Go/github.com/nyaruka/phonenumbers CVE-2025-10954: medium 5.3, EPSS 0.46%
github.com/nyaruka/phonenumbers Vulnerable to Improper Validation of Syntactic Correctness of Input
Action: Upgrade github.com/nyaruka/phonenumbers to 1.2.2 or later.
go get github.com/nyaruka/phonenumbers@v1.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.2 | - |
Fixed versions
| 1.2.2 |
Sources
- osv: GHSA-fmjh-f678-cv3x
- https://nvd.nist.gov/vuln/detail/CVE-2025-10954
- https://github.com/nyaruka/phonenumbers/issues/148
- https://github.com/nyaruka/phonenumbers/commit/0479e35488e8a002a261cdb515ef8a7f80ca37fe
- https://github.com/nyaruka/phonenumbers
- https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNYARUKAPHONENUMBERS-6084070
CVE-2025-10954 · published · modified · JSON