CVE-2023-3978

Improper rendering of text nodes in golang.org/x/net/html

published August 2, 2023

CVSS
—
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00851 · 57.8th percentile
Published
2023-08-02T19:48Z
EPSS history
Timeline
  • 02 AUG 19:48Z
    Improper rendering of text nodes in golang.org/x/net/html
    cvelistv5