x/vulndb: potential Go vuln in github.com/KubeOperator/kubepi: GHSA-gqx8-hxmv-c4v4

[GoVulnBot]

In GitHub Security Advisory GHSA-gqx8-hxmv-c4v4, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/KubeOperator/kubepi		<= 1.6.3

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - {}
    packages:
      - package: github.com/KubeOperator/kubepi
description: "### Summary\nAPI interfaces with unauthorized access will leak sensitive
    information\n/kubepi/api/v1/systems/operation/logs/search\n/kubepi/api/v1/systems/login/logs/search\n\nThis
    vulnerability also exists in https://github.com/KubeOperator/KubeOperator\n\n###
    Details\nThe vulnerability is located in\nKubePi/internal/api/v1/v1.go\n<img width=\"855\"
    alt=\"image\" src=\"https://user-images.githubusercontent.com/35884266/211234101-8c325e46-bf65-44ee-9fcb-7a1dc3a39c03.png\">\n\n`sp.Post(\"/login/logs/search\",
    handler.LoginLogsSearch())` directly uses the v1 route without middleware authentication\n\n<img
    width=\"961\" alt=\"image\" src=\"https://user-images.githubusercontent.com/35884266/211234091-fe8cf249-8806-4124-92d0-4fd58753fa48.png\">\n\nFollow
    up found no role based authentication\n\n<img width=\"919\" alt=\"image\" src=\"https://user-images.githubusercontent.com/35884266/211234162-0a6cbaa1-1f83-4361-aa26-a72cd117d64d.png\">\n\n`sp.Post(\"/operation/logs/search\",
    handler.OperationLogsSearch())` the same as above\n\n<img width=\"885\" alt=\"image\"
    src=\"https://user-images.githubusercontent.com/35884266/211234385-9d413330-a43b-402a-b389-56a50a109769.png\">\n\n###
    Impact\n\nKubePI <=1.6.3 "
cves:
  - CVE-2023-22478
ghsas:
  - GHSA-gqx8-hxmv-c4v4

[gopherbot]

Change https://go.dev/cl/464316 mentions this issue: data/excluded: batch add excluded reports

[gopherbot]

Change https://go.dev/cl/592759 mentions this issue: data/reports: unexclude 75 reports

[gopherbot]

Change https://go.dev/cl/606781 mentions this issue: data/reports: unexclude 20 reports (1)