CVE-2018-17847
golang.org/x/net/html Improper Validation of Array Index vulnerability
Summary
golang.org/x/net/html Improper Validation of Array Index vulnerability
Original description
The description as published by the source.
The html package (aka x/net/html) through 2018-09-25 in Go mishandles , leading to a "panic: runtime error" (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
golang.org/x/net
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.0-20190125002852-4b62a64f59f7"}]}]
References
- advisory nvd.nist.gov
- advisory nvd.nist.gov
- package github.com
- web github.com
- web go.dev
- web go.dev
- web go.googlesource.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web pkg.go.dev