Skip to content

Commit 5ee8669

Browse files
tatianabgopherbot
tatianab
authored and
gopherbot
committed
data/reports: unexclude 15 reports (12)
 - data/reports/GO-2023-2340.yaml - data/reports/GO-2023-2341.yaml - data/reports/GO-2023-2344.yaml - data/reports/GO-2023-2351.yaml - data/reports/GO-2023-2355.yaml - data/reports/GO-2023-2376.yaml - data/reports/GO-2023-2377.yaml - data/reports/GO-2023-2378.yaml - data/reports/GO-2023-2381.yaml - data/reports/GO-2023-2388.yaml - data/reports/GO-2023-2397.yaml - data/reports/GO-2023-2398.yaml - data/reports/GO-2023-2414.yaml - data/reports/GO-2023-2422.yaml - data/reports/GO-2023-2426.yaml Updates #2340 Updates #2341 Updates #2344 Updates #2351 Updates #2355 Updates #2376 Updates #2377 Updates #2378 Updates #2381 Updates #2388 Updates #2397 Updates #2398 Updates #2414 Updates #2422 Updates #2426 Change-Id: I279f769375f27873ced76b136c88665f610ac68c Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/606793 Auto-Submit: Tatiana Bradley <tatianabradley@google.com> Commit-Queue: Tatiana Bradley <tatianabradley@google.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Damien Neil <dneil@google.com>
1 parent aa5cc8a commit 5ee8669

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

45 files changed

+1368
-112
lines changed

‎data/excluded/GO-2023-2340.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2341.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2344.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2351.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2355.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2376.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2377.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2378.yaml

-6
This file was deleted.

‎data/excluded/GO-2023-2381.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2388.yaml

-6
This file was deleted.

‎data/excluded/GO-2023-2397.yaml

-6
This file was deleted.

‎data/excluded/GO-2023-2398.yaml

-6
This file was deleted.

‎data/excluded/GO-2023-2414.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2422.yaml

-8
This file was deleted.

‎data/excluded/GO-2023-2426.yaml

-8
This file was deleted.

‎data/osv/GO-2023-2340.json

+52
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2023-2340",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2023-47630",
8+
"GHSA-3hfq-cx9j-923w"
9+
],
10+
"summary": "Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno",
11+
"details": "Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/kyverno/kyverno",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "1.10.5"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
}
33+
],
34+
"references": [
35+
{
36+
"type": "ADVISORY",
37+
"url": "https://github.com/kyverno/kyverno/security/advisories/GHSA-3hfq-cx9j-923w"
38+
},
39+
{
40+
"type": "ADVISORY",
41+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47630"
42+
},
43+
{
44+
"type": "WEB",
45+
"url": "https://github.com/kyverno/kyverno/releases/tag/v1.11.0"
46+
}
47+
],
48+
"database_specific": {
49+
"url": "https://pkg.go.dev/vuln/GO-2023-2340",
50+
"review_status": "UNREVIEWED"
51+
}
52+
}

‎data/osv/GO-2023-2341.json

+110
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,110 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2023-2341",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2023-5528",
8+
"GHSA-hq6q-c2x6-hmch"
9+
],
10+
"summary": "Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes",
11+
"details": "Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "k8s.io/kubernetes",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "1.25.16"
27+
},
28+
{
29+
"introduced": "1.26.0"
30+
},
31+
{
32+
"fixed": "1.26.11"
33+
},
34+
{
35+
"introduced": "1.27.0"
36+
},
37+
{
38+
"fixed": "1.27.8"
39+
},
40+
{
41+
"introduced": "1.28.0"
42+
},
43+
{
44+
"fixed": "1.28.4"
45+
}
46+
]
47+
}
48+
],
49+
"ecosystem_specific": {}
50+
}
51+
],
52+
"references": [
53+
{
54+
"type": "ADVISORY",
55+
"url": "https://github.com/advisories/GHSA-hq6q-c2x6-hmch"
56+
},
57+
{
58+
"type": "ADVISORY",
59+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5528"
60+
},
61+
{
62+
"type": "WEB",
63+
"url": "https://github.com/kubernetes/kubernetes/issues/121879"
64+
},
65+
{
66+
"type": "WEB",
67+
"url": "https://github.com/kubernetes/kubernetes/pull/121881"
68+
},
69+
{
70+
"type": "WEB",
71+
"url": "https://github.com/kubernetes/kubernetes/pull/121882"
72+
},
73+
{
74+
"type": "WEB",
75+
"url": "https://github.com/kubernetes/kubernetes/pull/121883"
76+
},
77+
{
78+
"type": "WEB",
79+
"url": "https://github.com/kubernetes/kubernetes/pull/121884"
80+
},
81+
{
82+
"type": "WEB",
83+
"url": "https://github.com/kubernetes/kubernetes/pull/121885"
84+
},
85+
{
86+
"type": "WEB",
87+
"url": "https://groups.google.com/g/kubernetes-security-announce/c/SL_d4NR8pzA"
88+
},
89+
{
90+
"type": "WEB",
91+
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JH444PWZBINXLLFV7XLIJIZJHSK6UEZ"
92+
},
93+
{
94+
"type": "WEB",
95+
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4XZIX727JIKF5RQW7RVVBLWXBCDIBJA7"
96+
},
97+
{
98+
"type": "WEB",
99+
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MPGMITSZXUCAVO7Q75675SOLXC2XXU4"
100+
},
101+
{
102+
"type": "WEB",
103+
"url": "https://security.netapp.com/advisory/ntap-20240119-0009"
104+
}
105+
],
106+
"database_specific": {
107+
"url": "https://pkg.go.dev/vuln/GO-2023-2341",
108+
"review_status": "UNREVIEWED"
109+
}
110+
}

‎data/osv/GO-2023-2344.json

+81
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,81 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2023-2344",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2023-2980",
8+
"GHSA-j327-c69h-4gh8"
9+
],
10+
"summary": "Abstrium Pydio Cells Resource Injection vulnerability in github.com/pydio/cells",
11+
"details": "Abstrium Pydio Cells Resource Injection vulnerability in github.com/pydio/cells",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/pydio/cells",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
}
25+
]
26+
}
27+
],
28+
"ecosystem_specific": {}
29+
},
30+
{
31+
"package": {
32+
"name": "github.com/pydio/cells/v4",
33+
"ecosystem": "Go"
34+
},
35+
"ranges": [
36+
{
37+
"type": "SEMVER",
38+
"events": [
39+
{
40+
"introduced": "0"
41+
},
42+
{
43+
"fixed": "4.2.1"
44+
}
45+
]
46+
}
47+
],
48+
"ecosystem_specific": {}
49+
}
50+
],
51+
"references": [
52+
{
53+
"type": "ADVISORY",
54+
"url": "https://github.com/advisories/GHSA-j327-c69h-4gh8"
55+
},
56+
{
57+
"type": "ADVISORY",
58+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2980"
59+
},
60+
{
61+
"type": "WEB",
62+
"url": "https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be"
63+
},
64+
{
65+
"type": "WEB",
66+
"url": "https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421"
67+
},
68+
{
69+
"type": "WEB",
70+
"url": "https://vuldb.com/?ctiid.230212"
71+
},
72+
{
73+
"type": "WEB",
74+
"url": "https://vuldb.com/?id.230212"
75+
}
76+
],
77+
"database_specific": {
78+
"url": "https://pkg.go.dev/vuln/GO-2023-2344",
79+
"review_status": "UNREVIEWED"
80+
}
81+
}

0 commit comments

Comments
 (0)