Please recompile release with newer Go1.20 (multiple security warnings)

[sseide]

Hello,

Current release 0.12.4 throws multiple security warnings by some scanner. Even when they are not really a problems (e.g. only compile time or if used server side) it would be great to just recompile remco with a newer golang version to address these warnings. Otherwise all projects using this binary need to whitelist all of these findings:

• CVE-2023-39323 (fixed with golang 1.20.9)
• CVE-2023-39325 (fixed with golang 1.20.10)
• GHSA-4374-p667-p6c8 (same as CVE-2023-39325 / GO-2023-2102)
• CVE-2023-44487 (fixed with golang 1.20.10)
• GHSA-m425-mq94-257g (same as CVE-2023-44487)

Thanks,
Stefan Seide

[ahormazabal]

+1 here!!! We;re having some CVEs reported over remco, specifically GHSA-qppj-fm5r-hxr3

I see these fixes are already available in the main branch. Can we get a new release with those fixes?

[HeavyHorst]

Done! Sorry for the delay.