The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ecs-init | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade ecs-initUpgrade yqUpgrade yq-debugsourceUpgrade yq-debuginfo | Feb 20, 2026 | Feb 5, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 5, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.12Upgrade Splunk Enterprise to version 9.4.11Upgrade Splunk Enterprise to version 10.0.6Upgrade Splunk Enterprise to version 10.2.3 | Jul 30, 2026 | Feb 5, 2026 |
| Suse | — | Upgrade git-bug-zsh-completionUpgrade git-bug-fish-completionUpgrade git-bug-bash-completionUpgrade git-bug | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade adsys-windows (Ubuntu Pro)Upgrade juju (Ubuntu Pro)Upgrade lxd-tools (Ubuntu Pro)Upgrade golang-github-lxc-lxd-dev (Ubuntu Pro)Upgrade lxd-client (Ubuntu Pro)Upgrade golang-golang-x-net-devUpgrade lxd (Ubuntu Pro)Upgrade golang-go.net-dev (Ubuntu Pro)Upgrade lxc2 (Ubuntu Pro)Upgrade golang-golang-x-net-dev (Ubuntu Pro)Upgrade juju-2.0 (Ubuntu Pro)Upgrade adsys (Ubuntu Pro) | Mar 13, 2026 | Feb 5, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub