x/vulndb: potential Go vuln in github.com/traefik/traefik/v3: GHSA-r3fq-cmmw-cpmm

[GoVulnBot]

In GitHub Security Advisory GHSA-r3fq-cmmw-cpmm, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/traefik/traefik/v3		>= 1.7.0, <= 1.7.11

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/traefik/traefik/v3
      versions:
        - introduced: TODO (earliest fixed "", vuln range ">= 1.7.0, <= 1.7.11")
      vulnerable_at: 3.0.0-beta3
      packages:
        - package: github.com/traefik/traefik/v3
summary: Containous Traefik Exposes Password Hashes
description: |-
    types/types.go in Containous Traefik 1.7.x through 1.7.11, when the `--api` flag
    is used and the API is publicly reachable and exposed without sufficient access
    control (which is contrary to the API documentation), allows remote
    authenticated users to discover password hashes by reading the Basic HTTP
    Authentication or Digest HTTP Authentication section, or discover a key by
    reading the ClientTLS section. These can be found in the JSON response to a
    `/api` request.
cves:
    - CVE-2019-12452
ghsas:
    - GHSA-r3fq-cmmw-cpmm
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2019-12452
    - report: https://github.com/containous/traefik/issues/4917
    - fix: https://github.com/containous/traefik/pull/4918
    - advisory: https://github.com/advisories/GHSA-r3fq-cmmw-cpmm

[gopherbot]

Change https://go.dev/cl/513195 mentions this issue: data/excluded: batch add 26 excluded reports

[gopherbot]

Change https://go.dev/cl/592761 mentions this issue: data/reports: unexclude 75 reports

[gopherbot]

Change https://go.dev/cl/606788 mentions this issue: data/reports: unexclude 20 reports (8)