Improper Input Validation The advisory has been revoked - it doesn't affect any version of package kompose (opens in a new tab)

Threat Intelligence

2.77% (85^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL10-KOMPOSE-9864710
published28 Apr 2025
disclosed26 Sept 2018

Report a new vulnerability Found a mistake?

Introduced: 26 Sep 2018

CVE-2018-17075 (opens in a new tab) CWE-20 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kompose package and not the kompose package as distributed by RHEL.

The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of <template><object>, <template><applet>, or <template><marquee>. This is related to HTMLTreeBuilder.cpp in WebKit.