data/reports: unexclude 20 reports (20)

- data/reports/GO-2022-0609.yaml - data/reports/GO-2022-0611.yaml - data/reports/GO-2022-0612.yaml - data/reports/GO-2022-0615.yaml - data/reports/GO-2022-0616.yaml - data/reports/GO-2022-0617.yaml - data/reports/GO-2022-0618.yaml - data/reports/GO-2022-0620.yaml - data/reports/GO-2022-0622.yaml - data/reports/GO-2022-0623.yaml - data/reports/GO-2022-0625.yaml - data/reports/GO-2022-0626.yaml - data/reports/GO-2022-0630.yaml - data/reports/GO-2022-0631.yaml - data/reports/GO-2022-0632.yaml - data/reports/GO-2022-0634.yaml - data/reports/GO-2022-0636.yaml - data/reports/GO-2022-0638.yaml - data/reports/GO-2022-0640.yaml - data/reports/GO-2022-0641.yaml Updates #609 Updates #611 Updates #612 Updates #615 Updates #616 Updates #617 Updates #618 Updates #620 Updates #622 Updates #623 Updates #625 Updates #626 Updates #630 Updates #631 Updates #632 Updates #634 Updates #636 Updates #638 Updates #640 Updates #641 Change-Id: I9fc909832a7e4eb1d23e5eee482674e307e3ee5c Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/607222 Reviewed-by: Damien Neil <dneil@google.com> Auto-Submit: Tatiana Bradley <tatianabradley@google.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
golang · Aug 21, 2024 · ad9da11 · ad9da11
1 parent 89edd0b
commit ad9da11
Show file tree

Hide file tree

Showing 60 changed files with 1,954 additions and 160 deletions.
diff --git a/data/excluded/GO-2022-0609.yaml b/data/excluded/GO-2022-0609.yaml
diff --git a/data/excluded/GO-2022-0611.yaml b/data/excluded/GO-2022-0611.yaml
diff --git a/data/excluded/GO-2022-0612.yaml b/data/excluded/GO-2022-0612.yaml
diff --git a/data/excluded/GO-2022-0615.yaml b/data/excluded/GO-2022-0615.yaml
diff --git a/data/excluded/GO-2022-0616.yaml b/data/excluded/GO-2022-0616.yaml
diff --git a/data/excluded/GO-2022-0617.yaml b/data/excluded/GO-2022-0617.yaml
diff --git a/data/excluded/GO-2022-0618.yaml b/data/excluded/GO-2022-0618.yaml
diff --git a/data/excluded/GO-2022-0620.yaml b/data/excluded/GO-2022-0620.yaml
diff --git a/data/excluded/GO-2022-0622.yaml b/data/excluded/GO-2022-0622.yaml
diff --git a/data/excluded/GO-2022-0623.yaml b/data/excluded/GO-2022-0623.yaml
diff --git a/data/excluded/GO-2022-0625.yaml b/data/excluded/GO-2022-0625.yaml
diff --git a/data/excluded/GO-2022-0626.yaml b/data/excluded/GO-2022-0626.yaml
diff --git a/data/excluded/GO-2022-0630.yaml b/data/excluded/GO-2022-0630.yaml
diff --git a/data/excluded/GO-2022-0631.yaml b/data/excluded/GO-2022-0631.yaml
diff --git a/data/excluded/GO-2022-0632.yaml b/data/excluded/GO-2022-0632.yaml
diff --git a/data/excluded/GO-2022-0634.yaml b/data/excluded/GO-2022-0634.yaml
diff --git a/data/excluded/GO-2022-0636.yaml b/data/excluded/GO-2022-0636.yaml
diff --git a/data/excluded/GO-2022-0638.yaml b/data/excluded/GO-2022-0638.yaml
diff --git a/data/excluded/GO-2022-0640.yaml b/data/excluded/GO-2022-0640.yaml
diff --git a/data/excluded/GO-2022-0641.yaml b/data/excluded/GO-2022-0641.yaml
diff --git a/data/osv/GO-2022-0609.json b/data/osv/GO-2022-0609.json
@@ -0,0 +1,60 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2022-0609",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2022-0905",
+    "GHSA-jr9c-h74f-2v28"
+  ],
+  "summary": "Gitea Missing Authorization vulnerability in code.gitea.io/gitea",
+  "details": "Gitea Missing Authorization vulnerability in code.gitea.io/gitea",
+  "affected": [
+    {
+      "package": {
+        "name": "code.gitea.io/gitea",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.16.4"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {}
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-jr9c-h74f-2v28"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0905"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/go-gitea/gitea/commit/1314f38b59748397b3429fb9bc9f9d6bac85d2f2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/go-gitea/gitea/commit/3e5c844a7758fa29126d201f4f98bf21bca6d314"
+    },
+    {
+      "type": "WEB",
+      "url": "https://huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2022-0609",
+    "review_status": "UNREVIEWED"
+  }
+}
diff --git a/data/osv/GO-2022-0611.json b/data/osv/GO-2022-0611.json
@@ -0,0 +1,62 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2022-0611",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2021-43998",
+    "GHSA-pfmw-vj74-ph8g"
+  ],
+  "summary": "HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault",
+  "details": "HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault",
+  "affected": [
+    {
+      "package": {
+        "name": "github.com/hashicorp/vault",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0.11.0"
+            },
+            {
+              "fixed": "1.7.6"
+            },
+            {
+              "introduced": "1.8.0"
+            },
+            {
+              "fixed": "1.8.5"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {}
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-pfmw-vj74-ph8g"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43998"
+    },
+    {
+      "type": "WEB",
+      "url": "https://discuss.hashicorp.com/t/hcsec-2021-30-vaults-templated-acl-policies-matched-first-created-alias-per-entity-and-auth-backend/32132"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.gentoo.org/glsa/202207-01"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2022-0611",
+    "review_status": "UNREVIEWED"
+  }
+}
diff --git a/data/osv/GO-2022-0612.json b/data/osv/GO-2022-0612.json
@@ -0,0 +1,68 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2022-0612",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2022-1928",
+    "GHSA-ph3w-2843-72mx"
+  ],
+  "summary": "Stored Cross-site Scripting in gitea in code.gitea.io/gitea",
+  "details": "Stored Cross-site Scripting in gitea in code.gitea.io/gitea",
+  "affected": [
+    {
+      "package": {
+        "name": "code.gitea.io/gitea",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.16.9"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {}
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-ph3w-2843-72mx"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1928"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/go-gitea/gitea"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/go-gitea/gitea/commit/65e0688a5c9dacad50e71024b7529fdf0e3c2e9c"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/go-gitea/gitea/pull/19825"
+    },
+    {
+      "type": "WEB",
+      "url": "https://huntr.dev/bounties/6336ec42-5c4d-4f61-ae38-2bb539f433d2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.gentoo.org/glsa/202210-14"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2022-0612",
+    "review_status": "UNREVIEWED"
+  }
+}