Skip to content

Question about go-mssqldb version update plan #177

Description

@x37642085

@jinzhu Hi there,

I’m using go-gorm/sqlserver, which depends on go-mssqldb v1.8.2. That go-mssqldb version has some known security issues:

CVE-2024-35255 (github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.1)
CVE-2025-30204 (github.com/golang-jwt/jwt/v5 v5.0.0 / v5.2.1)
Since go-mssqldb v1.9.1+ has already fixed these, I was wondering if there are any plans to update go-gorm/sqlserver to use the newer version.

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions