CVE-2018-17846
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification.
HIGH · CVSS 7.5
EPSS 0.0065
Schedule remediation
- CVSS base score ≥ 7.0
Sigma rules0
YARA rules0