Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-29526.json"