x/vulndb: potential Go vuln in github.com/go-vela/sdk-go: GHSA-v8mx-hp2q-gw85

[GoVulnBot]

In GitHub Security Advisory GHSA-v8mx-hp2q-gw85, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/go-vela/sdk-go	0.23.2	<= 0.23.1

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/go-vela/sdk-go
      versions:
        - introduced: TODO (earliest fixed "0.23.2", vuln range "<= 0.23.1")
      packages:
        - package: github.com/go-vela/sdk-go
summary: Golang SDK for Vela Insecure Variable Substitution
ghsas:
    - GHSA-v8mx-hp2q-gw85
references:
    - advisory: https://github.com/go-vela/sdk-go/security/advisories/GHSA-v8mx-hp2q-gw85
    - fix: https://github.com/go-vela/sdk-go/commit/e3a34719badf37928e60f4402abe51f8b50055e1
    - advisory: https://github.com/advisories/GHSA-v8mx-hp2q-gw85

[gopherbot]

Change https://go.dev/cl/584376 mentions this issue: data/excluded: batch add 3 excluded reports

[gopherbot]

Change https://go.dev/cl/590278 mentions this issue: data/reports: add 48 unreviewed reports