Asymmetric denial of service In golang.org/x/net/html
Description
golang.org/x/net/html NULL Pointer Dereference vulnerability The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 go | 0.0.0-20180816102801-aaf60122140d | ||
go | 0.0.0-20180816102801-aaf60122140d |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12.