search

bufbuild / protovalidate-go

Protocol Buffer Validation for Go
https://pkg.go.dev/github.com/bufbuild/protovalidate-go
Apache License 2.0
262 stars 19 forks source link

Vulnerability GO-2024-2609 #113

Closed kareemgithubprotonme closed 5 months ago

kareemgithubprotonme commented 5 months ago

Vulnerability: GO-2024-2609 Comments in display names are incorrectly handled in net/mail More info: https://pkg.go.dev/vuln/GO-2024-2609 Standard library Found in: net/mail@go1.21.6 Fixed in: net/mail@go1.21.8 Example traces found: protovalidate.Validator.Validate, which eventually calls mail.ParseAddress

kareemgithubprotonme commented 5 months ago

sorry for reporting this here i now notice that golang builtin packages must be updated on the user side not the model provider side