Alpine/go: high 7.5
encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode,
Action: Upgrade go to 1.15.10-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.16.0 | - | - |
Fixed versions
| 1.15.10-r0 |
Sources
published · modified · JSON