Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
Invoking duplicate attributes can cause XSS in golang.org/x/net/html
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html