Executive brief
Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net
Affected products
- Go golang.org/x/net
Junglewise Threat Intelligence
CVE-2025-22872: GO-2025-3595 - Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net
CVE-2025-22872 · Severity: medium · CVSS 4 · Published 2025-04-16
Technologies: golang.org/x/net (Go). Vendors: Go.
Related threats
- Google Go x/net denial of service in dnsmessage parsing
- Golang net/html Cross-Site Scripting via incorrect namespaced element parsing
- Google Go x/net/html XSS via incorrect foreign content parsing
- Go x/net idna privilege escalation via Punycode decoding
- Golang x/net/html XSS via duplicate attribute parsing