5.3

CVE-2025-58190

Exploit

Infinite parsing loop in golang.org/x/net

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Go ≫ Html SwPlatform go Version < 0.45.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.377
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CISA-ADP 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c
Third Party Advisory
Mailing List
https://github.com/golang/vulndb/issues/4441
Exploit
Issue Tracking
https://go.dev/cl/709875
Patch
https://pkg.go.dev/vuln/GO-2026-4441
Vendor Advisory