+        data:
+          note: This CVE is brought in as a transitive dependency under darwin-amd64 which is defined in the package-json.lock and is unable to be remediated, upstream maintainers will be required to implement the required fix.
 
   - id: CGA-7435-52pf-xmp5
     aliases:
@@ -469,6 +473,10 @@ advisories:
             componentType: go-module
             componentLocation: /usr/lib/trino/bin/darwin-amd64/launcher
             scanner: grype
+      - timestamp: 2025-01-15T08:45:59Z
+        type: pending-upstream-fix
+        data:
+          note: This CVE is brought in as a transitive dependency under darwin-amd64 which is defined in the package-json.lock and is unable to be remediated, upstream maintainers will be required to implement the required fix.
 
   - id: CGA-cgcj-87rj-g4qm
     aliases:
@@ -487,6 +495,10 @@ advisories:
             componentType: go-module
             componentLocation: /usr/lib/trino/bin/darwin-amd64/launcher
             scanner: grype
+      - timestamp: 2025-01-15T08:47:00Z
+        type: pending-upstream-fix
+        data:
+          note: This CVE is brought in as a transitive dependency under darwin-amd64 which is defined in the package-json.lock and is unable to be remediated, upstream maintainers will be required to implement the required fix.
 
   - id: CGA-cvrj-h7rr-r975
     aliases: