data/excluded: reclassify GO-2022-0368.yaml as dependent

GO-2022-0368 is dependent on GO-2020-0008. Remove the CVE, which actually
refers to the upstream vuln, and re-classify as DEPENDENT_VULNERABILITY.

Aliases: GHSA-gv9j-4w24-q7vx

Updates #368, #8

Change-Id: Ide59a0ef1c529d66fb5511cafeea9559b372ca07
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/451280
Run-TryBot: Tatiana Bradley <[email protected]>
Reviewed-by: Damien Neil <[email protected]>
TryBot-Result: Gopher Robot <[email protected]>
Reviewed-by: Tatiana Bradley <[email protected]>

Author: tatianab

data/excluded/GO-2022-0368.yaml

@@ -1,7 +1,5 @@
 excluded: EFFECTIVELY_PRIVATE
 modules:
-  - module: github.com/coredns/coredns
-cves:
-  - CVE-2019-19794
+    - module: github.com/coredns/coredns
 ghsas:
-  - GHSA-gv9j-4w24-q7vx
+    - GHSA-gv9j-4w24-q7vx