CVE-2023-3978 (published 2023-08-02T19:48:56.676Z)
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.
Affected products: Vendor: golang.org/x/net
Product: golang.org/x/net/html
Versions: 0