x/vulndb: potential Go vuln in github.com/submariner-io/submariner-operator: GHSA-2rhx-qhxp-5jpw

[GoVulnBot]

In GitHub Security Advisory GHSA-2rhx-qhxp-5jpw, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/submariner-io/submariner-operator		>= 0.17.0, <= 0.18.0-m3

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

id: GO-ID-PENDING
modules:
    - module: github.com/submariner-io/submariner-operator
      versions:
        - introduced: TODO (earliest fixed "", vuln range ">= 0.17.0, <= 0.18.0-m3")
      packages:
        - package: github.com/submariner-io/submariner-operator
    - module: github.com/submariner-io/submariner-operator
      versions:
        - fixed: 0.16.4
      vulnerable_at: 0.16.3
      packages:
        - package: github.com/submariner-io/submariner-operator
summary: Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator
cves:
    - CVE-2024-5042
ghsas:
    - GHSA-2rhx-qhxp-5jpw
references:
    - web: https://access.redhat.com/security/cve/CVE-2024-5042
    - web: https://bugzilla.redhat.com/show_bug.cgi?id=2280921
    - report: https://github.com/submariner-io/submariner-operator/issues/3041
    - fix: https://github.com/submariner-io/submariner-operator/pull/3040
    - fix: https://github.com/submariner-io/submariner-operator/commit/b27a04c4270e53cbff6ff8ac6245db10c204bcab
    - advisory: https://github.com/advisories/GHSA-2rhx-qhxp-5jpw
notes:
    - fix: 'module merge error: could not merge versions of module github.com/submariner-io/submariner-operator: invalid or non-canonical semver version (found TODO (earliest fixed "", vuln range ">= 0.17.0, <= 0.18.0-m3"))'
source:
    id: GHSA-2rhx-qhxp-5jpw
    created: 2024-05-17T21:01:22.517782245Z

[gopherbot]

Change https://go.dev/cl/590277 mentions this issue: data/reports: add 26 unreviewed reports

[gopherbot]

Change https://go.dev/cl/606359 mentions this issue: data/reports: regenerate 50 reports