x/vulndb: potential Go vuln in github.com/cactus/go-camo: CVE-2019-14255

[tatianab]

CVE-2019-14255 references github.com/cactus/go-camo, which may be a Go module.

Description:
A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HTTP requests to internal endpoints.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2019-14255
• advisory: GHSA-xrmp-4542-q746
• Imported by: https://pkg.go.dev/github.com/cactus/go-camo?tab=importedby

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/cactus/go-camo
      vulnerable_at: 1.1.7
      packages:
        - package: n/a
cves:
    - CVE-2019-14255
references:
    - advisory: https://github.com/cactus/go-camo/security/advisories/GHSA-xrmp-4542-q746

[gopherbot]

Change https://go.dev/cl/540721 mentions this issue: data/excluded: batch add 135 excluded reports