CVE-2018-17848

CVE-2018-17848 is a high-severity vulnerability affecting the html package (x/net/html) in Go, including its use in Fedora and Golang products. It allows an unauthenticated attacker to trigger a denial-of-service condition (panic: runtime error) by providing specially crafted HTML input containing a malformed <math><template><mn><b></template> sequence during an html.Parse call. While the CVSS score is 7.5, indicating a high impact on availability, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.