x/vulndb: potential Go vuln in golang-jwt/jwt

[khalidumar-hs]

Acknowledgement

• [X] The maintainer(s) of the affected project have already been made aware of this vulnerability.

Description

Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations. https://github.com/advisories/GHSA-29wx-vh33-7x7r

This was reported in GHSA, it should automatically be picked by govulncheck right ?

Affected Modules, Packages, Versions and Symbols

Module: github.com/example/module
Package: github.com/example/module/package
Versions:
  - Introduced: 1.2.0
  - Fixed: 1.2.4
Symbols:
  - aFunction
  - SomeType.AMethod

Module: github.com/example/module/v2
Package: github.com/example/module/v2/package
Versions:
  - Fixed: 2.4.5
Symbols:
  - anotherFunction

CVE/GHSA ID

GHSA-29wx-vh33-7x7r

Fix Commit or Pull Request

https://github.com/golang-jwt/jwt/releases/tag/v4.5.1

References

https://github.com/advisories/GHSA-29wx-vh33-7x7r

Additional information

No response