x/vulndb: potential Go vuln in github.com/taosdata/TDengine: CVE-2023-38502

[GoVulnBot]

CVE-2023-38502 references github.com/taosdata/TDengine, which may be a Go module.

Description:
TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query. This issue affects TDengine Databases which let users connect and run arbitrary queries. Version 3.0.7.1 has a patch for this issue.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2023-38502
• JSON: https://github.com/CVEProject/cvelist/tree/08b7f4567ec80e6f6f00ea970fee88005a610c4d/2023/38xxx/CVE-2023-38502.json
• advisory: GHSA-w23f-r2fm-27hf
• Imported by: https://pkg.go.dev/github.com/taosdata/TDengine?tab=importedby

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/taosdata/TDengine
      vulnerable_at: 0.0.0-20230725065930-c2588d71c346
      packages:
        - package: TDengine
description: |-
    TDengine is an open source, time-series database optimized for Internet of
    Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF
    nested query. This issue affects TDengine Databases which let users connect and
    run arbitrary queries. Version 3.0.7.1 has a patch for this issue.
cves:
    - CVE-2023-38502
references:
    - advisory: https://github.com/taosdata/TDengine/security/advisories/GHSA-w23f-r2fm-27hf

[gopherbot]

Change https://go.dev/cl/514636 mentions this issue: data/excluded: batch add 31 excluded reports

[gopherbot]

Change https://go.dev/cl/592762 mentions this issue: data/reports: unexclude 75 reports