Search for packages
| purl | pkg:deb/debian/golang-golang-x-net-dev@1:0.0%2Bgit20160110.4fd4a9f-1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3638-xnhc-aaae
Aliases: CVE-2018-17846 GHSA-vfw5-hrgq-h5wf |
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification. |
Affected by 2 other vulnerabilities. |
|
VCID-bg6y-ezra-aaaf
Aliases: CVE-2018-17847 GHSA-4r78-hx75-jjj2 |
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out of range) in (*nodeStack).pop in node.go, called from (*parser).clearActiveFormattingElements, during an html.Parse call. |
Affected by 2 other vulnerabilities. |
|
VCID-mscq-bf1w-aaap
Aliases: CVE-2018-17848 GHSA-mv93-wvcp-7m7r |
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a "panic: runtime error" (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T16:37:44.230256+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:09:02.805740+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:32:25.086078+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T00:50:27.383730+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | None | 36.1.3 |
| 2025-06-20T22:44:10.861901+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | None | 36.1.3 |
| 2025-06-20T21:12:12.479035+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | None | 36.1.3 |
| 2025-06-08T09:23:19.358557+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:02:37.282667+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:26:27.874953+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T18:12:49.333279+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | None | 36.1.0 |
| 2025-06-07T16:08:06.701604+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | None | 36.1.0 |
| 2025-06-07T14:36:49.157232+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | None | 36.1.0 |
| 2025-04-08T07:55:35.393258+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:34:51.329639+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:58:45.912892+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T16:50:12.151435+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | None | 36.0.0 |
| 2025-04-07T14:39:22.246584+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | None | 36.0.0 |
| 2025-04-07T13:08:57.145706+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | None | 36.0.0 |