fix(cjson): add CPE with davegamble as vendor

The latest cJSON vulnerabilities appear to list "davegamble" as the
vendor instead of "cjson_project." Add a new CPE with "davegamble" as
the vendor.

Signed-off-by: Frantisek Hrbata <frantisek.hrbata@espressif.com>
This commit is contained in:
Frantisek Hrbata
2025-09-09 16:30:52 +02:00
parent 56bef4d352
commit bb027dafd7

1
.gitmodules vendored
View File

@@ -51,6 +51,7 @@
url = ../../DaveGamble/cJSON.git url = ../../DaveGamble/cJSON.git
sbom-version = 1.7.19 sbom-version = 1.7.19
sbom-cpe = cpe:2.3:a:cjson_project:cjson:{}:*:*:*:*:*:*:* sbom-cpe = cpe:2.3:a:cjson_project:cjson:{}:*:*:*:*:*:*:*
sbom-cpe = cpe:2.3:a:davegamble:cjson:{}:*:*:*:*:*:*:*
sbom-supplier = Person: Dave Gamble sbom-supplier = Person: Dave Gamble
sbom-url = https://github.com/DaveGamble/cJSON sbom-url = https://github.com/DaveGamble/cJSON
sbom-description = Ultralightweight JSON parser in ANSI C sbom-description = Ultralightweight JSON parser in ANSI C