nicksnyder / go-i18n

Translate your Go program into multiple languages.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Upgrade golang.org/x/text

mr-nick17 opened this issue · comments

Current version of go-i18n uses golang.org/x/text@v0.4.0, which has a vulnerability (https://pkg.go.dev/vuln/GO-2023-1988) in versions < v0.13.0

github.com/nicksnyder/go-i18n/v2@v2.2.1 requires
golang.org/x/text@v0.4.0 requires
golang.org/x/tools@v0.1.12 requires
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b

Thanks for the report. To unblock your project, you can always require a newer version of this dependency in your own go.mod.