x/vulndb: potential Go vuln in github.com/ipfs/go-ipfs: GHSA-r23h-3jmw-q7hr

[GoVulnBot]

In GitHub Security Advisory GHSA-r23h-3jmw-q7hr, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/ipfs/go-ipfs	0.7.0	< 0.7.0

Cross references:

• Module github.com/ipfs/go-ipfs appears in issue x/vulndb: potential Go vuln in github.com/ipfs/go-ipfs: GHSA-fx5p-f64h-93xc #418 EFFECTIVELY_PRIVATE
• Module github.com/ipfs/go-ipfs appears in issue x/vulndb: potential Go vuln in github.com/ipfs/go-ipfs: GHSA-f2gr-7299-487h #504 DEPENDENT_VULNERABILITY
• Module github.com/ipfs/go-ipfs appears in issue x/vulndb: potential Go vuln in github.com/ipfs/go-ipfs: GHSA-27pv-q55r-222g #779 NOT_IMPORTABLE
• Module github.com/ipfs/go-ipfs appears in issue x/vulndb: potential Go vuln in github.com/ipfs/go-ipfs: GHSA-r4gv-vj59-cccm #873 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/ipfs/go-ipfs
      versions:
        - fixed: 0.7.0
      vulnerable_at: 0.7.0-rc2
      packages:
        - package: github.com/ipfs/go-ipfs
summary: Access Restriction Bypass in go-ipfs in github.com/ipfs/go-ipfs
cves:
    - CVE-2020-10937
ghsas:
    - GHSA-r23h-3jmw-q7hr
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2020-10937
    - web: https://blog.ipfs.io/2020-10-30-dht-hardening/
    - web: https://graz.pure.elsevier.com/en/publications/total-eclipse-of-the-heart-disrupting-the-interplanetary-file-sys
    - advisory: https://github.com/advisories/GHSA-r23h-3jmw-q7hr
source:
    id: GHSA-r23h-3jmw-q7hr

[gopherbot]

Change https://go.dev/cl/582535 mentions this issue: data/reports: batch add unreviewed reports

[gopherbot]

Change https://go.dev/cl/586484 mentions this issue: data/reports: add 73 unreviewed reports

[gopherbot]

Change https://go.dev/cl/590039 mentions this issue: data/reports: add 51 reports