Nancy marking downstream dependency as vulnerable #256
Description
Issues with pkg:golang/github.com/mitchellh/[email protected]
CVE-2025-11065
Description: github.com/go-viper/mapstructure - Generation of Error Message Containing Sensitive Information
Score: 5.3
% go mod why github.com/mitchellh/mapstructure
# github.com/mitchellh/mapstructure
<my package>
github.com/IBM/go-sdk-core/v5/core
github.com/go-openapi/strfmt
github.com/mitchellh/mapstructure
As of v5.21.0 (latest) this is an issue.