CVE-2025-47911

[opensourceways-bot]

一、漏洞信息
漏洞编号：CVE-2025-47911
漏洞归属组件：net
漏洞归属分支：默认分支
漏洞归属的版本：v0.23.0
漏洞修复版本: 0.45.0
CVSS分值：
 BaseScore： 5.3 Medium
 Vector： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

漏洞简述：
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

漏洞公开时间：2026-02-05 18:16:09
漏洞创建时间：2026-06-24 02:58:29
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2025-47911

[opensourceways-bot]

Welcome To opensourceways Community

Hey @opensourceways-bot , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.

Contact Guide

If you have any questions, please contact the SIG: infratructure ,
and any of the maintainers: @GeorgeCao-hw, @TangJia025, @pkking, @zhongjun2 ,
and any of the committers: @123-prog, @Coopermasaaki, @LiYanghang00, @TangJia025, @ibfru, @yao-xiaobai .