| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/dhowden/tag | < 0.0.0-20201120070457-d52dcb253c63 | 0.0.0-20201120070457-d52dcb253c63 |
| tag | < 2020-11-19 | 2020-11-19 |
Due to improper bounds checking, a number of methods in dhowden tag before 0.0.0-20201120070457-d52dcb253c63 can trigger a panic due to attempted out-of-bounds reads. If the package is used to parse user supplied input, this may be used as a vector for a denial of service attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free