Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/golang.org/x/text@0.3.7
purl pkg:golang/golang.org/x/text@0.3.7
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-2dh6-y93r-2ucc golang.org/x/text/language Out-of-bounds Read vulnerability golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack. CVE-2021-38561
GHSA-ppp9-7jff-5vj2

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:05:51.681524+00:00 GithubOSV Importer Fixing VCID-2dh6-y93r-2ucc https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/12/GHSA-ppp9-7jff-5vj2/GHSA-ppp9-7jff-5vj2.json 38.0.0