search

go-playground / locales

:earth_americas: a set of locales generated from the CLDR Project which can be used independently or within an i18n package; these were built for use with, but not exclusive to https://github.com/go-playground/universal-translator
MIT License
268 stars 55 forks source link

Latest release remains vulnerable to CVE-2020-14040 (fixed by golang.org/x/text v0.3.3). #37

Closed AaronRobson closed 3 years ago

AaronRobson commented 3 years ago

The vulnerable version has been updated in master but there has not been an official release since (0.13.0). May we have a new release to include pull #31?

Noticed while looking into a dependent package: https://github.com/go-playground/validator/issues/773

deankarn commented 3 years ago

The package has been updated to the latest in v0.14.0

It's worth noting that this package only uses golang.org/x/text during the code generation and so the final code not vulnerable.