mirror of
https://github.com/espressif/esp-idf.git
synced 2025-10-02 01:50:58 +02:00
fix(cjson): add CPE with davegamble as vendor
The latest cJSON vulnerabilities appear to list "davegamble" as the vendor instead of "cjson_project." Add a new CPE with "davegamble" as the vendor. Signed-off-by: Frantisek Hrbata <frantisek.hrbata@espressif.com>
This commit is contained in:
1
.gitmodules
vendored
1
.gitmodules
vendored
@@ -51,6 +51,7 @@
|
|||||||
url = ../../DaveGamble/cJSON.git
|
url = ../../DaveGamble/cJSON.git
|
||||||
sbom-version = 1.7.18
|
sbom-version = 1.7.18
|
||||||
sbom-cpe = cpe:2.3:a:cjson_project:cjson:{}:*:*:*:*:*:*:*
|
sbom-cpe = cpe:2.3:a:cjson_project:cjson:{}:*:*:*:*:*:*:*
|
||||||
|
sbom-cpe = cpe:2.3:a:davegamble:cjson:{}:*:*:*:*:*:*:*
|
||||||
sbom-supplier = Person: Dave Gamble
|
sbom-supplier = Person: Dave Gamble
|
||||||
sbom-url = https://github.com/DaveGamble/cJSON
|
sbom-url = https://github.com/DaveGamble/cJSON
|
||||||
sbom-description = Ultralightweight JSON parser in ANSI C
|
sbom-description = Ultralightweight JSON parser in ANSI C
|
||||||
|
Reference in New Issue
Block a user