Launch Week Day 1: Announcing Security Design Review
UNKNOWN Go

Infinite parsing loop in golang.org/x/net

GO-2026-4441 · CVE-2025-58190

Published · Modified

Description

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Ready to move

Start Securing

Free, no credit card | First findings in minutes