x/vulndb: potential Go vuln in github.com/traefik/traefik: GHSA-7v4p-328v-8v5g

[GoVulnBot]

In GitHub Security Advisory GHSA-7v4p-328v-8v5g, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/traefik/traefik	3.0.0-beta4	>= 3.0.0-beta1, < 3.0.0-beta4

Cross references:

• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2022-23632 #325 EFFECTIVELY_PRIVATE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: GHSA-7h6j-2268-fhcm #808 NOT_IMPORTABLE
• Module github.com/traefik/traefik appears in issue x/vulndb: potential Go vuln in github.com/traefik/traefik: CVE-2021-32813, GHSA-m697-4v8f-55qg #923 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/traefik/traefik
      versions:
        - introduced: 3.0.0-beta1
          fixed: 3.0.0-beta4
      packages:
        - package: github.com/traefik/traefik
    - module: github.com/traefik/traefik
      versions:
        - fixed: 2.10.5
      packages:
        - package: github.com/traefik/traefik
summary: Traefik vulnerable to HTTP/2 request causing denial of service
ghsas:
    - GHSA-7v4p-328v-8v5g
references:
    - advisory: https://github.com/traefik/traefik/security/advisories/GHSA-7v4p-328v-8v5g
    - web: https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ?pli=1
    - advisory: https://github.com/advisories/GHSA-7v4p-328v-8v5g

[gopherbot]

Change https://go.dev/cl/537395 mentions this issue: data/excluded: batch add 18 excluded reports