x/vulndb: potential Go vuln in github.com/google/fscrypt: GHSA-chxf-fjcf-7fwp

[GoVulnBot]

In GitHub Security Advisory GHSA-chxf-fjcf-7fwp, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/google/fscrypt	0.3.3	< 0.3.3

See doc/triage.md for instructions on how to triage this report.

package: github.com/google/fscrypt
versions:
  - introduced: v0.0.0
    fixed: v0.3.3
description: |
    `fscrypt` through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to `fscrypt` v0.3.3 or above and adjusting the permissions on existing `fscrypt` metadata directories where applicable.

    For more details, see [CVE-2022-25326](https://www.cve.org/CVERecord?id=CVE-2022-25326) and https://github.com/google/fscrypt#setting-up-fscrypt-on-a-filesystem.
published: 2022-03-01T21:04:07Z
last_modified: 2022-03-01T22:16:21Z
ghsas:
  - GHSA-chxf-fjcf-7fwp

[neild]

Duplicate of #339.

[tatianab]

Duplicate of #339

[tatianab]

Need to add GHSA-chxf-fjcf-7fwp to report for GO-2022-0339

[gopherbot]

Change https://go.dev/cl/514876 mentions this issue: data/excluded: update GO-2022-0339.yaml to add alias