# Aeson / text-iso8601 have a vulnerability, let's update bounds

**URL:** <https://discourse.haskell.org/t/aeson-text-iso8601-have-a-vulnerability-lets-update-bounds/14627>\
**Category:** Announcements\
**Created:** [August 29, 2026, 10:02am UTC](https://discourse.haskell.org/t/aeson-text-iso8601-have-a-vulnerability-lets-update-bounds/14627 "2026-08-29T10:02:33Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![Ambrose](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.haskell.org/ambrose/32/5672_2.png) [@Ambrose](https://discourse.haskell.org/u/Ambrose)\
**Post date:** [August 29, 2026, 6:26pm UTC](https://discourse.haskell.org/t/aeson-text-iso8601-have-a-vulnerability-lets-update-bounds/14627/5 "2026-08-29T18:26:34Z")

</div>

[again](https://discourse.haskell.org/t/avoiding-cryptonite-verse-packages-in-your-dependency-closure/14526/2), it would be nice to have hackage be able to broadcast vulnerable versions to guide the solver away from them unless the user opts in to vulnerable code

---

_[View the full topic](https://discourse.haskell.org/t/aeson-text-iso8601-have-a-vulnerability-lets-update-bounds/14627)._