x/vulndb: potential Go vuln in github.com/foxcpp/maddy: CVE-2021-42583

[GoVulnBot]

In CVE-2021-42583, the reference URL github.com/foxcpp/maddy (and possibly others) refers to something in Go.

module: github.com/foxcpp/maddy
package: n/a
description: |
    A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.
cves:
  - CVE-2021-42583
links:
    context:
      - https://github.com/foxcpp/maddy/blob/df40dce1284cd0fd0a9e8e7894029553d653d0a5/internal/auth/shadow/verify.go
      - https://github.com/foxcpp/maddy/releases/tag/v0.5.2

See doc/triage.md for instructions on how to triage this report.

[neild]

This appears to be a vulnerability in a binary, not a user-imported package.

[gopherbot]

Change https://go.dev/cl/592766 mentions this issue: data/reports: unexclude 50 reports

[gopherbot]

Change https://go.dev/cl/607215 mentions this issue: data/reports: unexclude 20 reports (13)