data/reports: unexclude 20 reports (18)

- data/reports/GO-2022-0507.yaml - data/reports/GO-2022-0508.yaml - data/reports/GO-2022-0509.yaml - data/reports/GO-2022-0510.yaml - data/reports/GO-2022-0511.yaml - data/reports/GO-2022-0512.yaml - data/reports/GO-2022-0516.yaml - data/reports/GO-2022-0517.yaml - data/reports/GO-2022-0518.yaml - data/reports/GO-2022-0540.yaml - data/reports/GO-2022-0547.yaml - data/reports/GO-2022-0550.yaml - data/reports/GO-2022-0554.yaml - data/reports/GO-2022-0556.yaml - data/reports/GO-2022-0559.yaml - data/reports/GO-2022-0560.yaml - data/reports/GO-2022-0561.yaml - data/reports/GO-2022-0562.yaml - data/reports/GO-2022-0566.yaml - data/reports/GO-2022-0570.yaml Updates #507 Updates #508 Updates #509 Updates #510 Updates #511 Updates #512 Updates #516 Updates #517 Updates #518 Updates #540 Updates #547 Updates #550 Updates #554 Updates #556 Updates #559 Updates #560 Updates #561 Updates #562 Updates #566 Updates #570 Change-Id: I3197ea86e01d2ed4ae9e7f17dbd7a3e495c903e4 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/607220 Reviewed-by: Damien Neil <dneil@google.com> Auto-Submit: Tatiana Bradley <tatianabradley@google.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
golang · Aug 21, 2024 · 2c69a3a · 2c69a3a
1 parent 41b516d
commit 2c69a3a
Show file tree

Hide file tree

Showing 60 changed files with 1,914 additions and 163 deletions.
diff --git a/data/excluded/GO-2022-0507.yaml b/data/excluded/GO-2022-0507.yaml
diff --git a/data/excluded/GO-2022-0508.yaml b/data/excluded/GO-2022-0508.yaml
diff --git a/data/excluded/GO-2022-0509.yaml b/data/excluded/GO-2022-0509.yaml
diff --git a/data/excluded/GO-2022-0510.yaml b/data/excluded/GO-2022-0510.yaml
diff --git a/data/excluded/GO-2022-0511.yaml b/data/excluded/GO-2022-0511.yaml
diff --git a/data/excluded/GO-2022-0512.yaml b/data/excluded/GO-2022-0512.yaml
diff --git a/data/excluded/GO-2022-0516.yaml b/data/excluded/GO-2022-0516.yaml
diff --git a/data/excluded/GO-2022-0517.yaml b/data/excluded/GO-2022-0517.yaml
diff --git a/data/excluded/GO-2022-0518.yaml b/data/excluded/GO-2022-0518.yaml
diff --git a/data/excluded/GO-2022-0540.yaml b/data/excluded/GO-2022-0540.yaml
diff --git a/data/excluded/GO-2022-0547.yaml b/data/excluded/GO-2022-0547.yaml
diff --git a/data/excluded/GO-2022-0550.yaml b/data/excluded/GO-2022-0550.yaml
diff --git a/data/excluded/GO-2022-0554.yaml b/data/excluded/GO-2022-0554.yaml
diff --git a/data/excluded/GO-2022-0556.yaml b/data/excluded/GO-2022-0556.yaml
diff --git a/data/excluded/GO-2022-0559.yaml b/data/excluded/GO-2022-0559.yaml
diff --git a/data/excluded/GO-2022-0560.yaml b/data/excluded/GO-2022-0560.yaml
diff --git a/data/excluded/GO-2022-0561.yaml b/data/excluded/GO-2022-0561.yaml
diff --git a/data/excluded/GO-2022-0562.yaml b/data/excluded/GO-2022-0562.yaml
diff --git a/data/excluded/GO-2022-0566.yaml b/data/excluded/GO-2022-0566.yaml
diff --git a/data/excluded/GO-2022-0570.yaml b/data/excluded/GO-2022-0570.yaml
diff --git a/data/osv/GO-2022-0507.json b/data/osv/GO-2022-0507.json
@@ -0,0 +1,72 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2022-0507",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2022-31073",
+    "GHSA-vwm6-qc77-v2rh"
+  ],
+  "summary": "KubeEdge Edge ServiceBus module DoS in github.com/kubeedge/kubeedge",
+  "details": "KubeEdge Edge ServiceBus module DoS in github.com/kubeedge/kubeedge",
+  "affected": [
+    {
+      "package": {
+        "name": "github.com/kubeedge/kubeedge",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.9.4"
+            },
+            {
+              "introduced": "1.10.0"
+            },
+            {
+              "fixed": "1.10.2"
+            },
+            {
+              "introduced": "1.11.0"
+            },
+            {
+              "fixed": "1.11.1"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {}
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/kubeedge/kubeedge/security/advisories/GHSA-vwm6-qc77-v2rh"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31073"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/kubeedge/kubeedge/pull/4038"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/kubeedge/kubeedge/pull/4039"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/kubeedge/kubeedge/pull/4042"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2022-0507",
+    "review_status": "UNREVIEWED"
+  }
+}
diff --git a/data/osv/GO-2022-0508.json b/data/osv/GO-2022-0508.json
@@ -0,0 +1,60 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2022-0508",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2022-31074",
+    "GHSA-w52j-3457-q9wr"
+  ],
+  "summary": "KubeEdge Cloud AdmissionController component DoS in github.com/kubeedge/kubeedge",
+  "details": "KubeEdge Cloud AdmissionController component DoS in github.com/kubeedge/kubeedge",
+  "affected": [
+    {
+      "package": {
+        "name": "github.com/kubeedge/kubeedge",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.9.4"
+            },
+            {
+              "introduced": "1.10.0"
+            },
+            {
+              "fixed": "1.10.2"
+            },
+            {
+              "introduced": "1.11.0"
+            },
+            {
+              "fixed": "1.11.1"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {}
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/kubeedge/kubeedge/security/advisories/GHSA-w52j-3457-q9wr"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31074"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2022-0508",
+    "review_status": "UNREVIEWED"
+  }
+}
diff --git a/data/osv/GO-2022-0509.json b/data/osv/GO-2022-0509.json
@@ -0,0 +1,60 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2022-0509",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2022-31075",
+    "GHSA-x3px-2p95-f6jr"
+  ],
+  "summary": "KubeEdge DoS when signing the CSR from EdgeCore in github.com/kubeedge/kubeedge",
+  "details": "KubeEdge DoS when signing the CSR from EdgeCore in github.com/kubeedge/kubeedge",
+  "affected": [
+    {
+      "package": {
+        "name": "github.com/kubeedge/kubeedge",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.9.4"
+            },
+            {
+              "introduced": "1.10.0"
+            },
+            {
+              "fixed": "1.10.2"
+            },
+            {
+              "introduced": "1.11.0"
+            },
+            {
+              "fixed": "1.11.1"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {}
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/kubeedge/kubeedge/security/advisories/GHSA-x3px-2p95-f6jr"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31075"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2022-0509",
+    "review_status": "UNREVIEWED"
+  }
+}