data/reports: add alias for GO-2020-0023.yaml

Aliases: CVE-2015-10004, GHSA-5vw4-v588-pgv8

Updates #23
Fixes #1232

Change-Id: I9b8be39445992ee26ace360ac5b5d9db2ccb7b40
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/461482
Reviewed-by: Damien Neil <dneil@google.com>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>

Author: tatianab

data/osv/GO-2020-0023.json

@@ -3,7 +3,8 @@
   "published": "2021-04-14T20:04:52Z",
   "modified": "0001-01-01T00:00:00Z",
   "aliases": [
-    "CVE-2015-10004"
+    "CVE-2015-10004",
+    "GHSA-5vw4-v588-pgv8"
   ],
   "details": "Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low latency connection, an attacker may use this to determine the expected HMAC.",
   "affected": [

data/reports/GO-2020-0023.yaml

@@ -12,6 +12,8 @@ description: |
     over a low latency connection, an attacker may use this to determine
     the expected HMAC.
 published: 2021-04-14T20:04:52Z
+ghsas:
+  - GHSA-5vw4-v588-pgv8
 references:
   - fix: https://github.com/robbert229/jwt/commit/ca1404ee6e83fcbafb66b09ed0d543850a15b654
   - web: https://github.com/robbert229/jwt/issues/12