Great to see the @golang community taking dependency vulnerabilites seriously - https://go.dev/security/vuln/