Executive brief
Quadratic parsing complexity in golang.org/x/net/html
Affected products
- Go golang.org/x/net/html
- Go golang.org/x/net
Junglewise Threat Intelligence
CVE-2025-47911: GO-2026-4440 - Quadratic parsing complexity in golang.org/x/net/html
CVE-2025-47911 · Severity: low · CVSS 3.1 · Published 2026-02-05
Technologies: golang.org/x/net (Go). Vendors: Go.
Related threats
- Google Go x/net denial of service in dnsmessage parsing
- Golang net/html Cross-Site Scripting via incorrect namespaced element parsing
- Google Go x/net/html XSS via incorrect foreign content parsing
- Go x/net idna privilege escalation via Punycode decoding
- Golang x/net/html XSS via duplicate attribute parsing