PT-2025-54475 · Google+3 · Golang.Org/X/Net/Html+3

Guido Vranken

·

CVE-2025-58190

·

Publicado

2025-10-08

·

Atualizado

2026-07-30

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Nome do Software Vulnerável e Versões Afetadas golang.org/x/net/html (versões afetadas não especificadas)
Descrição A função html.Parse pode entrar em um loop infinito de análise ao processar entradas HTML específicas. Isso pode resultar em uma negação de serviço (DoS) se um atacante fornecer conteúdo HTML especialmente criado.
Recomendações No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Exploit

DoS

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

AZL-76788
AZL-76790
AZL-76799
AZL-76805
AZL-76811
AZL-76827
AZL-76839
AZL-76851
AZL-76856
AZL-76874
AZL-76878
AZL-76880
AZL-76889
AZL-76901
AZL-76907
AZL-76913
AZL-76919
AZL-76925
AZL-76931
AZL-76937
AZL-76947
AZL-76958
AZL-76965
AZL-76980
AZL-76988
AZL-77000
AZL-77010
AZL-77013
AZL-77021
AZL-77040
AZL-77049
AZL-77055
AZL-77064
AZL-77073
AZL-77085
AZL-77093
AZL-77102
BDU:2026-05686
CLEANSTART-2026-AB43319
CLEANSTART-2026-AE87452
CLEANSTART-2026-AN32474
CLEANSTART-2026-AT12816
CLEANSTART-2026-BB83999
CLEANSTART-2026-BE68531
CLEANSTART-2026-BM53321
CLEANSTART-2026-CB01846
CLEANSTART-2026-CD71342
CLEANSTART-2026-CM33443
CLEANSTART-2026-DG06447
CLEANSTART-2026-DG85765
CLEANSTART-2026-DM93480
CLEANSTART-2026-EJ83238
CLEANSTART-2026-EJ93145
CLEANSTART-2026-FM65506
CLEANSTART-2026-GY76045
CLEANSTART-2026-HA09227
CLEANSTART-2026-HK71313
CLEANSTART-2026-HP74907
CLEANSTART-2026-HT21055
CLEANSTART-2026-HX97842
CLEANSTART-2026-HZ73294
CLEANSTART-2026-JB52011
CLEANSTART-2026-JD68539
CLEANSTART-2026-JK84667
CLEANSTART-2026-JL47330
CLEANSTART-2026-JQ70227
CLEANSTART-2026-KJ02127
CLEANSTART-2026-KJ85611
CLEANSTART-2026-LO63022
CLEANSTART-2026-LS00044
CLEANSTART-2026-LU57861
CLEANSTART-2026-MF20926
CLEANSTART-2026-MI82983
CLEANSTART-2026-MQ21261
CLEANSTART-2026-MW42038
CLEANSTART-2026-MX70474
CLEANSTART-2026-NB78893
CLEANSTART-2026-NG75665
CLEANSTART-2026-OK95571
CLEANSTART-2026-OU18540
CLEANSTART-2026-PK48502
CLEANSTART-2026-QA19540
CLEANSTART-2026-QN98167
CLEANSTART-2026-QU88766
CLEANSTART-2026-RF96040
CLEANSTART-2026-RV11606
CLEANSTART-2026-RY70255
CLEANSTART-2026-SA81922
CLEANSTART-2026-SQ24713
CLEANSTART-2026-SQ68600
CLEANSTART-2026-TD06078
CLEANSTART-2026-TM31143
CLEANSTART-2026-UG20989
CLEANSTART-2026-UO31069
CLEANSTART-2026-VU08393
CLEANSTART-2026-VU90450
CLEANSTART-2026-VX15911
CLEANSTART-2026-WA48911
CLEANSTART-2026-WK32717
CLEANSTART-2026-WO16430
CLEANSTART-2026-WS58809
CLEANSTART-2026-XP01012
CLEANSTART-2026-XV65906
CLEANSTART-2026-YG73853
CLEANSTART-2026-YL47233
CLEANSTART-2026-YP16651
CLEANSTART-2026-YQ26872
CLEANSTART-2026-ZA63260
CLEANSTART-2026-ZK75486
CLEANSTART-2026-ZN46983
CLEANSTART-2026-ZR76960
CLEANSTART-2026-ZU45532
CLEANSTART-2026-ZW09225
CLEANSTART-2026-ZW38648
CVE-2025-58190
GO-2026-4441
OPENSUSE-RU-2026:20010-1
OPENSUSE-SU-2025:15607-1
OPENSUSE-SU-2025:15616-1
OPENSUSE-SU-2025:15617-1
OPENSUSE-SU-2025:15618-1
OPENSUSE-SU-2025:15619-1
OPENSUSE-SU-2025:15620-1
OPENSUSE-SU-2025:15654-1
OPENSUSE-SU-2025:15669-1
OPENSUSE-SU-2025:15709-1
OPENSUSE-SU-2025:15729-1
OPENSUSE-SU-2025:15730-1
OPENSUSE-SU-2025:15743-1
OPENSUSE-SU-2025:15779-1
OPENSUSE-SU-2025:15830-1
OPENSUSE-SU-2025:15852-1
OPENSUSE-SU-2025:15854-1
OPENSUSE-SU-2025:20118-1
OPENSUSE-SU-2025:20143-1
OPENSUSE-SU-2025:20160-1
OPENSUSE-SU-2026:10173-1
OPENSUSE-SU-2026:10543-1
OPENSUSE-SU-2026:10862-1
OPENSUSE-SU-2026:11126-1
OPENSUSE-SU-2026:11294-1
OPENSUSE-SU-2026:11305-1
OPENSUSE-SU-2026:20044-1
OPENSUSE-SU-2026:20058-1
OPENSUSE-SU-2026:20105-1
OPENSUSE-SU-2026:20132-1
OPENSUSE-SU-2026:20206-1
OPENSUSE-SU-2026:20318-1
OPENSUSE-SU-2026:20327-1
OPENSUSE-SU-2026:20654-1
OPENSUSE-SU-2026:20730-1
OPENSUSE-SU-2026:20798-1
OPENSUSE-SU-2026:20892-1
OPENSUSE-SU-2026:21210-1
OPENSUSE-SU-2026:21367-1
OPENSUSE-SU-2026:21483-1
RHSA-2026:7291
RHSA-2026:7385
SUSE-SU-2025:21043-1
SUSE-SU-2025:21221-1
SUSE-SU-2025:4190-1
SUSE-SU-2025:4444-1
SUSE-SU-2025:4446-1
SUSE-SU-2025:4479-1
SUSE-SU-2025:4482-1
SUSE-SU-2026:0028-1
SUSE-SU-2026:0403-1
SUSE-SU-2026:0580-1
SUSE-SU-2026:20089-1
SUSE-SU-2026:20176-1
SUSE-SU-2026:20244-1
SUSE-SU-2026:20357-1
SUSE-SU-2026:20685-1
SUSE-SU-2026:2096-1
SUSE-SU-2026:22066-1
SUSE-SU-2026:22075-1
SUSE-SU-2026:22242-1
SUSE-SU-2026:22249-1
SUSE-SU-2026:22558-1
SUSE-SU-2026:2400-1
SUSE-SU-2026:2401-1
SUSE-SU-2026:2493-1
SUSE-SU-2026:3056-1
USN-8089-1
USN-8089-2
USN-8089-3

Produtos afetados

Linuxmint
Red Os
Ubuntu
Golang.Org/X/Net/Html