data/reports: update GO-2024-3166

- data/reports/GO-2024-3166.yaml

Updates golang/vulndb#3166

Change-Id: If53fa8292b261b3a0867d15f7a52fed22097eca6
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/620155
Auto-Submit: Maceo Thompson <maceothompson@google.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
This commit is contained in:
Maceo Thompson 2024-10-14 14:52:12 -04:00 коммит произвёл Gopher Robot
Родитель 1ac23c52cd
Коммит 5691b9d500
2 изменённых файлов: 0 добавлений и 19 удалений

Просмотреть файл

@ -10,23 +10,6 @@
"summary": "Incorrect delegation lookups can make go-tuf download the wrong artifact in github.com/theupdateframework/go-tuf",
"details": "Incorrect delegation lookups can make go-tuf download the wrong artifact in github.com/theupdateframework/go-tuf",
"affected": [
{
"package": {
"name": "github.com/theupdateframework/go-tuf",
"ecosystem": "Go"
},
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "0"
}
]
}
],
"ecosystem_specific": {}
},
{
"package": {
"name": "github.com/theupdateframework/go-tuf/v2",

Просмотреть файл

@ -1,7 +1,5 @@
id: GO-2024-3166
modules:
- module: github.com/theupdateframework/go-tuf
vulnerable_at: 0.7.0
- module: github.com/theupdateframework/go-tuf/v2
versions:
- fixed: 2.0.1