commit ecf98fb7c1d853326300028ee447882baca22be2
author Damien Neil <dneil@google.com> Tue Jun 28 14:09:57 2022 -0700
committer Damien Neil <dneil@google.com> Fri Jul 01 20:10:50 2022 +0000
tree b43941a4f3bd9400da9be45c13a0832dceac8a6c
parent b250eef87586b6b0bf1ae7b20e00346b7128a865

x/vulndb: add reports/GO-2022-0400.yaml for GHSA-h2x7-2ff6-v32p

Fixes golang/vulndb#0400

Change-Id: I619684529d7167590434c1bb3beded12184d2ac8
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/414821
Run-TryBot: Damien Neil <dneil@google.com>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>

reports/GO-2022-0400.yaml

diff --git a/reports/GO-2022-0400.yaml b/reports/GO-2022-0400.yaml
new file mode 100644
index 0000000..fb2dbe7
--- /dev/null
+++ b/reports/GO-2022-0400.yaml
@@ -0,0 +1,14 @@
+packages:
+  - module: github.com/ntbosscher/gobase
+    package: github.com/ntbosscher/gobase/auth/httpauth
+    symbols:
+      - Setup
+      - middleware
+    versions:
+      - fixed: 0.7.2
+    vulnerable_at: 0.7.1
+description: A race condition can cause incorrect HTTP request routing.
+ghsas:
+  - GHSA-h2x7-2ff6-v32p
+links:
+    commit: https://github.com/ntbosscher/gobase/commit/a8d40bce9c429d324122d18c446924dab809e812