x/vulndb: potential Go vuln in github.com/kyverno/kyverno: GHSA-m3cq-xcx9-3gvm

[GoVulnBot]

In GitHub Security Advisory GHSA-m3cq-xcx9-3gvm, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/kyverno/kyverno	1.8.5	>= 1.8.3, <= 1.8.4

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - introduced: TODO (earliest fixed "1.8.5", vuln range ">= 1.8.3, <= 1.8.4")
    packages:
      - package: github.com/kyverno/kyverno
description: |+
    ### Impact

    Users of Kyverno on versions 1.8.3 or 1.8.4 who use `verifyImages` rules to verify container image signatures, and do not prevent use of unknown registries.

    ### Patches

    This issue has been fixed in version [1.8.5](https://github.com/kyverno/kyverno/releases/tag/v1.8.5)

    ### Workarounds

    Configure a Kyverno policy to restrict registries to a set of secure trusted image registries ([sample](https://kyverno.io/policies/best-practices/restrict_image_registries/restrict_image_registries/)).

    ### References


ghsas:
  - GHSA-m3cq-xcx9-3gvm

[gopherbot]

Change https://go.dev/cl/459316 mentions this issue: data/reports: add GO-2022-1180.yaml

[gopherbot]

Change https://go.dev/cl/466078 mentions this issue: data/reports: add skip_fix to GO-2022-1180.yaml