data/reports: unexclude 20 reports (11)

  - data/reports/GO-2023-2097.yaml
  - data/reports/GO-2023-2109.yaml
  - data/reports/GO-2023-2121.yaml
  - data/reports/GO-2023-2125.yaml
  - data/reports/GO-2023-2134.yaml
  - data/reports/GO-2023-2135.yaml
  - data/reports/GO-2023-2136.yaml
  - data/reports/GO-2023-2156.yaml
  - data/reports/GO-2023-2159.yaml
  - data/reports/GO-2023-2166.yaml
  - data/reports/GO-2023-2170.yaml
  - data/reports/GO-2023-2176.yaml
  - data/reports/GO-2023-2188.yaml
  - data/reports/GO-2023-2329.yaml
  - data/reports/GO-2023-2330.yaml
  - data/reports/GO-2023-2332.yaml
  - data/reports/GO-2023-2335.yaml
  - data/reports/GO-2023-2336.yaml
  - data/reports/GO-2023-2337.yaml
  - data/reports/GO-2023-2338.yaml

Updates #2097
Updates #2109
Updates #2121
Updates #2125
Updates #2134
Updates #2135
Updates #2136
Updates #2156
Updates #2159
Updates #2166
Updates #2170
Updates #2176
Updates #2188
Updates #2329
Updates #2330
Updates #2332
Updates #2335
Updates #2336
Updates #2337
Updates #2338

Change-Id: I5fc55dacf7cdfd2512c00f07abfc0debfde9263f
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/606792
LUCI-TryBot-Result: Go LUCI <[email protected]>
Commit-Queue: Tatiana Bradley <[email protected]>
Auto-Submit: Tatiana Bradley <[email protected]>
Reviewed-by: Damien Neil <[email protected]>

Author: tatianab

data/excluded/GO-2023-2097.yaml

@@ -0,0 +1,60 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2023-2097",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2023-43809",
+    "GHSA-mc97-99j4-vm2v"
+  ],
+  "summary": "Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled in github.com/charmbracelet/soft-serve",
+  "details": "Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled in github.com/charmbracelet/soft-serve",
+  "affected": [
+    {
+      "package": {
+        "name": "github.com/charmbracelet/soft-serve",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.6.2"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {}
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-mc97-99j4-vm2v"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43809"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/charmbracelet/soft-serve/commit/407c4ec72d1006cee1ff8c1775e5bcc091c2bc89"
+    },
+    {
+      "type": "REPORT",
+      "url": "https://github.com/charmbracelet/soft-serve/issues/389"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/charmbracelet/soft-serve/releases/tag/v0.6.2"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2023-2097",
+    "review_status": "UNREVIEWED"
+  }
+}

data/excluded/GO-2023-2109.yaml

@@ -0,0 +1,76 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2023-2109",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2023-20902",
+    "GHSA-mq6f-5xh5-hgcf"
+  ],
+  "summary": "Harbor timing attack risk in github.com/goharbor/harbor",
+  "details": "Harbor timing attack risk in github.com/goharbor/harbor",
+  "affected": [
+    {
+      "package": {
+        "name": "github.com/goharbor/harbor",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.10.18"
+            },
+            {
+              "introduced": "2.0.0+incompatible"
+            },
+            {
+              "fixed": "2.7.3+incompatible"
+            },
+            {
+              "introduced": "2.8.0+incompatible"
+            },
+            {
+              "fixed": "2.8.3+incompatible"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {}
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/goharbor/harbor/security/advisories/GHSA-mq6f-5xh5-hgcf"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20902"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/goharbor/harbor/blob/aaea068cceb4063ab89313d9785f2b40f35b0d63/src/jobservice/api/authenticator.go#L69-L69"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/goharbor/harbor/releases/tag/v1.10.18"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/goharbor/harbor/releases/tag/v2.7.3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/goharbor/harbor/releases/tag/v2.8.3"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2023-2109",
+    "review_status": "UNREVIEWED"
+  }
+}

data/excluded/GO-2023-2121.yaml

@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2023-2121",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2023-45810",
+    "GHSA-hr4f-6jh8-f2vq"
+  ],
+  "summary": "OpenFGA DoS vulnerability in github.com/openfga/openfga",
+  "details": "OpenFGA DoS vulnerability in github.com/openfga/openfga",
+  "affected": [
+    {
+      "package": {
+        "name": "github.com/openfga/openfga",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.3.4"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {}
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/openfga/openfga/security/advisories/GHSA-hr4f-6jh8-f2vq"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45810"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/openfga/openfga/releases/tag/v1.3.4"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2023-2121",
+    "review_status": "UNREVIEWED"
+  }
+}