x/vulndb: potential Go vuln in github.com/openshift/assisted-installer: GHSA-g8xm-p2h4-v6jp

[GoVulnBot]

In GitHub Security Advisory GHSA-g8xm-p2h4-v6jp, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/openshift/assisted-installer	1.0.25.1	< 1.0.25.1

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: github.com/openshift/assisted-installer
    versions:
      - fixed: 1.0.25.1
    packages:
      - package: github.com/openshift/assisted-installer
summary: OpenShift Assisted Installer leaks image pull secrets as plaintext in installation
    logs
description: A vulnerability was found in OpenShift Assisted Installer. During generation
    of the Discovery ISO, image pull secrets were leaked as plaintext in the installation
    logs. An authenticated user could exploit this by re-using the image pull secret
    to pull container images from the registry as the associated user.
cves:
  - CVE-2021-3684
ghsas:
  - GHSA-g8xm-p2h4-v6jp
references:
  - web: https://nvd.nist.gov/vuln/detail/CVE-2021-3684
  - fix: https://github.com/openshift/assisted-installer/commit/2403dad3795406f2c5d923af0894e07bc8b0bdc4
  - fix: https://github.com/openshift/assisted-installer/commit/f3800cfa3d64ce6dcd6f7b73f0578bb99bfdaf7a
  - web: https://bugzilla.redhat.com/show_bug.cgi?id=1985962
  - advisory: https://github.com/advisories/GHSA-g8xm-p2h4-v6jp

[gopherbot]

Change https://go.dev/cl/480716 mentions this issue: data/excluded: batch add GO-2023-1683, GO-2023-1682, GO-2023-1679, GO-2023-1676, GO-2023-1680

[gopherbot]

Change https://go.dev/cl/592760 mentions this issue: data/reports: unexclude 75 reports