CVE-2021-33194

ADVISORY - github

Summary

Go through 1.15.12 and 1.16.x through 1.16.4 has a golang.org/x/net/html infinite loop via crafted ParseFragment input.

EPSS Score⁠: 0.00036 (0.090)

ADVISORY - nist

Loop with Unreachable Exit Condition ('Infinite Loop')

ADVISORY - github

Loop with Unreachable Exit Condition ('Infinite Loop')

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Loop with Unreachable Exit Condition ('Infinite Loop')

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

Loop with Unreachable Exit Condition ('Infinite Loop')

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.