Search for packages
| purl | pkg:deb/debian/golang-golang-x-net-dev@1:0.0%2Bgit20161013.8b4af36%2Bdfsg-3 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3638-xnhc-aaae
Aliases: CVE-2018-17846 GHSA-vfw5-hrgq-h5wf |
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification. |
Affected by 2 other vulnerabilities. |
|
VCID-bg6y-ezra-aaaf
Aliases: CVE-2018-17847 GHSA-4r78-hx75-jjj2 |
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out of range) in (*nodeStack).pop in node.go, called from (*parser).clearActiveFormattingElements, during an html.Parse call. |
Affected by 2 other vulnerabilities. |
|
VCID-mscq-bf1w-aaap
Aliases: CVE-2018-17848 GHSA-mv93-wvcp-7m7r |
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a "panic: runtime error" (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T16:37:44.239631+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:09:02.814797+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:32:25.097068+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T00:50:27.395024+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | None | 36.1.3 |
| 2025-06-20T22:44:10.871778+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | None | 36.1.3 |
| 2025-06-20T21:12:12.487794+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | None | 36.1.3 |
| 2025-06-08T09:23:19.367639+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:02:37.291653+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:26:27.883997+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T18:12:49.342180+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | None | 36.1.0 |
| 2025-06-07T16:08:06.709639+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | None | 36.1.0 |
| 2025-06-07T14:36:49.164778+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | None | 36.1.0 |
| 2025-04-08T07:55:35.417936+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:34:51.354565+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:58:45.937914+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T16:50:12.178105+00:00 | Debian Oval Importer | Affected by | VCID-3638-xnhc-aaae | None | 36.0.0 |
| 2025-04-07T14:39:22.273327+00:00 | Debian Oval Importer | Affected by | VCID-mscq-bf1w-aaap | None | 36.0.0 |
| 2025-04-07T13:08:57.181643+00:00 | Debian Oval Importer | Affected by | VCID-bg6y-ezra-aaaf | None | 36.0.0 |