golang.org/x/net/html vulnerabilities

CVEs whose affected-version data names the golang.org/x/net/html package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-78661None

1w ago

Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many shor…

▾ Sunlitgolang.org/x/net · golang.org/x/net/htmlvia CVEORG