CVE-2025-47911

CVE-2025-47911 is a denial-of-service vulnerability affecting the html.Parse function in golang.org/x/net/html. An attacker can trigger this by providing specially crafted HTML content, leading to quadratic parsing complexity. This is a medium severity vulnerability (CVSS 5.3) with a network attack vector and low attack complexity, requiring no user interaction or privileges, and resulting in a low impact to availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential future interest.