commit 2ba7d24a0e958f279ff02350a23b175a1ac4db8e
author Tim King <taking@google.com> Wed Feb 01 15:05:38 2023 -0800
committer Tim King <taking@google.com> Thu Feb 02 17:06:34 2023 +0000
tree 325a8c2d7c384b8048427b0096ab82fe2fd09082
parent bea303a059eeb522c2b3aa7a080a10a48f71694a

data/reports: apply vulnreport fix to 1113

Change-Id: I87e18155e7787b8b5fe026b3e838289027797c7f
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464027
Run-TryBot: Tim King <taking@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>

data/reports/GO-2022-1113.yaml

diff --git a/data/reports/GO-2022-1113.yaml b/data/reports/GO-2022-1113.yaml
index 7d27d38..849fc90 100644
--- a/data/reports/GO-2022-1113.yaml
+++ b/data/reports/GO-2022-1113.yaml
@@ -8,6 +8,7 @@
       - package: github.com/oam-dev/kubevela/pkg/utils/common
         symbols:
           - HTTPGetResponse
+        skip_fix: 'TODO: fill this out [or set vulnerable_at to derive symbols]'
 description: |-
     When using Helm Chart as the component delivery method, the request address
      of the warehouse is not restricted, and there is a blind SSRF vulnerability.