High vulnerability in golang.org/x/text

[niting3c]

golang.org/x/text is being used by golang.org/x/net

golang.org/x/text which has a here vulnerability as reported here:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14040

Short-term and Long-term upgrade fix is available in v0.3.7 for golang.org/x/text
Similary update the golang.org/x/net

[Akaame]

The x/text package before 0.3.3 for Go has a vulnerability

golang.org/x/net version used in the project (golang.org/x/net v0.0.0-20210428140749-89ef3d95e781) already depends on (golang.org/x/text v0.3.6) though.

Here is the ref to go.mod: https://cs.opensource.google/go/x/net/+/89ef3d95e781148a0951956029c92a211477f7f9:go.mod

snyk also does not report this and go list -m all says that the project depends on v0.3.6.

[Inveracity]

It looks like a new vulnerability has found its way to 0.3.6
https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXTEXTINTERNALLANGUAGE-2400718