x/vulndb: potential Go vuln in github.com/google/exposure-notifications-verification-server: CVE-2021-22565

[GoVulnBot]

In CVE-2021-22565, the reference URL github.com/google/exposure-notifications-verification-server (and possibly others) refers to something in Go.

module: github.com/google/exposure-notifications-verification-server
package: Google Exposure-notifications-verification-server
description: |
    An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading the Exposure Notification server to V1.1.2 or greater.
cves:
  - CVE-2021-22565
links:
    context:
      - https://github.com/google/exposure-notifications-verification-server/releases/tag/v1.1.2
      - https://github.com/google/exposure-notifications-verification-server/security/advisories/GHSA-wx8q-rgfr-cf6v

See doc/triage.md for instructions on how to triage this report.

[gopherbot]

Change https://go.dev/cl/592766 mentions this issue: data/reports: unexclude 50 reports

[gopherbot]

Change https://go.dev/cl/607215 mentions this issue: data/reports: unexclude 20 reports (13)