data/excluded: reclassify GO-2022-0368.yaml as dependent

GO-2022-0368 is dependent on GO-2020-0008. Remove the CVE, which actually
refers to the upstream vuln, and re-classify as DEPENDENT_VULNERABILITY.

Aliases: GHSA-gv9j-4w24-q7vx

Updates #368, #8

Change-Id: Ide59a0ef1c529d66fb5511cafeea9559b372ca07
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/451280
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>

data/excluded/GO-2022-0368.yaml

@@ -1,7 +1,5 @@
 excluded: EFFECTIVELY_PRIVATE
 modules:
-  - module: github.com/coredns/coredns
-cves:
-  - CVE-2019-19794
+    - module: github.com/coredns/coredns
 ghsas:
-  - GHSA-gv9j-4w24-q7vx
+    - GHSA-gv9j-4w24-q7vx