Skip to content

chore(deps): update module golang.org/x/text to v0.41.0 [security] - #32

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-golang.org-x-text-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
golang.org/x/text v0.40.0 → v0.41.0 age confidence

Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

CVE-2026-56851 / GO-2026-6629

More information

Details

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from marcschaeferger as a code owner October 13, 2026 18:14
@renovate renovate Bot added dependencies Pull requests that update a dependency file golang labels Oct 13, 2026
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file golang

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants