diff --git a/data/reports/GO-2021-0113.yaml b/data/reports/GO-2021-0113.yaml index 81a626c6..6572d17b 100644 --- a/data/reports/GO-2021-0113.yaml +++ b/data/reports/GO-2021-0113.yaml @@ -2,6 +2,7 @@ modules: - module: golang.org/x/text versions: - fixed: 0.3.7 + vulnerable_at: 0.3.6 packages: - package: golang.org/x/text/language symbols: @@ -10,7 +11,6 @@ modules: - MatchStrings - MustParse - ParseAcceptLanguage - skip_fix: 'TODO: fill this out [or set vulnerable_at to derive symbols]' description: | Due to improper index calculation, an incorrectly formatted language tag can cause Parse to panic via an out of bounds read. If Parse is used to process untrusted user inputs,