x/vulndb: potential Go vuln in golang.org/x/net: CVE-2018-17142

[GoVulnBot]

In CVE-2018-17142, the reference URL [Go Standard Library (package not identified)](Go Standard Library (package not identified)) (and possibly others) refers to something in Go.

module: std
package: Go Standard Library (package not identified)
description: |
  The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "panic: runtime error" in parseCurrentToken in parse.go during an html.Parse call.
cves:
- CVE-2018-17142
links:
  context:
  - https://go.dev/issue/27702
  - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LREEWY6KNLHRWFZ7OT4HVLMVVCGGUHON/
  - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKRCI7WIOCOCD3H7NXWRGIRABTQOZOBK/

See doc/triage.md
for instructions on how to triage this report.

[gopherbot]

Change https://go.dev/cl/415215 mentions this issue: x/vulndb: add reports/GO-2022-0192.yaml for CVE-2018-17142