Improper resource allocation In golang.org/x/net/html
Description
golang.org/x/net/html has a Quadratic Parsing Complexity issue The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to Denial of Service (DoS) if an attacker provides specially crafted HTML content.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | - | ||
 go | 0.45.0 | ||
debian 12 | - | ||
debian 14 | 1:0.47.0-1 | ||
go | 0.45.0 | ||
 rpm rhel10 | - | - | |
rpm rhel9 | - | - | |
rpm rhel10 | - | - | |
rpm rhel9 | - | - | |
rpm rhel10 | - | - |
1-10 of 19
10
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3. 4.