-- go.mod --
module example.com/retractdep

go 1.12

// Remote-triggered crash in package foo. See CVE-2021-01234.
retract v1.0.0
-- a.go --
package a

const A = "a"