> CVE-2025-47911

« BACK_TO_HOME
PUBLISHED
2026-02-05 18:16
MODIFIED
2026-02-05 18:16
EPSS (Prob. Exploit)
0.56%
Top 53.1%
DATA SOURCES:
NVD 🔗 2026-02-05 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04 OSV 🔗 2026-11-08

> DESCRIPTION

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Cluster Observability Operator 1.5.0
The Cluster Observability Operator (COO) is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions (CRDs).
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update
Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
A new version of OpenShift API for Data Protection (OADP) is now available.
Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2
cert-manager Operator for Red Hat OpenShift 1.18.2
Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2
cert-manager Operator for Red Hat OpenShift 1.17.2
Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2
cert-manager Operator for Red Hat OpenShift 1.17.2

> GITHUB SECURITY ADVISORY

GHSA-w4gw-w5jq-g9jh MODERATE

golang.org/x/net/html has a Quadratic Parsing Complexity issue

AFFECTED PACKAGES:
GO / golang.org/x/net/html
< 0.45.0
Fixed in: 0.45.0

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
ALIASES:
GHSA-w4gw-w5jq-g9jh, GO-2026-4440

> HISTORIQUE DES MODIFICATIONS

Première apparition
05/02/2026 18:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 9 months ago

> REFERENCES

https://github.com/golang/vulndb/issues/4440
https://go.dev/cl/709876
https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c
https://pkg.go.dev/vuln/GO-2026-4440
« BACK_TO_HOME