x/vulndb: potential Go vuln in github.com/envoyproxy/envoy: CVE-2022-21654

[GoVulnBot]

In CVE-2022-21654, the reference URL github.com/envoyproxy/envoy (and possibly others) refers to something in Go.

• Commit: envoyproxy/envoy@e9f936d

module: github.com/envoyproxy/envoy
package: envoy
description: |+
    Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised to upgrade.

cves:
  - CVE-2022-21654
links:
    commit: https://github.com/envoyproxy/envoy/commit/e9f936d85dc1edc34fabd0a1725ec180f2316353
    context:
      - https://github.com/envoyproxy/envoy/security/advisories/GHSA-5j4x-g36v-m283

See doc/triage.md for instructions on how to triage this report.

[julieqiu]

Not Go code.