Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/golang-golang-x-text@0.3.7-1
purl pkg:deb/debian/golang-golang-x-text@0.3.7-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-2dh6-y93r-2ucc golang.org/x/text/language Out-of-bounds Read vulnerability golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack. CVE-2021-38561
GHSA-ppp9-7jff-5vj2
VCID-6rzu-td8d-1ycn Multiple vulnerabilities have been discovered in Gitea, the worst of which could lead to denial of service CVE-2022-32149
GHSA-69ch-w2m2-3vjp

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:13:30.596494+00:00 Debian Importer Fixing VCID-2dh6-y93r-2ucc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:51:48.434024+00:00 Debian Importer Fixing VCID-6rzu-td8d-1ycn https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T06:06:28.777561+00:00 Debian Importer Fixing VCID-2dh6-y93r-2ucc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T05:49:55.068875+00:00 Debian Importer Fixing VCID-6rzu-td8d-1ycn https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-08T19:29:05.373866+00:00 Debian Importer Fixing VCID-2dh6-y93r-2ucc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T18:11:01.592331+00:00 Debian Importer Fixing VCID-6rzu-td8d-1ycn https://security-tracker.debian.org/tracker/data/json 38.1.0