Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28813
HistoryDec 24, 2020 - 9:45 a.m.

Undefined Behavior

2020-12-2409:45:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

0.001 Low

EPSS

Percentile

43.1%

encoding/xml in github.com/golang/go is vulnerable to undefined behavior. The vulnerability is possible because it does not correctly preserve the semantics of directives during tokenization round-trips.

CPENameOperatorVersion
github.com/golang/golego1.15.6