CVE-2020-14040: Update golang.org/x/text version to v0.3.7

apex / log

Structured logging package for Go.

MIT License

1.37k stars 112 forks source link

CVE-2020-14040: Update golang.org/x/text version to v0.3.7 #102

Open majakubiec opened 2 years ago

majakubiec commented 2 years ago

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.