VDB
Sign up
—

GO-2022-1002

Panic in github.com/pandatix/go-cvss

Quick fix

GO-2022-1002 — github.com/pandatix/go-cvss: upgrade to the fixed version with the command below.

go get github.com/pandatix/go-cvss@v0.4.0

Details

ParseVector can panic when provided with invalid input.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/pandatix/go-cvss
Introduced in: 0.2.0Fixed in: 0.4.0
Fixgo get github.com/pandatix/go-cvss@v0.4.0

References