Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerability published for golang-golang-x-text in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
Check your installed stack and versions against the current vulnerability feeds.