x/vulndb: potential Go vuln in go.etcd.io/etcd/client/pkg/v3: GHSA-5x4g-q5rc-36jp

[GoVulnBot]

In GitHub Security Advisory GHSA-5x4g-q5rc-36jp, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
go.etcd.io/etcd/client/pkg/v3	3.3.23	< 3.3.23

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: go.etcd.io/etcd/client/pkg/v3
      versions:
        - fixed: 3.3.23
      packages:
        - package: go.etcd.io/etcd/client/pkg/v3
    - module: go.etcd.io/etcd/client/pkg/v3
      versions:
        - introduced: TODO (earliest fixed "3.4.10", vuln range ">= 3.4.0-rc.0, <= 3.4.9")
      packages:
        - package: go.etcd.io/etcd/client/pkg/v3
summary: Etcd pkg Insecure ciphers are allowed by default
ghsas:
    - GHSA-5x4g-q5rc-36jp
references:
    - advisory: https://github.com/etcd-io/etcd/security/advisories/GHSA-5x4g-q5rc-36jp
    - advisory: https://github.com/advisories/GHSA-5x4g-q5rc-36jp

[neild]

etcd server issue, not client libraries.

[gopherbot]

Change https://go.dev/cl/567817 mentions this issue: data/excluded: batch add 15 excluded reports

[gopherbot]

Change https://go.dev/cl/592778 mentions this issue: data/reports: unexclude 80 reports

[gopherbot]

Change https://go.dev/cl/595995 mentions this issue: data/reports: withdraw GO-2024-2527

[gopherbot]

Change https://go.dev/cl/597355 mentions this issue: data/reports: update GO-2024-2527