Currently the gobin indexer uses runtime to indicate the Go version used, which currently also means that's the "version" of all the stdlib packages. This means that advisories against the stdlib do not match correctly.

In future Go releases, the stdlib will be versioned independently, so ideally changes would account for that.