PT-2025-51135 · Google+3 · Golang.Org/X/Net/Html+3

Guido Vranken + 1 · CVE-2025-47911 · Published 2025-10-08 · Updated 2026-07-17

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions golang.org/x/net/html (affected versions not specified)

Description The html.Parse function exhibits quadratic parsing complexity when handling specific inputs. This can result in a denial of service (DoS) if an attacker submits maliciously crafted HTML content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-664

CWE-407

Related Identifiers

AZL-76778

AZL-76781

AZL-76784

AZL-76793

AZL-76796

AZL-76802

AZL-76808

AZL-76818

AZL-76824

AZL-76830

AZL-76833

AZL-76836

AZL-76842

AZL-76845

AZL-76848

AZL-76859

AZL-76863

AZL-76868

AZL-76872

AZL-76883

AZL-76886

AZL-76893

AZL-76895

AZL-76898

AZL-76904

AZL-76910

AZL-76916

AZL-76922

AZL-76928

AZL-76935

AZL-76940

AZL-76944

AZL-76950

AZL-76955

AZL-76962

AZL-76977

AZL-76983

AZL-76992

AZL-77004

AZL-77007

AZL-77016

AZL-77019

AZL-77036

AZL-77046

AZL-77052

AZL-77067

AZL-77070

AZL-77079

AZL-77082

AZL-77096

AZL-77099

BDU:2026-05687

CLEANSTART-2026-AB43319

CLEANSTART-2026-AE87452

CLEANSTART-2026-AN32474

CLEANSTART-2026-AT12816

CLEANSTART-2026-BB83999

CLEANSTART-2026-BE68531

CLEANSTART-2026-BM53321

CLEANSTART-2026-CB01846

CLEANSTART-2026-CD71342

CLEANSTART-2026-CM33443

CLEANSTART-2026-DG06447

CLEANSTART-2026-DM93480

CLEANSTART-2026-EA72772

CLEANSTART-2026-EJ93145

CLEANSTART-2026-FM65506

CLEANSTART-2026-GY76045

CLEANSTART-2026-HA09227

CLEANSTART-2026-HK71313

CLEANSTART-2026-HT21055

CLEANSTART-2026-HX97842

CLEANSTART-2026-HZ73294

CLEANSTART-2026-JB52011

CLEANSTART-2026-JD68539

CLEANSTART-2026-JK84667

CLEANSTART-2026-JL47330

CLEANSTART-2026-JQ70227

CLEANSTART-2026-KJ02127

CLEANSTART-2026-KJ85611

CLEANSTART-2026-LO63022

CLEANSTART-2026-LS00044

CLEANSTART-2026-MF20926

CLEANSTART-2026-MI82983

CLEANSTART-2026-MQ21261

CLEANSTART-2026-MX70474

CLEANSTART-2026-NB78893

CLEANSTART-2026-NG75665

CLEANSTART-2026-OK95571

CLEANSTART-2026-OO10146

CLEANSTART-2026-OU18540

CLEANSTART-2026-OX88144

CLEANSTART-2026-PK48502

CLEANSTART-2026-QA19540

CLEANSTART-2026-QN98167

CLEANSTART-2026-QU88766

CLEANSTART-2026-RF96040

CLEANSTART-2026-RY70255

CLEANSTART-2026-SA78596

CLEANSTART-2026-SQ24713

CLEANSTART-2026-SQ68600

CLEANSTART-2026-TD06078

CLEANSTART-2026-TM31143

CLEANSTART-2026-UG20989

CLEANSTART-2026-UO31069

CLEANSTART-2026-VR76068

CLEANSTART-2026-VU08393

CLEANSTART-2026-VU90450

CLEANSTART-2026-VX15911

CLEANSTART-2026-WA48911

CLEANSTART-2026-WK32717

CLEANSTART-2026-WS58809

CLEANSTART-2026-WW79343

CLEANSTART-2026-XI63678

CLEANSTART-2026-XP01012

CLEANSTART-2026-XV43582

CLEANSTART-2026-XV65906

CLEANSTART-2026-YG73853

CLEANSTART-2026-YL47233

CLEANSTART-2026-YP16651

CLEANSTART-2026-YQ26872

CLEANSTART-2026-ZA63260

CLEANSTART-2026-ZK75486

CLEANSTART-2026-ZN46983

CLEANSTART-2026-ZR76960

CLEANSTART-2026-ZU45532

CLEANSTART-2026-ZW09225

CLEANSTART-2026-ZW38648

CVE-2025-47911

GHSA-W4GW-W5JQ-G9JH

GO-2026-4440

OPENSUSE-RU-2026:20010-1

OPENSUSE-SU-2025:15607-1

OPENSUSE-SU-2025:15616-1

OPENSUSE-SU-2025:15617-1

OPENSUSE-SU-2025:15618-1

OPENSUSE-SU-2025:15619-1

OPENSUSE-SU-2025:15620-1

OPENSUSE-SU-2025:15624-1

OPENSUSE-SU-2025:15647-1

OPENSUSE-SU-2025:15654-1

OPENSUSE-SU-2025:15669-1

OPENSUSE-SU-2025:15689-1

OPENSUSE-SU-2025:15709-1

OPENSUSE-SU-2025:15722-1

OPENSUSE-SU-2025:15729-1

OPENSUSE-SU-2025:15730-1

OPENSUSE-SU-2025:15743-1

OPENSUSE-SU-2025:15779-1

OPENSUSE-SU-2025:15830-1

OPENSUSE-SU-2025:15852-1

OPENSUSE-SU-2025:15854-1

OPENSUSE-SU-2025:20118-1

OPENSUSE-SU-2025:20128-1

OPENSUSE-SU-2025:20143-1

OPENSUSE-SU-2025:20160-1

OPENSUSE-SU-2026:10173-1

OPENSUSE-SU-2026:10862-1

OPENSUSE-SU-2026:11126-1

OPENSUSE-SU-2026:11294-1

OPENSUSE-SU-2026:20044-1

OPENSUSE-SU-2026:20058-1

OPENSUSE-SU-2026:20105-1

OPENSUSE-SU-2026:20132-1

OPENSUSE-SU-2026:20206-1

OPENSUSE-SU-2026:20318-1

OPENSUSE-SU-2026:20327-1

OPENSUSE-SU-2026:20654-1

OPENSUSE-SU-2026:20730-1

OPENSUSE-SU-2026:20798-1

OPENSUSE-SU-2026:20892-1

OPENSUSE-SU-2026:21210-1

OPENSUSE-SU-2026:21367-1

RHSA-2026:7291

RHSA-2026:7385

SUSE-SU-2025:21043-1

SUSE-SU-2025:21221-1

SUSE-SU-2025:4190-1

SUSE-SU-2025:4444-1

SUSE-SU-2025:4446-1

SUSE-SU-2025:4479-1

SUSE-SU-2025:4482-1

SUSE-SU-2025_4190-1

SUSE-SU-2026:0028-1

SUSE-SU-2026:0403-1

SUSE-SU-2026:0580-1

SUSE-SU-2026:20089-1

SUSE-SU-2026:20176-1

SUSE-SU-2026:20244-1

SUSE-SU-2026:20357-1

SUSE-SU-2026:20685-1

SUSE-SU-2026:2096-1

SUSE-SU-2026:22242-1

SUSE-SU-2026:22249-1

SUSE-SU-2026:22558-1

SUSE-SU-2026:2400-1

SUSE-SU-2026:2401-1

SUSE-SU-2026:2493-1

SUSE-SU-2026:3056-1

USN-8089-1

USN-8089-2

USN-8089-3

Affected Products

Linuxmint

Red Os

Ubuntu

Golang.Org/X/Net/Html

References · 884

• https://nvd.nist.gov/vuln/detail/CVE-2025-61723 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33726 · Security Note
• https://pkg.go.dev/vuln/GO-2026-4440 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-MX70474 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-HX97842 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-DM93480 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-OX88144 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15730-1 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-EJ93145 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-VU90450 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39828 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-YL47233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58183 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20176-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39821 · Security Note