CVE-2025-58190

CVE-2025-58190 describes a denial-of-service (DoS) vulnerability in the golang.org/x/net/html package, specifically within its html.Parse function. This flaw allows an attacker to trigger an infinite parsing loop by providing specially crafted HTML content, affecting applications utilizing this Go HTML parsing library. Rated as MEDIUM severity (CVSS 5.3), it requires no user interaction or privileges, but its impact is limited to availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion, indicating awareness among developers.