This resolves the vulnerability detected in gojisvm/gojis#72 and only leaves gojisvm/gojis#75, which can be fixed in a future release of spf13/viper.