data/reports: update GO-2023-1840.yaml

Updates #1840

Change-Id: I26cf944bbf0f8f29dd2d413c3811e29088c40f43
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/501536
Reviewed-by: Damien Neil <[email protected]>
Run-TryBot: Tatiana Bradley <[email protected]>
TryBot-Result: Gopher Robot <[email protected]>

Author: tatianab

data/cve/v5/GO-2023-1840.json

@@ -17,10 +17,10 @@
       ],
       "affected": [
         {
-          "vendor": "Go toolchain",
-          "product": "cmd/go",
+          "vendor": "Go standard library",
+          "product": "runtime",
           "collectionURL": "https://pkg.go.dev",
-          "packageName": "cmd/go",
+          "packageName": "runtime",
           "versions": [
             {
               "version": "0",

data/osv/GO-2023-1840.json

@@ -10,7 +10,7 @@
   "affected": [
     {
       "package": {
-        "name": "toolchain",
+        "name": "stdlib",
         "ecosystem": "Go"
       },
       "ranges": [
@@ -35,7 +35,7 @@
       "ecosystem_specific": {
         "imports": [
           {
-            "path": "cmd/go"
+            "path": "runtime"
           }
         ]
       }

data/reports/GO-2023-1840.yaml

@@ -1,14 +1,14 @@
 id: GO-2023-1840
 modules:
-    - module: cmd
+    - module: std
       versions:
         - fixed: 1.19.10
         - introduced: 1.20.0-0
           fixed: 1.20.5
       vulnerable_at: 1.20.4
       packages:
-        - package: cmd/go
-summary: Unsafe behavior in setuid/setgid binaries in Go runtime
+        - package: runtime
+summary: Unsafe behavior in setuid/setgid binaries in runtime
 description: |
     On Unix platforms, the Go runtime does not behave differently when a binary
     is run with the setuid/setgid bits. This can be dangerous in certain