CVE-2023-3978: Golang Networking

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.

Affected products

• Golang Networking: before 0.13.0 (fixed in 0.13.0)

Published 2023-08-02. Last modified 2026-06-17.