Found CVE-2020-14040 in current package

[adityasharma1912]

gopacket is using an old version of x/net lib:

golang.org/x/net v0.0.0-20190620200207-3b0461eec859

which in turn uses the following libraries(saw dependencies using "go mod graph" command):

golang.org/x/[email protected] golang.org/x/[email protected] golang.org/x/[email protected] golang.org/x/[email protected] golang.org/x/[email protected] golang.org/x/[email protected]

Out of those: "golang.org/x/[email protected]" has CVE-2020-14040 vulnerability

[FeldrinH]

This library is no longer maintained (see #1016). Might be worth checking out https://github.com/gopacket/gopacket, which is a more actively maintained fork.

[adityasharma1912]

thank you @FeldrinH