x/vulndb: potential Go vuln in github.com/liamg/gitjacker: GHSA-4j5x-f394-xx79

[GoVulnBot]

In GitHub Security Advisory GHSA-4j5x-f394-xx79, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/liamg/gitjacker	0.1.0	< 0.1.0

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/liamg/gitjacker
      versions:
        - fixed: 0.1.0
      vulnerable_at: 0.0.3
      packages:
        - package: github.com/liamg/gitjacker
summary: gitjacker arbitrary code execution
description: |-
    gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a
    crafted .git directory because of directory traversal.
cves:
    - CVE-2021-29417
ghsas:
    - GHSA-4j5x-f394-xx79
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2021-29417
    - web: https://github.com/liamg/gitjacker/compare/v0.0.3...v0.1.0
    - web: https://github.com/liamg/gitjacker/releases/tag/v0.1.0
    - advisory: https://vuln.ryotak.me/advisories/5
    - advisory: https://github.com/advisories/GHSA-4j5x-f394-xx79

[gopherbot]

Change https://go.dev/cl/513195 mentions this issue: data/excluded: batch add 26 excluded reports

[gopherbot]

Change https://go.dev/cl/592761 mentions this issue: data/reports: unexclude 75 reports

[gopherbot]

Change https://go.dev/cl/606787 mentions this issue: data/reports: unexclude 20 reports (7)