Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse() function.
CVSS 4.0MEDIUM 6.9·Network·No auth·No interaction·EPSS 0.00455·Published 2025-09-27·Fixed in 1.2.2CWE-1286