Security vulnerability in golang.org/x/text. Please bump to version 0.3.7

phrase / phrase-cli

CLI for the Phrase API

https://developers.phrase.com

MIT License

42 stars 6 forks source link

Closed Mexx77 closed 2 years ago

Mexx77 commented 2 years ago

Hey,

golang.org/x/tex version 0.3.3 has a known vulnerability that is fixed in version 0.3.7 (CVE-2021-38561). Please bump this dependency. Thank you!

theSoenke commented 2 years ago

Hey @Mexx77, thanks for reporting this. We're looking into bumping the package version

theSoenke commented 2 years ago

Release v2.4.7 now uses the latest version of golang.org/x/text 0.3.7