x/vulndb: potential Go vuln in github.com/clastix/capsule-proxy: GHSA-fpvw-6m5v-hqfp

[GoVulnBot]

In GitHub Security Advisory GHSA-fpvw-6m5v-hqfp, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/clastix/capsule-proxy	0.4.6	<= 0.4.5

Cross references:

• Module github.com/clastix/capsule-proxy appears in issue x/vulndb: potential Go vuln in github.com/clastix/capsule-proxy: CVE-2022-23652 #329 EFFECTIVELY_PRIVATE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/clastix/capsule-proxy
      versions:
        - introduced: TODO (earliest fixed "0.4.6", vuln range "<= 0.4.5")
      packages:
        - package: github.com/clastix/capsule-proxy
    - module: github.com/clastix/capsule-proxy
      versions:
        - introduced: TODO (earliest fixed "0.4.6", vuln range "<= 0.4.5")
      packages:
        - package: github.com/projectcapsule/capsule-proxy
summary: Capsule Proxy Authentication bypass using an empty token
cves:
    - CVE-2023-48312
ghsas:
    - GHSA-fpvw-6m5v-hqfp
references:
    - advisory: https://github.com/projectcapsule/capsule-proxy/security/advisories/GHSA-fpvw-6m5v-hqfp
    - advisory: https://github.com/advisories/GHSA-fpvw-6m5v-hqfp

[gopherbot]

Change https://go.dev/cl/546035 mentions this issue: data/excluded: batch add 6 excluded reports

[gopherbot]

Change https://go.dev/cl/592763 mentions this issue: data/reports: unexclude 75 reports

[gopherbot]

Change https://go.dev/cl/606793 mentions this issue: data/reports: unexclude 15 reports (12)