VYPR

HTML

by Go

CVEs (2)

  • CVE-2025-58190MedFeb 5, 2026
    risk 0.34cvss 5.3epss 0.00

    The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

  • CVE-2025-47911MedFeb 5, 2026
    risk 0.34cvss 5.3epss 0.01

    The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.