From f9f132483792caf4b18bd6d00e01dbc0d2566260 Mon Sep 17 00:00:00 2001
From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com>
Date: Wed, 7 Jan 2026 11:17:12 +0000
Subject: [PATCH] Adding Advisory GHSA-3677-xxcr-wjqv for
 strimzi-kafka-operator-kafka-thirdparty-libs-cc

---
 strimzi-kafka-operator.advisories.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/strimzi-kafka-operator.advisories.yaml b/strimzi-kafka-operator.advisories.yaml
index 12c4d3216a..fda2391585 100644
--- a/strimzi-kafka-operator.advisories.yaml
+++ b/strimzi-kafka-operator.advisories.yaml
@@ -200,6 +200,18 @@ advisories:
         type: fixed
         data:
           fixed-version: 0.49.1-r1
+      - timestamp: 2026-01-07T11:17:12Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: strimzi-kafka-operator-kafka-thirdparty-libs-cc
+            componentID: fbe0c329f655909b
+            componentName: jose4j
+            componentVersion: 0.9.5
+            componentType: java-archive
+            componentLocation: /opt/cruise-control/libs/jose4j-0.9.5.jar
+            scanner: grype
 
   - id: CGA-9vh6-4325-2mgm
     aliases: