CVE Catalog
CVE-2025-58190
MediumSummary
The html.Parse function in the golang.org/x/net/html package enters an infinite loop when processing specially crafted HTML input. An attacker can exploit this vulnerability to cause a denial of service (DoS).
Risk Assessment
The organization faces the risk of service disruption for applications that process HTML, potentially leading to application unavailability and financial losses.
Recommendation
Immediately update the golang.org/x/net package to a version that includes a fix for the infinite loop in the html.Parse function.
Original NVD description (English source)
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.