We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 632cc58 commit 768c201Copy full SHA for 768c201
data/osv/GO-2021-0078.json
@@ -33,6 +33,8 @@
33
{
34
"path": "golang.org/x/net/html",
35
"symbols": [
36
+ "Parse",
37
+ "ParseFragment",
38
"inBodyIM",
39
"inFramesetIM"
40
]
data/reports/GO-2021-0078.yaml
@@ -2,11 +2,15 @@ modules:
2
- module: golang.org/x/net
3
versions:
4
- fixed: 0.0.0-20180816102801-aaf60122140d
5
+ vulnerable_at: 0.0.0-20180811021610-c39426892332
6
packages:
7
- package: golang.org/x/net/html
8
symbols:
9
- inBodyIM
10
- inFramesetIM
11
+ derived_symbols:
12
+ - Parse
13
+ - ParseFragment
14
description: |
15
The HTML parser does not properly handle "in frameset" insertion mode, and can be made
16
to panic when operating on malformed HTML that contains <template> tags. If operating
0 commit comments