Go/github.com/nyaruka/phonenumbers CVE-2025-10954: high 7.5, EPSS 0.46%
Vulnerable to Improper Validation of Syntactic Correctness of Input in github.com/nyaruka/phonenumbers
Action: Upgrade github.com/nyaruka/phonenumbers to 1.2.2 or later.
go get github.com/nyaruka/phonenumbers@v1.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.2 | - |
Fixed versions
| 1.2.2 |
Sources
- osv: GO-2025-3987
- nvd: CVE-2025-10954
- https://github.com/advisories/GHSA-fmjh-f678-cv3x
- https://github.com/nyaruka/phonenumbers/commit/0479e35488e8a002a261cdb515ef8a7f80ca37fe
- https://github.com/nyaruka/phonenumbers/issues/148
- https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNYARUKAPHONENUMBERS-6084070
CVE-2025-10954 · published · modified · JSON