There is 1 vulnerability in modules that you require. Use -scan=symbol
with govulncheck for more fine grained vulnerability detection.
See https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck for details.

Vulnerability #1: GO-0000-0001
    Third-party vulnerability
  More info: https://pkg.go.dev/vuln/GO-0000-0001
  Module: golang.org/vmod
    Found in: golang.org/vmod@v0.0.1
    Fixed in: golang.org/vmod@v0.1.3
    Platforms: amd

Share feedback at https://go.dev/s/govulncheck-feedback.