Skip to content

Bump github.com/gorilla/schema from 1.0.2 to 1.4.1 - #44

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/github.com/gorilla/schema-1.4.1
Open

Bump github.com/gorilla/schema from 1.0.2 to 1.4.1#44
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/github.com/gorilla/schema-1.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/gorilla/schema from 1.0.2 to 1.4.1.

Release notes

Sourced from github.com/gorilla/schema's releases.

v1.4.1

Security Release

Fixes an issue where sparse slice deserialization can cause memory exhaustion CVE-2024-37298

Thanks to @​AlexVasiluta for the report and following responsible disclosure.

Full Changelog: gorilla/schema@v1.4.0...v1.4.1

v1.4.0

What's Changed

New Contributors

Full Changelog: gorilla/schema@v1.3.0...v1.3.1

v1.3.0

What's Changed

New Contributors

Full Changelog: gorilla/schema@v1.2.1...v1.3.0

Release v1.2.1

What's Changed

New Contributors

Full Changelog: gorilla/schema@v1.2.0...v1.2.1

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/gorilla/schema-1.4.1 branch from 44814d5 to addb1c3 Compare August 1, 2026 03:03
Bumps [github.com/gorilla/schema](https://github.com/gorilla/schema) from 1.0.2 to 1.4.1.
- [Release notes](https://github.com/gorilla/schema/releases)
- [Commits](gorilla/schema@v1.0.2...v1.4.1)

---
updated-dependencies:
- dependency-name: github.com/gorilla/schema
  dependency-version: 1.4.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/gorilla/schema-1.4.1 branch from addb1c3 to 40aa1b1 Compare August 1, 2026 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants