x/vulndb: potential Go vuln in github.com/cubefs/cubefs: GHSA-9337-8c6c-c2xg

[GoVulnBot]

In GitHub Security Advisory GHSA-9337-8c6c-c2xg, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/cubefs/cubefs		<= 3.2.1

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: github.com/cubefs/cubefs
    versions:
      - {}
    packages:
      - package: github.com/cubefs/cubefs
summary: CubeFS allows Kubernetes cluster-level privilege escalation
description: CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation.
    This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets,
    including the admin secret.
cves:
  - CVE-2023-30512
ghsas:
  - GHSA-9337-8c6c-c2xg
references:
  - web: https://nvd.nist.gov/vuln/detail/CVE-2023-30512
  - report: https://github.com/cubefs/cubefs/issues/1882
  - advisory: https://github.com/advisories/GHSA-9337-8c6c-c2xg

[gopherbot]

Change https://go.dev/cl/485916 mentions this issue: data/excluded: batch add GO-2023-1729, GO-2023-1728, GO-2023-1727, GO-2023-1723, GO-2023-1721, GO-2023-1720

[gopherbot]

Change https://go.dev/cl/592760 mentions this issue: data/reports: unexclude 75 reports