CVE-2021-38561 lib:golang.org/x/text

usr/local/bin/sops_3.7.1 (gobinary)

Total: 2 (UNKNOWN: 1, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

+-----------------------------+------------------+----------+---------------------+---------------+---------------------------------------+
|           LIBRARY           | VULNERABILITY ID | SEVERITY |  INSTALLED VERSION  | FIXED VERSION |                 TITLE                 |
+-----------------------------+------------------+----------+---------------------+---------------+---------------------------------------+
| github.com/dgrijalva/jwt-go | CVE-2020-26160   | HIGH     | v3.2.0+incompatible |               | jwt-go: access restriction            |
|                             |                  |          |                     |               | bypass vulnerability                  |
|                             |                  |          |                     |               | -->avd.aquasec.com/nvd/cve-2020-26160 |
+-----------------------------+------------------+----------+---------------------+---------------+---------------------------------------+
| golang.org/x/text           | CVE-2021-38561   | UNKNOWN  | v0.3.3              | 0.3.7         | -->avd.aquasec.com/nvd/cve-2021-38561 |
+-----------------------------+------------------+----------+---------------------+---------------+---------------------------------------+

CVE-2021-38561

The report names sops_3.7.1, golang.org/x/text v0.3.3, and v0.3.7 as the fixed version, but no source file or test. Locate the dependency metadata for this binary, update or verify the dependency, and confirm that a vulnerability scan no longer reports CVE-2021-38561.