GO
Product
golang.org/x/net/html
11
CVEs
0
On KEV
6.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 9Low 0
Watch
Add golang.org/x/net/html to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25680 | 6.5 | May 22 | Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html Affected: before 0.55.0 |
| CVE-2025-22872 | 6.5 | Apr 16 | Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net Affected: before 0.38.0 |
| CVE-2026-27136 | 6.1 | May 22 | Invoking duplicate attributes can cause XSS in golang.org/x/net/html Affected: before 0.55.0 |
| CVE-2026-25681 | 6.1 | May 22 | Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html Affected: before 0.55.0 |
| CVE-2026-42502 | 6.1 | May 22 | Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html Affected: before 0.55.0 |
| CVE-2026-42506 | 6.1 | May 22 | Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html Affected: before 0.55.0 |
| CVE-2025-58190 | 5.3 | Feb 5 | Infinite parsing loop in golang.org/x/net Affected: before 0.45.0 |
| CVE-2025-47911 | 5.3 | Feb 5 | Quadratic parsing complexity in golang.org/x/net/html Affected: before 0.45.0 |
| CVE-2024-45338 | 5.3 | Dec 18 | Non-linear parsing of case-insensitive content in golang.org/x/net/html Affected: before 0.33.0 |
Showing 9