x/vulndb: potential Go vuln in knative.dev/eventing-gitlab: GHSA-99jv-8292-2hpm

[GoVulnBot]

In GitHub Security Advisory GHSA-99jv-8292-2hpm, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
knative.dev/eventing-gitlab		<= 0.39.0

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: knative.dev/eventing-gitlab
      versions:
        - {}
      vulnerable_at: 0.39.1
      packages:
        - package: knative.dev/eventing-gitlab
summary: |-
    eventing-gitlab vulnerable to denial of service, caused by improper enforcement
    of the timeout on individual read operations
ghsas:
    - GHSA-99jv-8292-2hpm
references:
    - advisory: https://github.com/knative-extensions/eventing-gitlab/security/advisories/GHSA-99jv-8292-2hpm
    - fix: https://github.com/knative-extensions/eventing-gitlab/commit/463fcb36ac31cdac34eda0e900b64039d6d30b36
    - fix: https://github.com/knative-extensions/eventing-gitlab/commit/db76c668aa47890e7fe73c9df3135da292cfd9ec
    - advisory: https://github.com/advisories/GHSA-99jv-8292-2hpm

[gopherbot]

Change https://go.dev/cl/549240 mentions this issue: data/excluded: batch add 3 excluded reports

[gopherbot]

Change https://go.dev/cl/592764 mentions this issue: data/reports: unexclude 31 reports