Skip to content

Commit 768c201

Browse files
tatianabTatiana Bradley
authored and
Tatiana Bradley
committed
data/reports: add vulnerable_at to GO-2021-0078.yaml
Aliases: CVE-2018-17075 Updates #78 Change-Id: I9ebe78fc9cb8e9ab29251d6e915a9503e7d3cac2 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/462621 Auto-Submit: Tatiana Bradley <[email protected]> Run-TryBot: Tatiana Bradley <[email protected]> TryBot-Result: Gopher Robot <[email protected]> Reviewed-by: Damien Neil <[email protected]> Reviewed-by: Tatiana Bradley <[email protected]>
1 parent 632cc58 commit 768c201

File tree

2 files changed

+6
-0
lines changed

2 files changed

+6
-0
lines changed

data/osv/GO-2021-0078.json

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,8 @@
3333
{
3434
"path": "golang.org/x/net/html",
3535
"symbols": [
36+
"Parse",
37+
"ParseFragment",
3638
"inBodyIM",
3739
"inFramesetIM"
3840
]

data/reports/GO-2021-0078.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,15 @@ modules:
22
- module: golang.org/x/net
33
versions:
44
- fixed: 0.0.0-20180816102801-aaf60122140d
5+
vulnerable_at: 0.0.0-20180811021610-c39426892332
56
packages:
67
- package: golang.org/x/net/html
78
symbols:
89
- inBodyIM
910
- inFramesetIM
11+
derived_symbols:
12+
- Parse
13+
- ParseFragment
1014
description: |
1115
The HTML parser does not properly handle "in frameset" insertion mode, and can be made
1216
to panic when operating on malformed HTML that contains <template> tags. If operating

0 commit comments

Comments
 (0)