Executive brief
Non-linear parsing of case-insensitive content in golang.org/x/net/html
Affected products
- Go golang.org/x/net/html
- Go golang.org/x/net
Junglewise Threat Intelligence
CVE-2024-45338: GO-2024-3333 - Non-linear parsing of case-insensitive content in golang.org/x/net/html
CVE-2024-45338 · Severity: medium · CVSS 4 · Published 2024-12-18
Technologies: golang.org/x/net (Go). Vendors: Go.
Related threats
- Google Go x/net denial of service in dnsmessage parsing
- Golang net/html Cross-Site Scripting via incorrect namespaced element parsing
- Google Go x/net/html XSS via incorrect foreign content parsing
- Go x/net idna privilege escalation via Punycode decoding
- Golang x/net/html XSS via duplicate attribute parsing