protoc-gen-go: adv for GHSA-8r3f-844c-mc37 (#4928)

Signed-off-by: hectorj2f <hector@chainguard.dev>
wolfi-dev · May 16, 2024 · 5f24df2 · 5f24df2
1 parent df7fb21
commit 5f24df2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/protoc-gen-go.advisories.yaml b/protoc-gen-go.advisories.yaml
@@ -41,3 +41,8 @@ advisories:
         type: fixed
         data:
           fixed-version: 1.33.0-r0
+      - timestamp: 2024-05-15T12:40:33Z
+        type: false-positive-determination
+        data:
+          type: vulnerable-code-version-not-used
+          note: This vulnerability affects any version older than v1.33.0 while this package is at version v1.34.1 containing non-vulnerable code.