x/vulndb: potential Go vuln in github.com/kolide/fleet: CVE-2019-1020009

[tatianab]

CVE-2019-1020009 references github.com/kolide/fleet, which may be a Go module.

Description:
Fleet before 2.1.2 allows exposure of SMTP credentials.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2019-1020009
• advisory: GHSA-6g7f-8qm4-f7h8
• Imported by: https://pkg.go.dev/github.com/kolide/fleet?tab=importedby

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/kolide/fleet
      vulnerable_at: 0.0.0-20201215150320-570de374fc5e
      packages:
        - package: Fleet
cves:
    - CVE-2019-1020009
references:
    - advisory: https://github.com/kolide/fleet/security/advisories/GHSA-6g7f-8qm4-f7h8

[gopherbot]

Change https://go.dev/cl/540721 mentions this issue: data/excluded: batch add 135 excluded reports