CVE-2021-33194 @ GoModules-golang.org/x/net-v0.0.0-20190404232315-eb5bcb51f2a3

[danielgerb]

Vulnerable Package issue exists @ GoModules-golang.org/x/net-v0.0.0-20190404232315-eb5bcb51f2a3 in branch main

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

Namespace: danielgerb
Repository: ast-advanced-lab
Repository Url: https://github.com/danielgerb/ast-advanced-lab
CxAST-Project: danielgerb/ast-advanced-lab
CxAST platform scan: fca858a3-945e-4577-825e-61f9d83aa917
Branch: main
Application: ast-advanced-lab
Severity: HIGH
State: NOT_IGNORED
Status: NEW
CWE: CWE-835

---

Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH

---

References
Mail Thread
Commit
Issue
Issue