| Package | Affected versions | Patched versions |
|---|---|---|
| go | ≤ 1.15 |
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free