VDB
DEBIAN-CVE-2020-29509
DEBIAN-CVE-2020-29509
PUBLISHED
CVSS 5.599999904632568 MEDIUM
The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
Risk Scores
CVSS v3.1
5.599999904632568
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | golang-1.15 | 0, 1.15.15-1, 1.15.15-1 |
Timeline
- Dec 14, 2020 CVE Published
- Apr 28, 2026 CVE Updated