Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28814
HistoryDec 24, 2020 - 9:53 a.m.

Undefined Behavior

2020-12-2409:53:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.001 Low

EPSS

Percentile

43.1%

encoding/xml in github.com/golang/go is vulnerable to undefined behavior. The vulnerability is possible because it does not correctly preserve the semantics of directives during tokenization round-trips.

CPENameOperatorVersion
github.com/golang/goeqHEAD