Wrongly reports influxdb 1.11.8 as vulnerable

[lorenzo-dev1]

The description of CVE-2022-36640 states that versions before v1.8.10 are vulnerable, however v1.11.8 gets still detected as vulnerable.

pkg:golang/github.com/influxdata/[email protected]                                                                                                                                                                                                                     
1 known vulnerabilities affecting installed version                                                                                                                                                                                                                   
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓                                         
┃ [CVE-2022-36640] CWE-276: Incorrect Default Permissions                                                                                                                                                                   ┃                                         
┣━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫                                         
┃ Description        ┃ influxData influxDB before v1.8.10 contains no authentication mechanism or                                                                                                                           ┃                                         
┃                    ┃ controls, allowing unauthenticated attackers to execute arbitrary commands.                                                                                                                          ┃                                         
┃                    ┃ NOTE: the CVE ID assignment is disputed because the vendor's documentation                                                                                                                           ┃                                         
┃                    ┃ states "If InfluxDB is being deployed on a publicly accessible endpoint, we                                                                                                                          ┃                                         
┃                    ┃ strongly recommend authentication be enabled. Otherwise the data will be                                                                                                                             ┃                                         
┃                    ┃ publicly available to any unauthenticated user. The default settings do NOT                                                                                                                          ┃                                         
┃                    ┃ enable authentication and authorization.                                                                                                                                                             ┃                                         
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫                                         
┃ OSS Index ID       ┃ CVE-2022-36640                                                                                                                                                                                       ┃                                         
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫                                         
┃ CVSS Score         ┃ 9.8/10 (Critical)                                                                                                                                                                                    ┃                                         
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫                                         
┃ CVSS Vector        ┃ CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H                                                                                                                                                         ┃                                         
┣━━━━━━━━━━━━━━━━━━━━╋━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫                                         
┃ Link for more info ┃ https://ossindex.sonatype.org/vulnerability/CVE-2022-36640?component-type=golang&component-name=github.com%2Finfluxdata%2Finfluxdb&utm_source=nancy-client&utm_medium=integration&utm_content=1.0.46 ┃