Non-linear parsing of case-insensitive content in golang.org/x/net/html
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
- Auf 0.9.2~20.04.2ubuntu0.1 aktualisieren
Veröffentlicht Aktualisiert