Zvonimir

For folks that can reproduce the issue, can you paste here your `go version -m govulncheck`? Similarly, can you reproduce the issue if you reinstall govulncheck with 1.22.0?

While we are investigating this more (the issue seems to be somewhere deep in the dependencies), we suggest folks reinstall govulncheck with go1.22 as a temporary workaround.

> Hi Team, > > I am still having this issue with govulncheck. Are there any fixes, Please? > > Retest With an Older Version of govulncheck (v1.0.1) - Status...

The issue happens when govulncheck is built with go1.21 and earlier but is run against go1.22 and later. There is a [change in semantics](https://tip.golang.org/doc/go1.22#language) for loops in go1.22. If govulncheck...

cc @tatianab

Note that this is a mirror repo and we don't accept pull requests. This is also something that would need a proposal. We are not looking to add ignore files...

I was able to reproduce the issue with the govulncheck command. It seems the crash happens in `api` module (the offending package is `k8s.io/dashboard/csrf`). I will look deeper into this....

This issue is due to a slight breakage of Go forward-compatibility promises: semantics for loops starting at go1.22 is not compatible with go1.21 and earlier. The only true fix is...