golang.org/x/net/html vulnerabilities

1 known vulnerability in golang.org/x/net/html from Golang.org/x/net. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  golang.org/x/net/html: Inefficient Algorithmic Complexity

  CVE-2026-78661Oct 27, 2026Golang.org/x/net

  When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated b