golang.org/x/net/html Infinite Loop vulnerability

높음 7.5CVE-2021-33194 · BIT-golang-2021-33194 · GHSA-83g2-8m93-v3w7 · Published 26/05/2021 · updated 17/06/2026

요약

CVE-2021-33194은(는) golang.org/x/net, go (golang)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 7.5%, 전체 취약점의 94.5%보다 높음.
조치: 0.0.0-20210520170846-37e1c6afe023 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
golang.org/x/net Go	`< 0.0.0-20210520170846-37e1c6afe023`	`0.0.0-20210520170846-37e1c6afe023`
go golang	`≥ 1.16.0, ≤ 1.16.4≤ 1.15.12`	No fix yet

Description

Go through 1.15.12 and 1.16.x through 1.16.4 has a golang.org/x/net/html infinite loop via crafted ParseFragment input.

NVD description

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

References

golang.org/x/net의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

golang.org/x/net

< 0.0.0-20210520170846-37e1c6afe023

0.0.0-20210520170846-37e1c6afe023

golang

≥ 1.16.0, ≤ 1.16.4≤ 1.15.12

No fix yet

golang.org/x/net의 다른 취약점

모두 보기 →