Go/golang.org/x/net CVE-2018-17847, CVE-2018-17848: unknown, EPSS 2.36%

Panic when parsing certain inputs in golang.org/x/net/html

Action: Upgrade golang.org/x/net to 0.0.0-20190125002852-4b62a64f59f7 or later.

go get golang.org/x/net@v0.0.0-20190125002852-4b62a64f59f7

Affected

Fixed versions

Sources

• osv: GO-2022-0197
• https://go.dev/cl/159397
• https://go.googlesource.com/net/+/4b62a64f59f73840b9ab79204c94fee61cd1ba2c
• https://go.dev/issue/27846

CVE-2018-17847, CVE-2018-17848 · published 2022-07-01T20:15:19Z · modified 2026-02-04T04:06:39.203335Z · JSON