Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: golang.org/x/net/html 0.62.0 Clear all filters
TI-2026-81567 CVE-2026-97045 · GHSA-vwcj-r8v9-p53f

Namespace check flaw in golang.org/x/net HTML text rendering

Priority LOW 27

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00267 Published 2026-10-27 Partial fix · 0.62.0 CWE-79
TI-2026-81566 CVE-2026-78661 · GHSA-75pg-wvh3-34jr

Quadratic complexity in golang.org/x/net HTML text coalescing

Priority LOW 39

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00409 Published 2026-10-27 Partial fix · 0.62.0 CWE-407