CVE-2025-47911

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Moderate: The golang.org/x/net/html package, used across various Red Hat products, is vulnerable to a denial of service due to quadratic parsing complexity in its html.Parse function. An attacker providing specially crafted HTML content could exploit this flaw, leading to resource exhaustion and service unavailability in applications that process untrusted HTML input.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.