| Package | Affected versions | Patched versions |
|---|---|---|
| golang.org/x/net | < 0.45.0 | 0.45.0 |
| golang.org/x/net/html | < 0.45.0 | 0.45.0 |
| html | < 0.45.0 | 0.45.0 |
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to Denial of Service (DoS) if an attacker provides specially crafted HTML content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free