validator icon indicating copy to clipboard operation
validator copied to clipboard

Published 20 hours ago • verified publisher icon go-playground

CVE-2023-39325 caused by dependency on mimetype

Open jacobranson opened this issue 1 year ago • 0 comments

The mimetype dependency is specified at v1.4.2, which is affected by a CVE impacting Go's net package. v1.4.3 resolved the issue. There is a merge request already out there by Dependabot bumping the version of net, but the root cause should be addressed by bumping mimetype, as well.

jacobranson avatar Feb 04 '24 18:02 jacobranson