x/vulndb: potential Go vuln in github.com/nats-io/nats-server: CVE-2022-24450

[GoVulnBot]

In CVE-2022-24450, the reference URL github.com/nats-io/nats-server (and possibly others) refers to something in Go.

module: github.com/nats-io/nats-server
package: n/a
description: |
    NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.
cves:
  - CVE-2022-24450
links:
    context:
      - https://advisories.nats.io/CVE/CVE-2022-24450.txt
      - https://github.com/nats-io/nats-server/releases/tag/v2.7.2

See doc/triage.md for instructions on how to triage this report.

[neild]

This appears to be a vulnerability in a binary, not a user-imported package.

[gopherbot]

Change https://go.dev/cl/592766 mentions this issue: data/reports: unexclude 50 reports

[gopherbot]

Change https://go.dev/cl/607215 mentions this issue: data/reports: unexclude 20 reports (13)