Golang

Products

ProductCVEsExploitedLatest
Go3–Dec 14, 2020

Exploited and recent CVEs

  • CVE-2020-29509 Critical 9.8 The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that b 2.1%
  • CVE-2020-29511 Critical 9.8 The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that beh 2.0%
  • CVE-2020-29510 Critical 9.8 The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave i 2.1%