x/vulndb: potential Go vuln in fortio.org/proxy: GHSA-x477-fq37-q5wr

[GoVulnBot]

In GitHub Security Advisory GHSA-x477-fq37-q5wr, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
fortio.org/proxy	1.6.1	>= 1.5.0, < 1.6.1

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: fortio.org/proxy
    versions:
      - introduced: 1.5.0
        fixed: 1.6.1
    packages:
      - package: fortio.org/proxy
description: |-
    ### Impact
    version 1.5.0 and 1.6.0 when using the new `debug-host` feature could expose unnecessary information about the host

    ### Patches
    Use 1.6.1 or newer

    ### Workarounds
    Downgrade to 1.4.0 or set `debug-host` to empty

    ### References
    https://github.com/fortio/proxy/pull/38

    Q&A https://github.com/fortio/proxy/discussions
ghsas:
  - GHSA-x477-fq37-q5wr

[gopherbot]

Change https://go.dev/cl/466475 mentions this issue: data/excluded: batch add GO-2023-1527, GO-2023-1524, GO-2023-1516, GO-2023-1514, GO-2023-1513, GO-2023-1511, GO-2023-1523, GO-2023-1522, GO-2023-1520, GO-2023-1512

[gopherbot]

Change https://go.dev/cl/592759 mentions this issue: data/reports: unexclude 75 reports

[gopherbot]

Change https://go.dev/cl/606782 mentions this issue: data/reports: unexclude 20 reports (2)