Skip to main content
cve.nowby Sazabi
← Go
GoPackage

golang.org/x/text

5 known vulnerabilities (4 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 4 high
Registry
pkg.go.dev

Advisories 5

  • Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

    Affected: fixed in 0.41.0.

  • Infinite loop on invalid input in golang.org/x/text

    Affected: fixed in 0.39.0.

  • golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing.

    Affected: fixed in 0.3.7.

  • Denial of service via crafted Accept-Language header in golang.org/x/text/language

    Affected: fixed in 0.3.8.

  • The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite…

    Affected: fixed in 0.3.3.