x/vulndb: potential Go vuln in golang.org/x/net: GHSA-2wrh-6pvc-2jm9

[GoVulnBot]

In GitHub Security Advisory GHSA-2wrh-6pvc-2jm9, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
golang.org/x/net	0.13.0	< 0.13.0

Cross references:

• Module golang.org/x/net appears in issue dummy issue #14
• Module golang.org/x/net appears in issue dummy issue #78
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in Go Standard Library (package not identified): CVE-2021-33194 #238
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in golang.org/x/net: CVE-2018-17142 #192
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in golang.org/x/net: CVE-2018-17143 #193
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in "Go Standard Library (package not identified)": CVE-2018-17847 #197
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in Go Standard Library (package not identified): CVE-2021-31525 #236
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in std: CVE-2021-44716 #288
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in std: CVE-2019-9512, CVE-2019-9514 #536
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in std: CVE-2022-27664 #969
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in std: CVE-2022-41717 #1144
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in golang.org/x/net/http2/h2c: CVE-2022-41721 #1495
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in net/http: CVE-2022-41723 #1571
• CVE-2023-3978 appears in issue x/vulndb: potential Go vuln in golang.org/x/net/html: CVE-2023-3978 #1988
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in golang.org/x/net/html: CVE-2023-3978 #1988
• Module golang.org/x/net appears in issue x/vulndb: potential Go vuln in net/http: CVE-2023-39325 #2102

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: golang.org/x/net
      versions:
        - fixed: 0.13.0
      vulnerable_at: 0.12.0
      packages:
        - package: golang.org/x/net
summary: Improper rendering of text nodes in golang.org/x/net/html
cves:
    - CVE-2023-3978
ghsas:
    - GHSA-2wrh-6pvc-2jm9
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2023-3978
    - fix: https://go.dev/cl/514896
    - report: https://go.dev/issue/61615
    - web: https://pkg.go.dev/vuln/GO-2023-1988
    - advisory: https://github.com/advisories/GHSA-2wrh-6pvc-2jm9

[jba]

Duplicate of #1988