-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability manifests in stack pop operations during HTML parsing. Both stack implementations (insertionModeStack and nodeStack) show panic traces in the provided crash reports. The core issue is lack of length validation before stack manipulation, which would appear in profiling as repeated calls to these pop methods followed by panic. The CVE description explicitly calls out insertionModeStack.pop, while the GitHub issue demonstrates nodeStack.pop failures with different HTML inputs.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| golang.org/x/net | go | < 0.0.0-20190125002852-4b62a64f59f7 | 0.0.0-20190125002852-4b62a64f59f7 |
A Semantic Attack on Google Gemini - Read the Latest Research