x/vulndb: potential Go vuln in github.com/containers/podman/v2: GHSA-vmhj-p9hw-vgrf

[GoVulnBot]

In GitHub Security Advisory GHSA-vmhj-p9hw-vgrf, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/containers/podman/v2	2.0.6	< 2.0.6

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: github.com/containers/podman/v2
    versions:
      - fixed: 2.0.6
    packages:
      - package: github.com/containers/podman/v2
  - module: github.com/containers/podman/v2
    versions:
      - introduced: 1.6.0
        fixed: 2.0.6
    packages:
      - package: github.com/containers/podman
description: A flaw was discovered in Podman where it incorrectly allows containers
    when created to overwrite existing files in volumes, even if they are mounted
    as read-only. When a user runs a malicious container or a container based on a
    malicious image with an attached volume that is used for the first time, it is
    possible to trigger the flaw and overwrite files in the volume. This issue was
    introduced in version 1.6.0.
cves:
  - CVE-2020-1726
ghsas:
  - GHSA-vmhj-p9hw-vgrf

[gopherbot]

Change https://go.dev/cl/467396 mentions this issue: data/excluded: batch add excluded reports

[gopherbot]

Change https://go.dev/cl/606782 mentions this issue: data/reports: unexclude 20 reports (2)