Analysis and contextual insights are available on OpenCVE Cloud.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-w4gw-w5jq-g9jh | golang.org/x/net/html has a Quadratic Parsing Complexity issue |
Ubuntu USN |
USN-8089-1 | Go Networking vulnerabilities |
Ubuntu USN |
USN-8089-2 | Go Networking vulnerabilities |
Ubuntu USN |
USN-8089-3 | ADSys, Juju Core, LXD vulnerabilities |
Ubuntu USN |
USN-8900-1 | Go Networking vulnerabilities |
Wed, 18 Feb 2026 19:00:00 +0100
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Go
Go html |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:go:html:*:*:*:*:*:go:*:* | |
| Vendors & Products |
Go
Go html |
Thu, 12 Feb 2026 17:15:00 +0100
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 11 Feb 2026 01:15:00 +0100
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-400 | |
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Fri, 06 Feb 2026 13:15:00 +0100
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Golang
Golang net |
|
| Vendors & Products |
Golang
Golang net |
Thu, 05 Feb 2026 19:00:00 +0100
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content. | |
| Title | Quadratic parsing complexity in golang.org/x/net/html | |
| References |
|
Status: PUBLISHED
Assigner: Go
Published:
Updated: 2026-02-12T15:23:55.509Z
Reserved: 2025-05-13T23:31:29.597Z
Link: CVE-2025-47911
Updated: 2026-02-12T15:23:50.510Z
Status : Analyzed
Published: 2026-02-05T18:16:09.893
Modified: 2026-06-17T09:28:50.070
Link: CVE-2025-47911
OpenCVE Enrichment
Updated: 2026-02-06T13:05:03Z
-
CWE-400
Uncontrolled Resource Consumption
- NVD-CWE-noinfo
Github GHSA
Ubuntu USN