commit 01a6ab5ffb94330664079e78a1faa89bc9b9dd1c
author Tim King <taking@google.com> Fri Jan 27 15:20:22 2023 -0800
committer Tatiana Bradley <tatianabradley@google.com> Mon Jan 30 16:19:51 2023 +0000
tree 96855bb79a5be99b140c692155b462ef1e0730f1
parent ac4f51fe6515040c976a3659909082a21b60ecb8

data/reports: apply vulnreport fix to 1027

Change-Id: Ibc88ba493a4dab08b30fcf98cfcb5c2f0531cdfb
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/463110
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tim King <taking@google.com>

data/reports/GO-2022-1027.yaml

diff --git a/data/reports/GO-2022-1027.yaml b/data/reports/GO-2022-1027.yaml
index e63f720..16fbc24 100644
--- a/data/reports/GO-2022-1027.yaml
+++ b/data/reports/GO-2022-1027.yaml
@@ -5,6 +5,8 @@
     vulnerable_at: 0.3.0
     packages:
       - package: github.com/cloudwego/hertz/pkg/protocol
+        goos:
+          - windows
         symbols:
           - normalizePath
         derived_symbols:
@@ -24,8 +26,6 @@
           - URI.SetPathBytes
           - URI.Update
           - URI.UpdateBytes
-        goos:
-          - windows
 description: |
     Improper path sanitization on Windows permits path traversal attacks.
     Static file serving with the Static or StaticFS functions allows an