x/vulndb: potential Go vuln in github.com/edgelesssys/marblerun: GHSA-x5r5-2qrx-rqj8

[GoVulnBot]

In GitHub Security Advisory GHSA-x5r5-2qrx-rqj8, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/edgelesssys/marblerun	1.4.1	< 1.4.1

Cross references:

• Module github.com/edgelesssys/marblerun appears in issue x/vulndb: potential Go vuln in github.com/edgelesssys/marblerun: GHSA-j3rq-4xjw-xg63 #2378 EFFECTIVELY_PRIVATE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/edgelesssys/marblerun
      versions:
        - fixed: 1.4.1
      vulnerable_at: 1.4.0
      packages:
        - package: github.com/edgelesssys/marblerun
summary: |-
    Transparent TLS may not be applied to Marbles with certain manifest
    configurations
ghsas:
    - GHSA-x5r5-2qrx-rqj8
references:
    - advisory: https://github.com/edgelesssys/marblerun/security/advisories/GHSA-x5r5-2qrx-rqj8
    - fix: https://github.com/edgelesssys/marblerun/commit/0330ced092253613a07abe7b330ff6ac6fc6e9c6
    - fix: https://github.com/edgelesssys/marblerun/commit/e5bcfe32883d22f3d87ffc9400f9fdb5ecbe3200
    - web: https://github.com/edgelesssys/marblerun/releases/tag/v1.4.1
    - advisory: https://github.com/advisories/GHSA-x5r5-2qrx-rqj8

[gopherbot]

Change https://go.dev/cl/568555 mentions this issue: data/reports: add GO-2024-2583.yaml