x/vulndb: potential Go vuln in github.com/zinclabs/zinc: GHSA-4fgv-8448-gf82

[GoVulnBot]

In GitHub Security Advisory GHSA-4fgv-8448-gf82, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/zinclabs/zinc	0.3.2	>= 0.1.9, < 0.3.2

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/zinclabs/zinc
      versions:
        - introduced: 0.1.9
          fixed: 0.3.2
      vulnerable_at: 0.3.1
      packages:
        - package: github.com/zinclabs/zinc
    - module: github.com/zinclabs/zinc
      versions:
        - introduced: 0.1.9
          fixed: 0.3.2
      vulnerable_at: 0.3.1
      packages:
        - package: github.com/zincsearch/zincsearch
summary: Zinc Cross-site Scripting vulnerability
description: |-
    In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site
    Scripting when using the delete user functionality. When an authenticated user
    deletes a user having a XSS payload in the user id field, the javascript payload
    will be executed and allow an attacker to access the user’s credentials.
cves:
    - CVE-2022-32171
ghsas:
    - GHSA-4fgv-8448-gf82
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2022-32171
    - fix: https://github.com/zinclabs/zinc/commit/3376c248bade163430f9347742428f0a82cd322d
    - web: https://www.mend.io/vulnerability-database/CVE-2022-32171
    - fix: https://github.com/zincsearch/zincsearch/commit/3376c248bade163430f9347742428f0a82cd322d
    - advisory: https://github.com/advisories/GHSA-4fgv-8448-gf82

[gopherbot]

Change https://go.dev/cl/508456 mentions this issue: data/excluded: batch add 14 excluded reports

[gopherbot]

Change https://go.dev/cl/592761 mentions this issue: data/reports: unexclude 75 reports

[gopherbot]

Change https://go.dev/cl/606787 mentions this issue: data/reports: unexclude 20 reports (7)