HTML Parsing Vulnerability in Go's x/net/html Package
CVE-2018-17142

7.5HIGH

Key Information:

Vendor: Golang
Status: Net
Vendor: CVE Published:; 17 September 2018

What is CVE-2018-17142?

A vulnerability in the x/net/html package of Go, through the date of September 17, 2018, arises from improper handling of specific HTML elements. When parsing certain constructs such as , , and , the library encounters a 'panic: runtime error', culminating in an unexpected termination of the parsing operation. This can potentially be exploited to disrupt web applications utilizing this package.