x/vulndb: potential Go vuln in github.com/kumahq/kuma: GHSA-9wmc-rg4h-28wv

[GoVulnBot]

In GitHub Security Advisory GHSA-9wmc-rg4h-28wv, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/kumahq/kuma	2.0.8	< 2.0.8

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/kumahq/kuma
      versions:
        - fixed: 2.0.8
      packages:
        - package: github.com/kumahq/kuma
    - module: github.com/kumahq/kuma
      versions:
        - introduced: 2.1.0
          fixed: 2.1.8
      packages:
        - package: github.com/kumahq/kuma
    - module: github.com/kumahq/kuma
      versions:
        - introduced: 2.2.0
          fixed: 2.2.4
      packages:
        - package: github.com/kumahq/kuma
    - module: github.com/kumahq/kuma
      versions:
        - introduced: 2.3.0
          fixed: 2.3.3
      packages:
        - package: github.com/kumahq/kuma
    - module: github.com/kumahq/kuma
      versions:
        - introduced: 2.4.0
          fixed: 2.4.3
      packages:
        - package: github.com/kumahq/kuma
summary: github.com/kumahq/kuma affected by CVE-2023-44487
ghsas:
    - GHSA-9wmc-rg4h-28wv
references:
    - advisory: https://github.com/kumahq/kuma/security/advisories/GHSA-9wmc-rg4h-28wv
    - fix: https://github.com/kumahq/kuma/pull/8001
    - fix: https://github.com/kumahq/kuma/pull/8023
    - fix: https://github.com/kumahq/kuma/pull/8034
    - advisory: https://github.com/advisories/GHSA-9wmc-rg4h-28wv

[tatianab]

Dependent on #2102

[gopherbot]

Change https://go.dev/cl/537395 mentions this issue: data/excluded: batch add 18 excluded reports