Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-45338

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Description

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

golang.org/x/net golang.org/x/net/html

Default version status: unaffected

  • 0 to < 0.33.0affected

References