| Package | Affected versions | Patched versions |
|---|---|---|
| stdlib | ≥ 1.16.0-0, < 1.16.1< 1.15.9 | 1.16.11.15.9 |
| go | ≥ 1.16.0, < 1.16.1< 1.15.9 | 1.16.11.15.9 |
The Decode, DecodeElement, and Skip methods of an xml.Decoder provided by xml.NewTokenDecoder may enter an infinite loop when operating on a custom xml.TokenReader which returns an EOF in the middle of an open XML element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free