{"action":"Upgrade golang.org/x/net to 0.0.0-20190125091013-d26f9f9a57f3 or later.","affected":[{"introduced":"0"}],"component":"golang.org/x/net","cve_ids":["CVE-2018-17846"],"ecosystem":"Go","epss":0.02515,"exploited":false,"fixed_versions":["0.0.0-20190125091013-d26f9f9a57f3"],"ghsa_id":"GHSA-vfw5-hrgq-h5wf","id":"tcs_01M5KFT2HQNRVF41MR8X3RH3FS","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2020-0014","https://go-review.googlesource.com/c/137275","https://go.googlesource.com/net/+/d26f9f9a57f3fab6a695bec0d84433c2c50f8bbf","https://go.dev/issue/27842"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2020-0014","url":"https://osv.dev/vulnerability/GO-2020-0014"}],"summary":"Infinite loop due to improper handling of \"select\" tags in golang.org/x/net/html"}