HIGH7.5
GO-2021-0234
Infinite loop when decoding inputs in encoding/xml
Quick fix
GO-2021-0234 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.15.9Details
The Decode, DecodeElement, and Skip methods of an xml.Decoder provided by xml.NewTokenDecoder may enter an infinite loop when operating on a custom xml.TokenReader which returns an EOF in the middle of an open XML element.
Are you affected?
Enter the version of the package you're using.