Pinaki Sarkar

Yes, this list is from Mend (formerly Whitesource). All of these attributed to distribution/distribution v2.8.1 and/or v2.7.1 https://osv.dev/vulnerability/GO-2021-0061 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2016-9122 https://nvd.nist.gov/vuln/detail/CVE-2016-9123 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2019-11254 https://nvd.nist.gov/vuln/detail/CVE-2016-9121