data/reports: add GO-2024-3012
This module has been removed from the module proxy,
so the report contains an unfixable lint error.
Fixes golang/vulndb#3012
Change-Id: I1b44a05ff51a75eafed2f632a786827d685f7ff0
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/602115
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
diff --git a/data/osv/GO-2024-3012.json b/data/osv/GO-2024-3012.json
new file mode 100644
index 0000000..c53eb8f
--- /dev/null
+++ b/data/osv/GO-2024-3012.json
@@ -0,0 +1,31 @@
+{
+ "schema_version": "1.3.1",
+ "id": "GO-2024-3012",
+ "modified": "0001-01-01T00:00:00Z",
+ "published": "0001-01-01T00:00:00Z",
+ "summary": "Malicious code in github.com/PromonLogicalis/asn1",
+ "details": "Version 7bdca06d0edf of the github.com/PromonLogicalis/asn1 module contains malicious code which downloads a program from a remote web server and executes it.",
+ "affected": [
+ {
+ "package": {
+ "name": "github.com/PromonLogicalis/asn1",
+ "ecosystem": "Go"
+ },
+ "ranges": [
+ {
+ "type": "SEMVER",
+ "events": [
+ {
+ "introduced": "0"
+ }
+ ]
+ }
+ ],
+ "ecosystem_specific": {}
+ }
+ ],
+ "database_specific": {
+ "url": "https://pkg.go.dev/vuln/GO-2024-3012",
+ "review_status": "REVIEWED"
+ }
+}
\ No newline at end of file
diff --git a/data/reports/GO-2024-3012.yaml b/data/reports/GO-2024-3012.yaml
new file mode 100644
index 0000000..e640c72
--- /dev/null
+++ b/data/reports/GO-2024-3012.yaml
@@ -0,0 +1,13 @@
+id: GO-2024-3012
+modules:
+ - module: github.com/PromonLogicalis/asn1
+ skip_lint: true
+summary: Malicious code in github.com/PromonLogicalis/asn1
+description: |-
+ Version 7bdca06d0edf of the github.com/PromonLogicalis/asn1 module
+ contains malicious code which downloads a program from
+ a remote web server and executes it.
+source:
+ id: go-security-team
+ created: 2024-07-30T14:09:01.978232-07:00
+review_status: REVIEWED
