GO-2024-2536

See a problem?
Source
https://pkg.go.dev/vuln/GO-2024-2536
Import Source
https://vuln.go.dev/ID/GO-2024-2536.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2024-2536
Aliases
Published
2024-02-20T17:50:57Z
Modified
2024-05-20T16:03:47Z
Summary
Cross-site scripting in public API in github.com/rancher/norman
Details

Cross-site scripting in public API in github.com/rancher/norman

References
Credits
    • diego95root
    • kujalamathias

Affected packages

Go / github.com/rancher/norman

Package

Name
github.com/rancher/norman
View open source insights on deps.dev
Purl
pkg:golang/github.com/rancher/norman

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.0.0-20240207153100-3bb70b772b52

Ecosystem specific 

{
    "imports": [
        {
            "path": "github.com/rancher/norman/urlbuilder",
            "symbols": [
                "GetHost",
                "New",
                "ParseRequestURL"
            ]
        },
        {
            "path": "github.com/rancher/norman/api/writer",
            "symbols": [
                "HTMLResponseWriter.Write"
            ]
        }
    ]
}