Every CVE Search/ Get API key

CVE-2025-47911

Quadratic parsing complexity in golang.org/x/net/html

5.3 MediumFix available

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.56%Up 0.5 points since Feb 6, 2026
90%50%10%1%

What each source reports

NVD Score used 5.3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
CVE-2025-47911
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
CVE List 5.3

Quadratic parsing complexity in golang.org/x/net/html

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
CVE-2025-47911
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
EUVDEUVD-2025-206856 5.3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
EUVD-2025-206856
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-w4gw-w5jq-g9jh 5.3

golang.org/x/net/html has a Quadratic Parsing Complexity issue

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to Denial of Service (DoS) if an attacker provides specially crafted HTML content.

Record
GHSA-w4gw-w5jq-g9jh
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-407
Updated
2026-11-02
OSVBELL-CVE-2025-47911 5.3

CVE-2025-47911 does not affect BellSoft software

Record
BELL-CVE-2025-47911
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSV 5.3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
CVE-2025-47911
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2025-47911 5.3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
DEBIAN-CVE-2025-47911
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVGHSA-w4gw-w5jq-g9jh 5.3

golang.org/x/net/html has a Quadratic Parsing Complexity issue

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to Denial of Service (DoS) if an attacker provides specially crafted HTML content.

Record
GHSA-w4gw-w5jq-g9jh
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-407
Updated
2026-11-02
OSVRHSA-2026:7291 8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7291
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:7385 8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7385
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-47911 5.3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
UBUNTU-CVE-2025-47911
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-76778 No score

CVE-2025-47911 affecting package buildah 1.18.0-29

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76778
Updated
2026-11-02
OSVAZL-76781 No score

CVE-2025-47911 affecting package containernetworking-plugins 1.1.1-17

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76781
Updated
2026-11-02
OSVAZL-76784 No score

CVE-2025-47911 affecting package podman 4.1.1-26

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76784
Updated
2026-11-02
OSVAZL-76793 No score

CVE-2025-47911 affecting package azl-otel-collector 0.127.0-1

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76793
Updated
2026-11-05
OSVAZL-76796 No score

CVE-2025-47911 affecting package cri-o 1.30.1-1

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76796
Updated
2026-11-05
OSVAZL-76802 No score

CVE-2025-47911 affecting package podman 5.6.1-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76802
Updated
2026-11-05
OSVAZL-76808 No score

CVE-2025-47911 affecting package yq 4.45.1-1

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76808
Updated
2026-11-05
OSVAZL-76818 No score

CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-27

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76818
Updated
2026-11-02
OSVAZL-76824 No score

CVE-2025-47911 affecting package cert-manager for versions less than 1.11.2-27

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76824
Updated
2026-11-02
OSVAZL-76830 No score

CVE-2025-47911 affecting package cf-cli for versions less than 8.4.0-27

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76830
Updated
2026-11-02
OSVAZL-76833 No score

CVE-2025-47911 affecting package cni for versions less than 1.0.1-21

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76833
Updated
2026-11-02
OSVAZL-76836 No score

CVE-2025-47911 affecting package cni-plugins for versions less than 1.3.0-11

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76836
Updated
2026-11-02
OSVAZL-76842 No score

CVE-2025-47911 affecting package containerized-data-importer for versions less than 1.55.0-28

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76842
Updated
2026-11-02
OSVAZL-76845 No score

CVE-2025-47911 affecting package cri-o for versions less than 1.22.3-20

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76845
Updated
2026-11-02
OSVAZL-76848 No score

CVE-2025-47911 affecting package cri-tools for versions less than 1.29.0-9

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76848
Updated
2026-11-02
OSVAZL-76859 No score

CVE-2025-47911 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76859
Updated
2026-11-05
OSVAZL-76863 No score

CVE-2025-47911 affecting package gh for versions less than 2.13.0-26

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76863
Updated
2026-11-02
OSVAZL-76868 No score

CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76868
Updated
2026-11-05
OSVAZL-76872 No score

CVE-2025-47911 affecting package helm for versions less than 3.14.2-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76872
Updated
2026-11-02
OSVAZL-76883 No score

CVE-2025-47911 affecting package cf-cli for versions less than 8.7.11-5

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76883
Updated
2026-11-05
OSVAZL-76886 No score

CVE-2025-47911 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76886
Updated
2026-11-05
OSVAZL-76893 No score

CVE-2025-47911 affecting package influxdb for versions less than 2.6.1-30

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76893
Updated
2026-11-02
OSVAZL-76895 No score

CVE-2025-47911 affecting package cni for versions less than 1.1.2-5

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76895
Updated
2026-11-05
OSVAZL-76898 No score

CVE-2025-47911 affecting package cni-plugins for versions less than 1.4.0-5

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76898
Updated
2026-11-05
OSVAZL-76904 No score

CVE-2025-47911 affecting package containerd2 for versions less than 2.0.0-18

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76904
Updated
2026-11-02
OSVAZL-76910 No score

CVE-2025-47911 affecting package containerized-data-importer for versions less than 1.62.0-2

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76910
Updated
2026-11-05
OSVAZL-76916 No score

CVE-2025-47911 affecting package cri-tools for versions less than 1.32.0-4

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76916
Updated
2026-11-05
OSVAZL-76922 No score

CVE-2025-47911 affecting package dasel for versions less than 2.8.1-3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76922
Updated
2026-11-05
OSVAZL-76928 No score

CVE-2025-47911 affecting package docker-buildx for versions less than 0.14.0-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76928
Updated
2026-11-05
OSVAZL-76935 No score

CVE-2025-47911 affecting package keda for versions less than 2.4.0-32

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76935
Updated
2026-11-02
OSVAZL-76940 No score

CVE-2025-47911 affecting package docker-compose for versions less than 2.27.0-8

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76940
Updated
2026-11-02
OSVAZL-76944 No score

CVE-2025-47911 affecting package kubernetes for versions less than 1.28.4-25

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76944
Updated
2026-11-02
OSVAZL-76950 No score

CVE-2025-47911 affecting package kubevirt for versions less than 0.59.0-38

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76950
Updated
2026-11-02
OSVAZL-76955 No score

CVE-2025-47911 affecting package gh for versions less than 2.62.0-13

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76955
Updated
2026-11-02
OSVAZL-76962 No score

CVE-2025-47911 affecting package multus for versions less than 4.0.2-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76962
Updated
2026-11-02
OSVAZL-76977 No score

CVE-2025-47911 affecting package packer for versions less than 1.9.5-18

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76977
Updated
2026-11-02
OSVAZL-76983 No score

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76983
Updated
2026-11-02
OSVAZL-76992 No score

CVE-2025-47911 affecting package influxdb for versions less than 2.7.5-13

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76992
Updated
2026-11-02
OSVAZL-77004 No score

CVE-2025-47911 affecting package keda for versions less than 2.14.1-11

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77004
Updated
2026-11-02
OSVAZL-77007 No score

CVE-2025-47911 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77007
Updated
2026-11-02
OSVAZL-77016 No score

CVE-2025-47911 affecting package kubernetes for versions less than 1.30.10-21

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77016
Updated
2026-11-05
OSVAZL-77019 No score

CVE-2025-47911 affecting package kubevirt for versions less than 1.7.0-3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77019
Updated
2026-11-02
OSVAZL-77036 No score

CVE-2025-47911 affecting package multus for versions less than 4.0.2-7

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77036
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
golang.org/x/net/html
Go
 before 0.45.0
0.45.0
buildah
Azure Linux:2
 through 1.18.0-29 None known
containernetworking-plugins
Azure Linux:2
 through 1.1.1-17 None known
podman
Azure Linux:2
 through 4.1.1-26 None known
azl-otel-collector
Azure Linux:3
 through 0.127.0-1 None known
cri-o
Azure Linux:3
 through 1.30.1-1 None known
podman
Azure Linux:3
 through 5.6.1-10 None known
yq
Azure Linux:3
 through 4.45.1-1 None known
application-gateway-kubernetes-ingress
Azure Linux:2
 before 1.4.0-27
1.4.0-27
cert-manager
Azure Linux:2
 before 1.11.2-27
1.11.2-27
Show 199 moreShow less
Affected packages
PackageAffectedFixed
cf-cli
Azure Linux:2
 before 8.4.0-27
8.4.0-27
cni
Azure Linux:2
 before 1.0.1-21
1.0.1-21
cni-plugins
Azure Linux:2
 before 1.3.0-11
1.3.0-11
containerized-data-importer
Azure Linux:2
 before 1.55.0-28
1.55.0-28
cri-o
Azure Linux:2
 before 1.22.3-20
1.22.3-20
cri-tools
Azure Linux:2
 before 1.29.0-9
1.29.0-9
application-gateway-kubernetes-ingress
Azure Linux:3
 before 1.7.7-3
1.7.7-3
gh
Azure Linux:2
 before 2.13.0-26
2.13.0-26
cert-manager
Azure Linux:3
 before 1.12.15-6
1.12.15-6
helm
Azure Linux:2
 before 3.14.2-10
3.14.2-10
cf-cli
Azure Linux:3
 before 8.7.11-5
8.7.11-5
cloud-provider-kubevirt
Azure Linux:3
 before 0.5.1-3
0.5.1-3
influxdb
Azure Linux:2
 before 2.6.1-30
2.6.1-30
cni
Azure Linux:3
 before 1.1.2-5
1.1.2-5
cni-plugins
Azure Linux:3
 before 1.4.0-5
1.4.0-5
containerd2
Azure Linux:3
 before 2.0.0-18
2.0.0-18
containerized-data-importer
Azure Linux:3
 before 1.62.0-2
1.62.0-2
cri-tools
Azure Linux:3
 before 1.32.0-4
1.32.0-4
dasel
Azure Linux:3
 before 2.8.1-3
2.8.1-3
docker-buildx
Azure Linux:3
 before 0.14.0-10
0.14.0-10
keda
Azure Linux:2
 before 2.4.0-32
2.4.0-32
docker-compose
Azure Linux:3
 before 2.27.0-8
2.27.0-8
kubernetes
Azure Linux:2
 before 1.28.4-25
1.28.4-25
kubevirt
Azure Linux:2
 before 0.59.0-38
0.59.0-38
gh
Azure Linux:3
 before 2.62.0-13
2.62.0-13
multus
Azure Linux:2
 before 4.0.2-10
4.0.2-10
packer
Azure Linux:2
 before 1.9.5-18
1.9.5-18
prometheus-adapter
Azure Linux:2
 before 0.10.0-19
0.10.0-19
influxdb
Azure Linux:3
 before 2.7.5-13
2.7.5-13
keda
Azure Linux:3
 before 2.14.1-11
2.14.1-11
kube-vip-cloud-provider
Azure Linux:3
 before 0.0.10-5
0.0.10-5
kubernetes
Azure Linux:3
 before 1.30.10-21
1.30.10-21
kubevirt
Azure Linux:3
 before 1.7.0-3
1.7.0-3
multus
Azure Linux:3
 before 4.0.2-7
4.0.2-7
sriov-network-device-plugin
Azure Linux:2
 before 3.6.2-11
3.6.2-11
telegraf
Azure Linux:2
 before 1.29.4-21
1.29.4-21
packer
Azure Linux:3
 before 1.9.5-13
1.9.5-13
prometheus-adapter
Azure Linux:3
 before 0.12.0-5
0.12.0-5
terraform
Azure Linux:2
 before 1.3.2-29
1.3.2-29
vitess
Azure Linux:2
 before 17.0.7-14
17.0.7-14
sriov-network-device-plugin
Azure Linux:3
 before 3.7.0-5
3.7.0-5
telegraf
Azure Linux:3
 before 1.31.0-15
1.31.0-15
golang-golang-x-net
Debian:12
 All versions, plus listed versions
1:0.10.0-11:0.11.0-11:0.14.0-11:0.15.0-11:0.15.0-2
Show 22 moreShow less
1:0.17.0+dfsg-11:0.19.0+dfsg-11:0.20.0+dfsg-11:0.21.0+dfsg-11:0.22.0+dfsg-11:0.23.0+dfsg-11:0.24.0+dfsg-11:0.25.0+dfsg-11:0.26.0+dfsg-11:0.26.0+dfsg-21:0.27.0-11:0.27.0-21:0.47.0-11:0.47.0-21:0.53.0-11:0.53.0-21:0.53.0-2~bpo13+11:0.55.0-11:0.56.0-11:0.57.0-11:0.58.0-11:0.7.0+dfsg-1
 None known
golang-golang-x-net
Debian:13
 All versions, plus listed versions
1:0.27.0-21:0.47.0-11:0.47.0-21:0.53.0-11:0.53.0-2
Show 5 moreShow less
1:0.53.0-2~bpo13+11:0.55.0-11:0.56.0-11:0.57.0-11:0.58.0-1
 None known
golang-golang-x-net
Debian:14
 before 1:0.47.0-1, plus listed versions
1:0.27.0-2
1:0.47.0-1
golang.org/x/net
Go
 before 0.45.0
0.45.0
golang1.26
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-bin
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-docs
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-misc
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-shared
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-src
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-tests
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.25
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-bin
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-docs
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-misc
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-shared
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-src
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-tests
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang.org/x/net
Root:Go
 before v0.42.0-aikido.3
v0.42.0-aikido.3v0.39.0-aikido.4v0.34.0-aikido.3v0.33.0-aikido.7v0.33.0-aikido.6v0.39.0-aikido.3v0.42.0-aikido.2v0.34.0-aikido.2v0.39.0-aikido.5v0.42.0-aikido.4v0.39.0-aikido.6
rootio-golang.org/x/net
Root:Go
 before v0.42.0-root.io.3
v0.42.0-root.io.3v0.39.0-root.io.4v0.34.0-root.io.3v0.33.0-root.io.7v0.33.0-root.io.6v0.39.0-root.io.3v0.42.0-root.io.2v0.34.0-root.io.2v0.39.0-root.io.5v0.42.0-root.io.4v0.39.0-root.io.6
helm
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 3.19.1-1.1
3.19.1-1.1
helm
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 3.19.1-slfo.1.1_1.1
3.19.1-slfo.1.1_1.1
helm
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Module for Containers 15 SP6
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
Multi-Linux-ManagerTools-SLE-release
SUSE:Multi Linux Manager Tools SLE-12
From an advisory covering 4 CVEs
 before 12-120002.1.11.1
12-120002.1.11.1
grafana
SUSE:Multi Linux Manager Tools SLE-12
From an advisory covering 4 CVEs
 before 11.5.10-120002.4.6.1
11.5.10-120002.4.6.1
uyuni-tools
SUSE:Multi Linux Manager Tools SLE-12
From an advisory covering 4 CVEs
 before 5.1.23-120002.3.6.1
5.1.23-120002.3.6.1
grafana
SUSE:Multi Linux Manager Tools SLE-15
From an advisory covering 4 CVEs
 before 11.5.10-150002.4.6.1
11.5.10-150002.4.6.1
uyuni-tools
SUSE:Multi Linux Manager Tools SLE-15
From an advisory covering 4 CVEs
 before 5.1.23-150002.3.6.1
5.1.23-150002.3.6.1
uyuni-tools
SUSE:Multi Linux Manager Tools SLE-Micro-5
From an advisory covering 4 CVEs
 before 5.1.23-150002.3.6.1
5.1.23-150002.3.6.1
release-notes-susemanager-proxy
SUSE:Manager Proxy LTS 4.3
From an advisory covering 6 CVEs
 before 4.3.16.2-150400.3.104.2
4.3.16.2-150400.3.104.2
release-notes-susemanager
SUSE:Manager Server LTS 4.3
From an advisory covering 6 CVEs
 before 4.3.16.2-150400.3.148.1
4.3.16.2-150400.3.148.1
grafana
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 7 CVEs
 before 11.5.10-150200.3.80.1
11.5.10-150200.3.80.1
grafana
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 7 CVEs
 before 11.5.10-150200.3.80.1
11.5.10-150200.3.80.1
grafana
openSUSE:Leap 15.6
From an advisory covering 7 CVEs
 before 11.5.10-150200.3.80.1
11.5.10-150200.3.80.1
alloy
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 1.12.1-150700.15.12.1
1.12.1-150700.15.12.1
govulncheck-vulndb
openSUSE:Leap 15.6
From an advisory covering 76 CVEs
 before 0.0.20260205T172317-150000.1.146.1
0.0.20260205T172317-150000.1.146.1
apptainer
SUSE:Linux Enterprise Module for HPC 15 SP7
From an advisory covering 2 CVEs
 before 1.4.5-150600.4.15.1
1.4.5-150600.4.15.1
apptainer
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 1.4.5-150600.4.15.1
1.4.5-150600.4.15.1
alloy
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 1.12.1-160000.1.1
1.12.1-160000.1.1
alloy
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 1.12.1-160000.1.1
1.12.1-160000.1.1
elemental-register
SUSE:Linux Micro 6.2
From an advisory covering 6 CVEs
 before 1.8.1-160000.1.1
1.8.1-160000.1.1
elemental-toolkit
SUSE:Linux Micro 6.2
From an advisory covering 6 CVEs
 before 2.3.2-160000.1.1
2.3.2-160000.1.1
elemental-operator
SUSE:Linux Micro 6.0
From an advisory covering 6 CVEs
 before 1.6.10-1.1
1.6.10-1.1
elemental-toolkit
SUSE:Linux Micro 6.0
From an advisory covering 6 CVEs
 before 2.1.5-1.1
2.1.5-1.1
elemental-operator
SUSE:Linux Micro 6.1
From an advisory covering 6 CVEs
 before 1.7.4-slfo.1.1_1.1
1.7.4-slfo.1.1_1.1
elemental-toolkit
SUSE:Linux Micro 6.1
From an advisory covering 6 CVEs
 before 2.2.7-slfo.1.1_1.1
2.2.7-slfo.1.1_1.1
helm
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 3.19.1-160000.1.1
3.19.1-160000.1.1
google-osconfig-agent
SUSE:Linux Micro 6.0
From an advisory covering 23 CVEs
 before 20260615.01-1.1
20260615.01-1.1
google-osconfig-agent
SUSE:Linux Micro 6.1
From an advisory covering 22 CVEs
 before 20260615.01-slfo.1.1_1.1
20260615.01-slfo.1.1_1.1
google-osconfig-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
google-osconfig-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
kubevirt
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 7 CVEs
 before 1.7.4-150700.3.24.2
1.7.4-150700.3.24.2
kubevirt-1.6
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 7 CVEs
 before 1.6.6-150700.15.7.1
1.6.6-150700.15.7.1
containerized-data-importer
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 12 CVEs
 before 1.64.0-150700.9.11.1
1.64.0-150700.9.11.1
terraform-provider-aws
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.11.0-150200.6.18.1
3.11.0-150200.6.18.1
terraform-provider-azurerm
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 2.32.0-150200.6.12.1
2.32.0-150200.6.12.1
terraform-provider-external
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 2.0.0-150200.6.12.1
2.0.0-150200.6.12.1
terraform-provider-google
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.43.0-150200.6.12.1
3.43.0-150200.6.12.1
terraform-provider-helm
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 2.9.0-150200.6.23.1
2.9.0-150200.6.23.1
terraform-provider-kubernetes
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 1.13.2-150200.6.12.1
1.13.2-150200.6.12.1
terraform-provider-local
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 2.0.0-150200.6.17.1
2.0.0-150200.6.17.1
terraform-provider-null
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.0.0-150200.6.18.1
3.0.0-150200.6.18.1
terraform-provider-random
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.0.0-150200.6.15.1
3.0.0-150200.6.15.1
terraform-provider-tls
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.0.0-150200.5.15.1
3.0.0-150200.5.15.1
terraform-provider-aws
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.11.0-150200.6.18.1
3.11.0-150200.6.18.1
terraform-provider-azurerm
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 2.32.0-150200.6.12.1
2.32.0-150200.6.12.1
terraform-provider-external
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 2.0.0-150200.6.12.1
2.0.0-150200.6.12.1
terraform-provider-google
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.43.0-150200.6.12.1
3.43.0-150200.6.12.1
terraform-provider-helm
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 2.9.0-150200.6.23.1
2.9.0-150200.6.23.1
terraform-provider-kubernetes
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 1.13.2-150200.6.12.1
1.13.2-150200.6.12.1
terraform-provider-local
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 2.0.0-150200.6.17.1
2.0.0-150200.6.17.1
terraform-provider-null
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.0.0-150200.6.18.1
3.0.0-150200.6.18.1
terraform-provider-random
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.0.0-150200.6.15.1
3.0.0-150200.6.15.1
terraform-provider-tls
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.0.0-150200.5.15.1
3.0.0-150200.5.15.1
kubevirt-1.6
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 16 CVEs
 before 1.6.6-150700.15.17.1
1.6.6-150700.15.17.1
golang-golang-x-net-dev
Ubuntu:Pro:16.04:LTS
 before 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2, plus listed versions
0.0+git20150226.3d87fd6-30.0+git20151007.b846920+dfsg-11:0.0+git20150817.66f0418-11:0.0+git20160110.4fd4a9f-11:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm1
1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2
juju-core
Ubuntu:Pro:16.04:LTS
 before 2.3.7-0ubuntu0.16.04.1+esm2, plus listed versions
1.24.6-0ubuntu31.25.0-0ubuntu11.25.0-0ubuntu21.25.0-0ubuntu32.0~beta4-0ubuntu2
Show 11 moreShow less
2.0~beta6-0ubuntu1.16.04.12.0~beta7-0ubuntu1.16.04.12.0~beta12-0ubuntu1.16.04.12.0~beta15-0ubuntu2.16.04.12.0.0-0ubuntu0.16.04.22.0.2-0ubuntu0.16.04.12.0.2-0ubuntu0.16.04.22.3.1-0ubuntu0.16.04.12.3.2-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.1+esm1
2.3.7-0ubuntu0.16.04.1+esm2
lxd
Ubuntu:Pro:16.04:LTS
 before 2.0.11-0ubuntu1~16.04.4+esm2, plus listed versions
0.20-0ubuntu40.21-0ubuntu30.21-0ubuntu50.22-0ubuntu10.22-0ubuntu2
Show 45 moreShow less
0.23-0ubuntu10.23-0ubuntu20.23-0ubuntu30.24-0ubuntu20.24-0ubuntu30.24-0ubuntu40.25-0ubuntu10.26-0ubuntu20.26-0ubuntu30.27-0ubuntu10.27-0ubuntu22.0.0~beta1-0ubuntu32.0.0~beta1-0ubuntu42.0.0~beta2-0ubuntu12.0.0~beta2-0ubuntu22.0.0~beta3-0ubuntu12.0.0~beta3-0ubuntu22.0.0~beta3-0ubuntu32.0.0~beta3-0ubuntu42.0.0~beta4-0ubuntu12.0.0~beta4-0ubuntu22.0.0~beta4-0ubuntu32.0.0~beta4-0ubuntu42.0.0~beta4-0ubuntu52.0.0~beta4-0ubuntu62.0.0~beta4-0ubuntu72.0.0~rc1-0ubuntu12.0.0~rc1-0ubuntu22.0.0~rc1-0ubuntu32.0.0~rc2-0ubuntu22.0.0~rc2-0ubuntu32.0.0~rc3-0ubuntu12.0.0~rc3-0ubuntu22.0.0~rc3-0ubuntu32.0.0~rc3-0ubuntu42.0.0~rc4-0ubuntu12.0.0~rc5-0ubuntu12.0.0~rc6-0ubuntu12.0.0~rc6-0ubuntu22.0.0~rc7-0ubuntu12.0.0~rc7-0ubuntu22.0.0~rc8-0ubuntu12.0.0~rc8-0ubuntu22.0.0~rc8-0ubuntu32.0.0~rc8-0ubuntu5
2.0.11-0ubuntu1~16.04.4+esm2
lxd
Ubuntu:Pro:18.04:LTS
 before 3.0.3-0ubuntu1~18.04.2+esm2, plus listed versions
2.18-0ubuntu62.19-0ubuntu12.20-0ubuntu32.20-0ubuntu42.21-0ubuntu1
Show 16 moreShow less
2.21-0ubuntu22.21-0ubuntu32.21-0ubuntu43.0.0~beta2-0ubuntu33.0.0~beta3-0ubuntu33.0.0~beta5-0ubuntu23.0.0~beta7-0ubuntu13.0.0-0ubuntu13.0.0-0ubuntu23.0.0-0ubuntu33.0.0-0ubuntu43.0.1-0ubuntu1~18.04.13.0.2-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.23.0.3-0ubuntu1~18.04.2+esm1
3.0.3-0ubuntu1~18.04.2+esm2
golang-golang-x-net-dev
Ubuntu:Pro:18.04:LTS
 before 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2, plus listed versions
1:0.0+git20170629.c81e7f2+dfsg-1ubuntu11:0.0+git20170629.c81e7f2+dfsg-1ubuntu21:0.0+git20170629.c81e7f2+dfsg-21:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm1
1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2
golang-golang-x-net-dev
Ubuntu:Pro:20.04:LTS
 before 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.0+git20190811.74dc4d7+dfsg-11:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm1
1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:22.04:LTS
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1
golang-golang-x-net
Ubuntu:Pro:22.04:LTS
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-11:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:Pro:24.04:LTS
 before 1:0.21.0+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.10.0-11:0.17.0+dfsg-11:0.20.0+dfsg-11:0.21.0+dfsg-11:0.21.0+dfsg-1ubuntu0.1~esm1
1:0.21.0+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:25.10
 All versions, plus listed versions
1:0.27.0-11:0.27.0-2
 None known
golang-golang-x-net
Ubuntu:26.10
 All versions, plus listed versions
1:0.27.0-21:0.57.0-11:0.58.0-1
 None known
golang-golang-x-net
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:0.27.0-2
 None known
golang-golang-x-net
Ubuntu:Pro:22.04:LTS
From an advisory covering 6 CVEs
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-11:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:Pro:24.04:LTS
From an advisory covering 6 CVEs
 before 1:0.21.0+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.10.0-11:0.17.0+dfsg-11:0.20.0+dfsg-11:0.21.0+dfsg-11:0.21.0+dfsg-1ubuntu0.1~esm1
1:0.21.0+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:22.04:LTS
From an advisory covering 8 CVEs
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1
glow
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2.1.1-2.1
2.1.1-2.1
distrobuilder
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.2-4.1
3.2-4.1
forgejo
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 12.0.4-2.1
12.0.4-2.1
forgejo-longterm
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 11.0.6-2.1
11.0.6-2.1
gitea-tea
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.11.0-2.1
0.11.0-2.1
headscale
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.26.1-2.1
0.26.1-2.1
v2ray-core
openSUSE:Tumbleweed
 before 5.40.0-1.1
5.40.0-1.1
ollama
openSUSE:Tumbleweed
 before 0.12.6-1.1
0.12.6-1.1
git-bug
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.10.1-2.1
0.10.1-2.1
grafana
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 11.6.7-1.1
11.6.7-1.1
gomuks
openSUSE:Tumbleweed
 before 0.3.1-2.1
0.3.1-2.1
google-osconfig-agent
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 20251028.00-1.1
20251028.00-1.1
hauler
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 1.3.1-1.1
1.3.1-1.1
go-sendxmpp
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.15.1-1.1
0.15.1-1.1
helm
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.19.1-1.1
3.19.1-1.1
sbctl
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.18-2.1
0.18-2.1
helm3
openSUSE:Tumbleweed
From an advisory covering 20 CVEs
 before 3.19.2-1.1
3.19.2-1.1
alloy
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 1.12.0-2.1
1.12.0-2.1
trivy
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 0.68.2-1.1
0.68.2-1.1
kepler
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.11.3-1.1
0.11.3-1.1
gitea-tea
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.11.1-bp160.1.1
0.11.1-bp160.1.1
shadowsocks-v2ray-plugin
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 5.25.0-bp160.1.1
5.25.0-bp160.1.1
v2ray-core
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 5.40.0-bp160.1.1
5.40.0-bp160.1.1
git-bug
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 0.10.1-bp160.1.1
0.10.1-bp160.1.1
hauler
openSUSE:Leap 16.0
From an advisory covering 8 CVEs
 before 1.3.1-bp160.1.1
1.3.1-bp160.1.1
apptainer
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.4.5-2.1
1.4.5-2.1
yq
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 4.53.2-1.1
4.53.2-1.1
velociraptor
openSUSE:Tumbleweed
From an advisory covering 49 CVEs
 before 0.7.0.4.git185.a5708584-2.1
0.7.0.4.git185.a5708584-2.1
lux
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 0.24.1-1.1
0.24.1-1.1
containerized-data-importer1.66
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 1.66.0-1.1
1.66.0-1.1
kubevirt1.9
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 1.9.0-1.1
1.9.0-1.1
pocketbase
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 0.40.5-1.1
0.40.5-1.1
kured
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 1.23.0-1.1
1.23.0-1.1
kubeseal
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 0.41.1-1.1
0.41.1-1.1
kumactl
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 3.0.0-1.1
3.0.0-1.1
timoni
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 0.36.0-1.1
0.36.0-1.1
alloy
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 1.12.1-160000.1.1
1.12.1-160000.1.1
go-sendxmpp
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.15.1-bp160.1.1
0.15.1-bp160.1.1
sbctl
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.18-bp160.1.1
0.18-bp160.1.1
elemental-register
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 1.8.1-160000.1.1
1.8.1-160000.1.1
elemental-toolkit
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 2.3.2-160000.1.1
2.3.2-160000.1.1
kepler
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.11.3-160000.1.1
0.11.3-160000.1.1
gitea-tea
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.12.0-bp160.1.1
0.12.0-bp160.1.1
helm
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 3.19.1-160000.1.1
3.19.1-160000.1.1
google-osconfig-agent
openSUSE:Leap 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
lux
openSUSE:Leap 16.0
From an advisory covering 9 CVEs
 before 0.24.1-bp160.1.1
0.24.1-bp160.1.1
govulncheck-vulndb
openSUSE:Leap 16.0
From an advisory covering 1734 CVEs
 before 0.0.20260723T184607-160000.1.1
0.0.20260723T184607-160000.1.1
gitea-tea
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 0.15.1-bp160.1.1
0.15.1-bp160.1.1
glab
openSUSE:Leap 16.0
From an advisory covering 24 CVEs
 before 1.114.0-bp160.1.1
1.114.0-bp160.1.1
containerized-data-importer1.65
openSUSE:Leap 16.0
From an advisory covering 39 CVEs
 before 1.65.0-160000.3.1
1.65.0-160000.3.1

History

History
RecordedChangedSources
affected
affected, factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-47911 is a medium vulnerability (CVSS 5.3) in Go Html, published October 8, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in golang.org/x/net/html 0.45.0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 24 versions and 2,210 references. The JSON record has them. Also not on the record: 39 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 89 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open