Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-29509 2 Golang, Netapp 2 Go, Trident 2024-11-21 9.8 Critical
The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.