Description (CNA)
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| golang.org/x/net / golang.org/x/net/html | affected 0 before 0.33.0 |
CWE
No CWE identifiers supplied.
References
- https://go.dev/cl/637536
- https://go.dev/issue/70906
- https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ
- https://pkg.go.dev/vuln/GO-2024-3333
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.