The html package (aka x/net/html) prior to 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of <template><object>, <template><applet>, or <template><marquee>. This is related to HTMLTreeBuilder.cpp in WebKit.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
golang net |
||
fedoraproject fedora 28 |
||
fedoraproject fedora 29 |
Vulmon