{"id":"GO-2025-3987","revision":"d79249e59f1647f8aed518fd2ac58b87","records":[{"revision":"d79249e59f1647f8aed518fd2ac58b87","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-3987","aliases":["CVE-2025-10954","GHSA-fmjh-f678-cv3x"],"title":"Vulnerable to Improper Validation of Syntactic Correctness of Input in github.com/nyaruka/phonenumbers","description":"Vulnerable to Improper Validation of Syntactic Correctness of Input in github.com/nyaruka/phonenumbers","state":0,"publishedAt":"2025-11-05T18:41:07+00:00","modifiedAt":"2026-02-04T03:46:59.754495+00:00","affected":[{"ecosystem":"Go","name":"github.com/nyaruka/phonenumbers","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.2.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-fmjh-f678-cv3x","https://github.com/nyaruka/phonenumbers/commit/0479e35488e8a002a261cdb515ef8a7f80ca37fe","https://github.com/nyaruka/phonenumbers/issues/148","https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNYARUKAPHONENUMBERS-6084070"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-3987","license":"OSV · upstream source license applies","key":"osv:GO-2025-3987","identifiers":["GO-2025-3987","CVE-2025-10954","GHSA-fmjh-f678-cv3x"]},"retained":false,"historicalAffected":[]}],"coverage":[]}