[vulndb] data/reports: add 3 reports

5 views
Skip to first unread message

Ian Alexander (Gerrit)

unread,
Jul 21, 2026, 9:28:07 PMJul 21
to goph...@pubsubhelper.golang.org, Nicholas Husin, golang-co...@googlegroups.com
Attention needed from Nicholas Husin

Ian Alexander voted Commit-Queue+1

Commit-Queue+1
Open in Gerrit

Related details

Attention is currently required from:
  • Nicholas Husin
Submit Requirements:
  • requirement is not satisfiedCode-Review
  • requirement is not satisfiedLUCI-Pass
  • requirement satisfiedNo-Unresolved-Comments
  • requirement is not satisfiedReview-Enforcement
  • requirement is not satisfiedTryBots-Pass
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: comment
Gerrit-Project: vulndb
Gerrit-Branch: master
Gerrit-Change-Id: I54efb3dc5b3b9b906b612d17dd12e18732a80cdf
Gerrit-Change-Number: 803980
Gerrit-PatchSet: 1
Gerrit-Owner: Ian Alexander <ji...@google.com>
Gerrit-Reviewer: Ian Alexander <ji...@google.com>
Gerrit-Reviewer: Nicholas Husin <n...@golang.org>
Gerrit-Attention: Nicholas Husin <n...@golang.org>
Gerrit-Comment-Date: Wed, 22 Jul 2026 01:28:03 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: Yes
unsatisfied_requirement
satisfied_requirement
open
diffy

Nicholas Husin (Gerrit)

unread,
Jul 22, 2026, 1:52:28 PMJul 22
to Ian Alexander, goph...@pubsubhelper.golang.org, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com
Attention needed from Ian Alexander

Nicholas Husin voted Code-Review+2

Code-Review+2
Open in Gerrit

Related details

Attention is currently required from:
  • Ian Alexander
Submit Requirements:
  • requirement satisfiedCode-Review
  • requirement satisfiedNo-Unresolved-Comments
  • requirement is not satisfiedReview-Enforcement
  • requirement satisfiedTryBots-Pass
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: comment
Gerrit-Project: vulndb
Gerrit-Branch: master
Gerrit-Change-Id: I54efb3dc5b3b9b906b612d17dd12e18732a80cdf
Gerrit-Change-Number: 803980
Gerrit-PatchSet: 1
Gerrit-Owner: Ian Alexander <ji...@google.com>
Gerrit-Reviewer: Ian Alexander <ji...@google.com>
Gerrit-Reviewer: Nicholas Husin <n...@golang.org>
Gerrit-Attention: Ian Alexander <ji...@google.com>
Gerrit-Comment-Date: Wed, 22 Jul 2026 17:52:22 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: Yes
satisfied_requirement
unsatisfied_requirement
open
diffy

Nicholas Husin (Gerrit)

unread,
Jul 22, 2026, 1:52:41 PMJul 22
to Ian Alexander, goph...@pubsubhelper.golang.org, Nicholas Husin, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com
Attention needed from Ian Alexander

Nicholas Husin voted Code-Review+1

Code-Review+1
Open in Gerrit

Related details

Attention is currently required from:
  • Ian Alexander
Submit Requirements:
    • requirement satisfiedCode-Review
    • requirement satisfiedNo-Unresolved-Comments
    • requirement satisfiedReview-Enforcement
    • requirement satisfiedTryBots-Pass
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: vulndb
    Gerrit-Branch: master
    Gerrit-Change-Id: I54efb3dc5b3b9b906b612d17dd12e18732a80cdf
    Gerrit-Change-Number: 803980
    Gerrit-PatchSet: 1
    Gerrit-Owner: Ian Alexander <ji...@google.com>
    Gerrit-Reviewer: Ian Alexander <ji...@google.com>
    Gerrit-Reviewer: Nicholas Husin <hu...@google.com>
    Gerrit-Comment-Date: Wed, 22 Jul 2026 17:52:34 +0000
    Gerrit-HasComments: No
    Gerrit-Has-Labels: Yes
    satisfied_requirement
    open
    diffy

    Ian Alexander (Gerrit)

    unread,
    Jul 22, 2026, 4:36:59 PMJul 22
    to goph...@pubsubhelper.golang.org, golang-...@googlegroups.com, Nicholas Husin, Nicholas Husin, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com

    Ian Alexander submitted the change

    Change information

    Commit message:
    data/reports: add 3 reports

    - data/reports/GO-2026-5102.yaml
    - data/reports/GO-2026-6010.yaml
    - data/reports/GO-2026-6013.yaml

    Fixes golang/vulndb#5102
    Fixes golang/vulndb#6010
    Fixes golang/vulndb#6013
    Change-Id: I54efb3dc5b3b9b906b612d17dd12e18732a80cdf
    Reviewed-by: Nicholas Husin <n...@golang.org>
    Reviewed-by: Nicholas Husin <hu...@google.com>
    Files:
    • A data/osv/GO-2026-5102.json
    • A data/osv/GO-2026-6010.json
    • A data/osv/GO-2026-6013.json
    • A data/reports/GO-2026-5102.yaml
    • A data/reports/GO-2026-6010.yaml
    • A data/reports/GO-2026-6013.yaml
    Change size: L
    Delta: 6 files changed, 457 insertions(+), 0 deletions(-)
    Branch: refs/heads/master
    Submit Requirements:
    Open in Gerrit
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: merged
    Gerrit-Project: vulndb
    Gerrit-Branch: master
    Gerrit-Change-Id: I54efb3dc5b3b9b906b612d17dd12e18732a80cdf
    Gerrit-Change-Number: 803980
    Gerrit-PatchSet: 2
    open
    diffy
    satisfied_requirement

    Ian Alexander (Gerrit)

    unread,
    Jul 24, 2026, 3:26:29 PMJul 24
    to goph...@pubsubhelper.golang.org, Nicholas Husin, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com
    Attention needed from Nicholas Husin

    New activity on the change

    Open in Gerrit

    Related details

    Attention is currently required from:
    • Nicholas Husin
    Submit Requirements:
    • requirement is not satisfiedCode-Review
    • requirement satisfiedNo-Unresolved-Comments
    • requirement is not satisfiedReview-Enforcement
    • requirement satisfiedTryBots-Pass
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: vulndb
    Gerrit-Branch: master
    Gerrit-Change-Id: Idc6d4a0bb19c6b119c2fcf75fb1719801559448d
    Gerrit-Change-Number: 805122
    Gerrit-PatchSet: 1
    Gerrit-Owner: Ian Alexander <ji...@google.com>
    Gerrit-Reviewer: Ian Alexander <ji...@google.com>
    Gerrit-Attention: Nicholas Husin <n...@golang.org>
    Gerrit-Comment-Date: Fri, 24 Jul 2026 19:26:25 +0000
    Gerrit-HasComments: No
    Gerrit-Has-Labels: No
    unsatisfied_requirement
    satisfied_requirement
    open
    diffy

    Nicholas Husin (Gerrit)

    unread,
    Jul 27, 2026, 10:05:58 AMJul 27
    to Ian Alexander, goph...@pubsubhelper.golang.org, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com
    Attention needed from Ian Alexander

    Nicholas Husin added 1 comment

    File data/reports/GO-2026-5306.yaml
    Line 5, Patchset 1 (Latest): - introduced: 0.0.0-20210305023314-538ac3df036e
    Nicholas Husin . unresolved

    I don't think we want to be using the pseudoversions here.

    The GHSA includes actual versions (which I assume is not the actual module versions since you're resorting to pseudoversions). We probably want to use `non_go_versions`.

    Open in Gerrit

    Related details

    Attention is currently required from:
    • Ian Alexander
    Submit Requirements:
      • requirement is not satisfiedCode-Review
      • requirement is not satisfiedNo-Unresolved-Comments
      • requirement is not satisfiedReview-Enforcement
      • requirement satisfiedTryBots-Pass
      Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
      Gerrit-MessageType: comment
      Gerrit-Project: vulndb
      Gerrit-Branch: master
      Gerrit-Change-Id: Idc6d4a0bb19c6b119c2fcf75fb1719801559448d
      Gerrit-Change-Number: 805122
      Gerrit-PatchSet: 1
      Gerrit-Owner: Ian Alexander <ji...@google.com>
      Gerrit-Reviewer: Ian Alexander <ji...@google.com>
      Gerrit-Reviewer: Nicholas Husin <n...@golang.org>
      Gerrit-Attention: Ian Alexander <ji...@google.com>
      Gerrit-Comment-Date: Mon, 27 Jul 2026 14:05:52 +0000
      Gerrit-HasComments: Yes
      Gerrit-Has-Labels: No
      unsatisfied_requirement
      satisfied_requirement
      open
      diffy

      Ian Alexander (Gerrit)

      unread,
      Jul 27, 2026, 12:00:17 PMJul 27
      to goph...@pubsubhelper.golang.org, golang-co...@googlegroups.com
      Attention needed from Ian Alexander

      Ian Alexander uploaded new patchset

      Ian Alexander uploaded patch set #2 to this change.
      Following approvals got outdated and were removed:
      Open in Gerrit

      Related details

      Attention is currently required from:
      • Ian Alexander
      Submit Requirements:
        • requirement is not satisfiedCode-Review
        • requirement is not satisfiedLUCI-Pass
        • requirement is not satisfiedNo-Unresolved-Comments
        • requirement is not satisfiedReview-Enforcement
        • requirement is not satisfiedTryBots-Pass
        Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
        Gerrit-MessageType: newpatchset
        Gerrit-Project: vulndb
        Gerrit-Branch: master
        Gerrit-Change-Id: Idc6d4a0bb19c6b119c2fcf75fb1719801559448d
        Gerrit-Change-Number: 805122
        Gerrit-PatchSet: 2
        unsatisfied_requirement
        open
        diffy

        Ian Alexander (Gerrit)

        unread,
        Jul 27, 2026, 12:00:52 PMJul 27
        to goph...@pubsubhelper.golang.org, Nicholas Husin, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com
        Attention needed from Nicholas Husin

        Ian Alexander voted and added 1 comment

        Votes added by Ian Alexander

        Commit-Queue+1

        1 comment

        File data/reports/GO-2026-5306.yaml
        Line 5, Patchset 1: - introduced: 0.0.0-20210305023314-538ac3df036e
        Nicholas Husin . resolved

        I don't think we want to be using the pseudoversions here.

        The GHSA includes actual versions (which I assume is not the actual module versions since you're resorting to pseudoversions). We probably want to use `non_go_versions`.

        Ian Alexander

        Done

        Open in Gerrit

        Related details

        Attention is currently required from:
        • Nicholas Husin
        Submit Requirements:
          • requirement is not satisfiedCode-Review
          • requirement is not satisfiedLUCI-Pass
          • requirement satisfiedNo-Unresolved-Comments
          • requirement is not satisfiedReview-Enforcement
          • requirement is not satisfiedTryBots-Pass
          Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
          Gerrit-MessageType: comment
          Gerrit-Project: vulndb
          Gerrit-Branch: master
          Gerrit-Change-Id: Idc6d4a0bb19c6b119c2fcf75fb1719801559448d
          Gerrit-Change-Number: 805122
          Gerrit-PatchSet: 2
          Gerrit-Owner: Ian Alexander <ji...@google.com>
          Gerrit-Reviewer: Ian Alexander <ji...@google.com>
          Gerrit-Reviewer: Nicholas Husin <n...@golang.org>
          Gerrit-Attention: Nicholas Husin <n...@golang.org>
          Gerrit-Comment-Date: Mon, 27 Jul 2026 16:00:46 +0000
          Gerrit-HasComments: Yes
          Gerrit-Has-Labels: Yes
          Comment-In-Reply-To: Nicholas Husin <n...@golang.org>
          unsatisfied_requirement
          satisfied_requirement
          open
          diffy

          Nicholas Husin (Gerrit)

          unread,
          Aug 10, 2026, 3:07:59 PM (2 days ago) Aug 10
          to Ian Alexander, goph...@pubsubhelper.golang.org, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com
          Attention needed from Ian Alexander

          Nicholas Husin voted Code-Review+2

          Code-Review+2
          Open in Gerrit

          Related details

          Attention is currently required from:
          • Ian Alexander
          Submit Requirements:
          • requirement satisfiedCode-Review
          • requirement satisfiedNo-Unresolved-Comments
          • requirement is not satisfiedReview-Enforcement
          • requirement satisfiedTryBots-Pass
          Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
          Gerrit-MessageType: comment
          Gerrit-Project: vulndb
          Gerrit-Branch: master
          Gerrit-Change-Id: Idc6d4a0bb19c6b119c2fcf75fb1719801559448d
          Gerrit-Change-Number: 805122
          Gerrit-PatchSet: 2
          Gerrit-Owner: Ian Alexander <ji...@google.com>
          Gerrit-Reviewer: Ian Alexander <ji...@google.com>
          Gerrit-Reviewer: Nicholas Husin <n...@golang.org>
          Gerrit-Attention: Ian Alexander <ji...@google.com>
          Gerrit-Comment-Date: Mon, 10 Aug 2026 19:07:55 +0000
          Gerrit-HasComments: No
          Gerrit-Has-Labels: Yes
          satisfied_requirement
          unsatisfied_requirement
          open
          diffy

          Nicholas Husin (Gerrit)

          unread,
          Aug 10, 2026, 3:08:36 PM (2 days ago) Aug 10
          to Ian Alexander, goph...@pubsubhelper.golang.org, Nicholas Husin, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com
          Attention needed from Ian Alexander

          Nicholas Husin voted Code-Review+1

          Code-Review+1
          Open in Gerrit

          Related details

          Attention is currently required from:
          • Ian Alexander
          Submit Requirements:
            • requirement satisfiedCode-Review
            • requirement satisfiedNo-Unresolved-Comments
            • requirement satisfiedReview-Enforcement
            • requirement satisfiedTryBots-Pass
            Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
            Gerrit-MessageType: comment
            Gerrit-Project: vulndb
            Gerrit-Branch: master
            Gerrit-Change-Id: Idc6d4a0bb19c6b119c2fcf75fb1719801559448d
            Gerrit-Change-Number: 805122
            Gerrit-PatchSet: 2
            Gerrit-Owner: Ian Alexander <ji...@google.com>
            Gerrit-Reviewer: Ian Alexander <ji...@google.com>
            Gerrit-Reviewer: Nicholas Husin <hu...@google.com>
            Gerrit-Comment-Date: Mon, 10 Aug 2026 19:08:33 +0000
            Gerrit-HasComments: No
            Gerrit-Has-Labels: Yes
            satisfied_requirement
            open
            diffy

            Ian Alexander (Gerrit)

            unread,
            Aug 11, 2026, 7:21:36 PM (8 hours ago) Aug 11
            to goph...@pubsubhelper.golang.org, golang-...@googlegroups.com, Nicholas Husin, Nicholas Husin, golang...@luci-project-accounts.iam.gserviceaccount.com, golang-co...@googlegroups.com

            Ian Alexander submitted the change

            Change information

            Commit message:
            data/reports: add 3 reports

            - data/reports/GO-2026-5306.yaml
            - data/reports/GO-2026-5368.yaml
            - data/reports/GO-2026-5576.yaml

            Fixes golang/vulndb#5306
            Fixes golang/vulndb#5368
            Fixes golang/vulndb#5576
            Change-Id: Idc6d4a0bb19c6b119c2fcf75fb1719801559448d
            Files:
            • A data/osv/GO-2026-5306.json
            • A data/osv/GO-2026-5368.json
            • A data/osv/GO-2026-5576.json
            • A data/reports/GO-2026-5306.yaml
            • A data/reports/GO-2026-5368.yaml
            • A data/reports/GO-2026-5576.yaml
            Change size: M
            Delta: 6 files changed, 245 insertions(+), 0 deletions(-)
            Branch: refs/heads/master
            Submit Requirements:
            Open in Gerrit
            Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
            Gerrit-MessageType: merged
            Gerrit-Project: vulndb
            Gerrit-Branch: master
            Gerrit-Change-Id: Idc6d4a0bb19c6b119c2fcf75fb1719801559448d
            Gerrit-Change-Number: 805122
            Gerrit-PatchSet: 3
            open
            diffy
            satisfied_requirement
            Reply all
            Reply to author
            Forward
            0 new messages