-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| golang.org/x/net | go | < 0.0.0-20180925071336-cf3bd585ca2a | 0.0.0-20180925071336-cf3bd585ca2a |
Miggo AIRoot Cause AnalysisThe stack trace in the issue shows panic occurs in parseCurrentToken at parse.go:2180. The commit fix (cf3bd585) modifies template insertion mode handling in this function, adding HTML namespace checks. This matches the vulnerability pattern of mishandling <math><template> nesting. While Parse/ParseFragment are entry points, the root cause lies in parseCurrentToken's template handling logic.