reports: add CVEs from triage

Add CVEs to reports that were discovered in the Nov. 11
triage run.

Also, update format.md and template to reflect the
ability to have a list of CVEs.

Change-Id: I9e74e1c7addd739d048809ef5c43674a34a3af3f
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/372176
Trust: Jonathan Amsterdam <jba@google.com>
Run-TryBot: Jonathan Amsterdam <jba@google.com>
Reviewed-by: Julie Qiu <julie@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
5 files changed
tree: 6b5137e7f111c1138925a27d70c3337bcbe9f4c2
  1. deploy/
  2. reports/
  3. all.bash
  4. AUTHORS
  5. CONTRIBUTING.md
  6. CONTRIBUTORS
  7. format.md
  8. go.mod
  9. go.sum
  10. LICENSE
  11. lint_test.go
  12. new-vuln.sh
  13. PATENTS
  14. README.md
README.md

The Go Vulnerability Database

This repository contains the reports for the Go Vulnerability Database.

If you are interested accessing data from the Go Vulnerability Database, see x/vuln for information. This repository is only used for adding new vulnerabilities.

Reporting a vulnerability

We are not accepting new vulnerability reports at this time. We will update this README.md once we are ready to receive reports.

License

Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.

Database entries are distributed under the terms of the CC-BY 4.0 license. See x/vuln for information on how to access these entries.