data/reports: add alias for GO-2020-0037.yaml
Aliases: CVE-2019-25072, GHSA-3fm3-m23v-5r46
Updates golang/vulndb#37
Fixes golang/vulndb#1230
Change-Id: I19b0690c527949101aded2cbc8eb86111e222c57
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/461441
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
diff --git a/data/osv/GO-2020-0037.json b/data/osv/GO-2020-0037.json
index 609f456..b72d063 100644
--- a/data/osv/GO-2020-0037.json
+++ b/data/osv/GO-2020-0037.json
@@ -3,7 +3,8 @@
"published": "2021-04-14T20:04:52Z",
"modified": "0001-01-01T00:00:00Z",
"aliases": [
- "CVE-2019-25072"
+ "CVE-2019-25072",
+ "GHSA-3fm3-m23v-5r46"
],
"details": "Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.",
"affected": [
diff --git a/data/reports/GO-2020-0037.yaml b/data/reports/GO-2020-0037.yaml
index dc34999..35e18a8 100644
--- a/data/reports/GO-2020-0037.yaml
+++ b/data/reports/GO-2020-0037.yaml
@@ -12,6 +12,8 @@
can cause a client to consume a significant amount of system
resources, which may be used as a denial of service vector.
published: 2021-04-14T20:04:52Z
+ghsas:
+ - GHSA-3fm3-m23v-5r46
credit: '@guagualvcha'
references:
- fix: https://github.com/tendermint/tendermint/pull/3430
