Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

x/vulndb: potential Go vuln in k8s.io/kubernetes: CVE-2020-8554, GHSA-j9wf-vvm6-4r9w #940

Closed
julieqiu opened this issue Aug 12, 2022 · 2 comments
Labels
excluded: EFFECTIVELY_PRIVATE This vulnerability exists in a package can be imported, but isn't meant to be outside that module.

Comments

@julieqiu
Copy link
Member

No description provided.

@julieqiu julieqiu added the excluded: NOT_IMPORTABLE This vulnerability only exists in a binary and is not importable. label Aug 12, 2022
@tatianab tatianab added excluded: EFFECTIVELY_PRIVATE This vulnerability exists in a package can be imported, but isn't meant to be outside that module. and removed excluded: NOT_IMPORTABLE This vulnerability only exists in a binary and is not importable. labels Nov 18, 2022
@gopherbot
Copy link
Contributor

Change https://go.dev/cl/451277 mentions this issue: data/excluded: merge GO-2022-0940.yaml and GO-2022-1093

gopherbot pushed a commit that referenced this issue Nov 18, 2022
Merge duplicate reports.

Aliases: CVE-2020-8554, GHSA-j9wf-vvm6-4r9w

Updates #940, #1093

Change-Id: I01f6c3b34aca829f460d7c82bf868a05e623d1ea
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/451277
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
@gopherbot
Copy link
Contributor

Change https://go.dev/cl/592773 mentions this issue: data/reports: unexclude 50 reports

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
excluded: EFFECTIVELY_PRIVATE This vulnerability exists in a package can be imported, but isn't meant to be outside that module.
Projects
None yet
Development

No branches or pull requests

3 participants