oksvg
oksvg copied to clipboard
Dependency text 0.3.6 is vulnerable
trafficstars
https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXTEXTINTERNALLANGUAGE-2400718
All versions of golang.org/x/text below 0.3.7 are vulnerable. Updating to a later golang.org/x/net should solve this issue for the project.
Cheers.
Thank you Akaame. Is there specific action I should take, like encouraging versioning somehow? IIRC the dependency on golang.org/x/text is just to make character interpretation during xml parsing to work correctly. All input is appreciated.
I opened a PR to update it so we can see the warning gone :)