commit 29b7148a1c042a3b13dcfa28eb3e5270b22eb3b0
author Roland Shoemaker <roland@golang.org> Wed Apr 14 11:56:02 2021 -0700
committer Roland Shoemaker <bracewell@google.com> Wed Apr 14 18:57:23 2021 +0000
tree cfcd5a47a01fdda3e2a5d7a19978e40e7969fb10
parent 8b1e4d6fb84391dead513f8cbbe783fdc10cac57

reports: add back additional_packages for go-yaml with no verions

Blergh, all incompatible version of github.com/go-yaml/yaml are vulnerable,
so add it back with an empty versions list.

Change-Id: I881192ea57e4be02fb534d7a1f2951a004c7e648
Reviewed-on: https://team-review.git.corp.google.com/c/golang/vulndb/+/1055920
Reviewed-by: Roland Shoemaker <bracewell@google.com>

reports/GO-2020-0036.toml

diff --git a/reports/GO-2020-0036.toml b/reports/GO-2020-0036.toml
index db8514a..74a04c9 100644
--- a/reports/GO-2020-0036.toml
+++ b/reports/GO-2020-0036.toml
@@ -14,6 +14,11 @@
 [[versions]]
 fixed = "v2.2.8"
 
+# all of the incompatible version of github.com/go-yaml/yaml
+# are affected
+[[additional_packages]]
+module = "github.com/go-yaml/yaml"
+
 [links]
 commit = "https://github.com/go-yaml/yaml/commit/53403b58ad1b561927d19068c655246f2db79d48"
 pr = "https://github.com/go-yaml/yaml/pull/555"

reports/GO-2021-0061.toml

diff --git a/reports/GO-2021-0061.toml b/reports/GO-2021-0061.toml
index 9c513b4..58ae188 100644
--- a/reports/GO-2021-0061.toml
+++ b/reports/GO-2021-0061.toml
@@ -14,6 +14,11 @@
 [[versions]]
 fixed = "v2.2.3"
 
+# all of the incompatible version of github.com/go-yaml/yaml
+# are affected
+[[additional_packages]]
+module = "github.com/go-yaml/yaml"
+
 [links]
 commit = "https://github.com/go-yaml/yaml/commit/bb4e33bf68bf89cad44d386192cbed201f35b241"
 pr = "https://github.com/go-yaml/yaml/pull/375"
\ No newline at end of file