x/vulndb: missing goos metadata for GO-2023-2170

[Hacmon]

What is the URL of the page with the issue?

https://pkg.go.dev/vuln/GO-2023-2170
https://pkg.go.dev/vuln/GO-2023-2330

What is your user agent?

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36

Screenshot

No response

What did you do?

I retrieved and processed vulnerability data from https://pkg.go.dev/vuln/GO-2023-2170.

What did you see happen?

I've observed a discrepancy between the OSV Go data and NVD data for the vulnerability distribution in CVE-2023-3955.

What did you expect to see?

In the NVD data, the vulnerability is specific to Windows (running on Windows), but the GO OSV advisory does not include the expected "goos": ["windows"] flag.
This discrepancy leads to problems when matching the vulnerability with the appropriate distribution.

Same issue for https://pkg.go.dev/vuln/GO-2023-2330 - CVE-2023-3676

[ItayHacmon]

@seankhliao Is there any update on this issue ?
Meanwhile we need to add this data manually in our env.
Please advise

[zpavlinovic]

Sorry, this went under the radar. One reason for this is that this issue should be raised at the vulndb issue tracker. Please open the issue there and it will looked at more promptly.