CVE-2018-17847
01.10.2018, 08:29
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out of range) in (*nodeStack).pop in node.go, called from (*parser).clearActiveFormattingElements, during an html.Parse call.Enginsight
| Vendor | Product | Version |
|---|---|---|
| golang | net | 𝑥 ≤ 2018-09-25 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References