PT-2021-17668

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.15.9 Go versions 1.16.x prior to 1.16.1 Description: The issue arises when a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element, potentially causing an infinite loop in the Decode,...