{"action":"Upgrade golang.org/x/net to 0.0.0-20190125002852-4b62a64f59f7 or later.","affected":[{"introduced":"0"}],"component":"golang.org/x/net","cve_ids":["CVE-2018-17847","CVE-2018-17848"],"ecosystem":"Go","epss":0.02364,"exploited":false,"fixed_versions":["0.0.0-20190125002852-4b62a64f59f7"],"ghsa_id":"GHSA-4r78-hx75-jjj2","id":"tcs_01M5KFTSYCCACP9ZNZA8A7282P","modified_at":"2026-02-04T04:06:39.203335Z","published_at":"2022-07-01T20:15:19Z","references":["https://osv.dev/vulnerability/GO-2022-0197","https://go.dev/cl/159397","https://go.googlesource.com/net/+/4b62a64f59f73840b9ab79204c94fee61cd1ba2c","https://go.dev/issue/27846"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0197","url":"https://osv.dev/vulnerability/GO-2022-0197"}],"summary":"Panic when parsing certain inputs in golang.org/x/net/html"}