[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-25680":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":86,"aliases":87,"duplicate_of":9,"upstream":90,"downstream":91,"duplicates":166,"related":167,"reserved_at":9,"published_at":205,"modified_at":206,"state":207,"summary":208,"references_raw":217,"kevs":260,"epss":261,"epss_history":264,"metrics":398,"affected":408},"CVE-2026-25680","Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,65,69,73,78],{"id":37,"name":38,"tactic":39},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":50,"name":51,"tactic":52},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":54,"name":55,"tactic":56},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":58,"name":59,"tactic":60},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":66,"name":67,"tactic":68},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":70,"name":71,"tactic":72},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},{"id":74,"name":75,"tactic":76},"D3-NTF","Network Traffic Filtering",{"name":77},"Isolate",{"id":79,"name":80,"tactic":81},"D3-ITF","Inbound Traffic Filtering",{"name":77},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],[],[88,89],"GO-2026-5028","GHSA-5cv4-jp36-h3mw",[],[92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,164],{"_key":93},"OPENSUSE-SU-2026:10856-1",{"_key":95},"OPENSUSE-SU-2026:10930-1",{"_key":97},"OPENSUSE-SU-2026:10923-1",{"_key":99},"OPENSUSE-SU-2026:10933-1",{"_key":101},"OPENSUSE-SU-2026:10941-1",{"_key":103},"OPENSUSE-SU-2026:10949-1",{"_key":105},"UBUNTU-CVE-2026-25680",{"_key":107},"OPENSUSE-SU-2026:11013-1",{"_key":109},"SUSE-SU-2026:22074-1",{"_key":111},"SUSE-SU-2026:22075-1",{"_key":113},"SUSE-SU-2026:22066-1",{"_key":115},"SUSE-SU-2026:22065-1",{"_key":117},"DEBIAN-CVE-2026-25680",{"_key":119},"OPENSUSE-SU-2026:20963-1",{"_key":121},"OPENSUSE-SU-2026:20956-1",{"_key":123},"OPENSUSE-SU-2026:11053-1",{"_key":125},"SUSE-SU-2026:22193-1",{"_key":127},"SUSE-SU-2026:22226-1",{"_key":129},"OPENSUSE-SU-2026:20984-1",{"_key":131},"OPENSUSE-SU-2026:11126-1",{"_key":133},"SUSE-SU-2026:2706-1",{"_key":135},"SUSE-SU-2026:2733-1",{"_key":137},"SUSE-SU-2026:2768-1",{"_key":139},"SUSE-SU-2026:2824-1",{"_key":141},"SUSE-SU-2026:2827-1",{"_key":143},"OPENSUSE-SU-2026:11152-1",{"_key":145},"OPENSUSE-SU-2026:11198-1",{"_key":147},"OPENSUSE-SU-2026:21120-1",{"_key":149},"OPENSUSE-SU-2026:21251-1",{"_key":151},"OPENSUSE-SU-2026:21262-1",{"_key":153},"SUSE-SU-2026:22575-1",{"_key":155},"SUSE-SU-2026:22613-1",{"_key":157},"SUSE-SU-2026:3056-1",{"_key":159},"OPENSUSE-SU-2026:11294-1",{"_key":161},"OPENSUSE-SU-2026:11304-1",{"_key":163},"OPENSUSE-SU-2026:21281-1",{"_key":165},"OPENSUSE-SU-2026:21367-1",[],[168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203],{"_key":93},{"_key":95},{"_key":97},{"_key":99},{"_key":101},{"_key":103},{"_key":107},{"_key":109},{"_key":111},{"_key":113},{"_key":115},{"_key":119},{"_key":121},{"_key":123},{"_key":125},{"_key":127},{"_key":129},{"_key":131},{"_key":133},{"_key":135},{"_key":137},{"_key":139},{"_key":141},{"_key":143},{"_key":145},{"_key":147},{"_key":149},{"_key":151},{"_key":153},{"_key":155},{"_key":157},{"_key":159},{"_key":161},{"_key":163},{"_key":165},{"_key":204},"CGA-FP3F-HXH6-CGF5","2026-05-22T15:01:21.805Z","2026-05-22T17:00:35.395Z","Analyzed",{"cisa_kev":209,"cisa_ransomware":209,"cisa_vendor":9,"epss_severity":210,"epss_score":211,"severity":212,"severity_score":213,"severity_version":214,"severity_source":215,"severity_vector":216,"severity_status":207},false,"low",0.00248,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",[218,227,232,237,242,247,251,255],{"url":219,"sources":220,"tags":223},"https://go.dev/cl/781702",[215,221,222],"osv_go","nvd",[224,225,226],"FIX","Issue Tracking","WEB",{"url":228,"sources":229,"tags":230},"https://go.dev/issue/79573",[215,221,222],[231,225,226],"REPORT",{"url":233,"sources":234,"tags":235},"https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",[215,221,222],[226,236],"Mailing List",{"url":238,"sources":239,"tags":240},"https://pkg.go.dev/vuln/GO-2026-5028",[215,222,221],[241,226],"Vendor Advisory",{"url":243,"sources":244,"tags":245},"https://nvd.nist.gov/vuln/detail/CVE-2026-25680",[221],[246],"Advisory",{"url":248,"sources":249,"tags":250},"https://go.googlesource.com/net/+/08be507abce89191d78cd49da60f4501fc910472",[221],[226],{"url":252,"sources":253,"tags":254},"https://go.googlesource.com/net/+/refs/tags/v0.55.0",[221],[226],{"url":256,"sources":257,"tags":258},"cs.opensource.google/go/x/net",[221],[259],"PACKAGE",[],{"date":262,"score":211,"percentile":263},"2026-07-05",0.16007,[265,269,272,275,278,281,285,288,292,295,298,301,304,307,310,313,316,319,322,325,328,331,333,336,340,343,346,349,352,355,358,361,364,367,370,373,376,379,382,385,388,391,394,397],{"date":266,"score":267,"percentile":268},"2026-05-23",0.00043,0.13203,{"date":270,"score":267,"percentile":271},"2026-05-24",0.13173,{"date":273,"score":267,"percentile":274},"2026-05-25",0.1316,{"date":276,"score":267,"percentile":277},"2026-05-26",0.13152,{"date":279,"score":267,"percentile":280},"2026-05-27",0.13244,{"date":282,"score":283,"percentile":284},"2026-05-28",0.00062,0.19509,{"date":286,"score":283,"percentile":287},"2026-05-29",0.19571,{"date":289,"score":290,"percentile":291},"2026-05-30",0.00061,0.19272,{"date":293,"score":290,"percentile":294},"2026-05-31",0.19263,{"date":296,"score":290,"percentile":297},"2026-06-01",0.19249,{"date":299,"score":290,"percentile":300},"2026-06-02",0.19245,{"date":302,"score":290,"percentile":303},"2026-06-03",0.19247,{"date":305,"score":290,"percentile":306},"2026-06-04",0.19258,{"date":308,"score":290,"percentile":309},"2026-06-05",0.19331,{"date":311,"score":290,"percentile":312},"2026-06-06",0.19327,{"date":314,"score":290,"percentile":315},"2026-06-07",0.19282,{"date":317,"score":290,"percentile":318},"2026-06-08",0.19212,{"date":320,"score":290,"percentile":321},"2026-06-09",0.19233,{"date":323,"score":290,"percentile":324},"2026-06-10",0.19285,{"date":326,"score":290,"percentile":327},"2026-06-11",0.19318,{"date":329,"score":290,"percentile":330},"2026-06-12",0.19488,{"date":332,"score":290,"percentile":284},"2026-06-13",{"date":334,"score":290,"percentile":335},"2026-06-14",0.19485,{"date":337,"score":338,"percentile":339},"2026-06-15",0.0034,0.25595,{"date":341,"score":338,"percentile":342},"2026-06-16",0.25635,{"date":344,"score":338,"percentile":345},"2026-06-17",0.25649,{"date":347,"score":338,"percentile":348},"2026-06-18",0.25675,{"date":350,"score":338,"percentile":351},"2026-06-19",0.25663,{"date":353,"score":338,"percentile":354},"2026-06-20",0.25652,{"date":356,"score":338,"percentile":357},"2026-06-21",0.25631,{"date":359,"score":338,"percentile":360},"2026-06-22",0.25606,{"date":362,"score":211,"percentile":363},"2026-06-23",0.15838,{"date":365,"score":211,"percentile":366},"2026-06-24",0.1586,{"date":368,"score":211,"percentile":369},"2026-06-25",0.15956,{"date":371,"score":211,"percentile":372},"2026-06-26",0.15977,{"date":374,"score":211,"percentile":375},"2026-06-27",0.16015,{"date":377,"score":211,"percentile":378},"2026-06-28",0.1598,{"date":380,"score":211,"percentile":381},"2026-06-29",0.15976,{"date":383,"score":211,"percentile":384},"2026-06-30",0.15968,{"date":386,"score":211,"percentile":387},"2026-07-01",0.16057,{"date":389,"score":211,"percentile":390},"2026-07-02",0.1599,{"date":392,"score":211,"percentile":393},"2026-07-03",0.15991,{"date":395,"score":211,"percentile":396},"2026-07-04",0.15997,{"date":262,"score":211,"percentile":263},[399,404,406],{"source":215,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":400,"cvss_v4_0":9},{"baseScore":213,"baseSeverity":401,"vectorString":216,"impactScore":402,"exploitabilityScore":403},"MEDIUM",6,7.2,{"source":222,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":405,"cvss_v4_0":9},{"baseScore":213,"baseSeverity":401,"vectorString":216,"impactScore":402,"exploitabilityScore":403},{"source":221,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":407,"cvss_v4_0":9},{"baseScore":213,"baseSeverity":9,"vectorString":216,"impactScore":402,"exploitabilityScore":403},[409,422,428],{"ecosystem":410,"name":411,"vendor":412,"product":413,"cpe_part":9,"purl_type":414,"purl_namespace":412,"purl_name":413,"source":9,"versions":415},"Go","golang.org/x/net","golang.org/x","net","golang",[416],{"version":417,"is_range":418,"range_type":419,"version_start":9,"version_start_type":9,"version_end":420,"version_end_type":421,"fixed_in":9},"lt0_55_0",true,"semver","0.55.0","excluding",{"ecosystem":9,"name":413,"vendor":414,"product":413,"cpe_part":423,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":424},"a",[425],{"version":426,"is_range":418,"range_type":427,"version_start":9,"version_start_type":9,"version_end":420,"version_end_type":421,"fixed_in":9},"lt0.55.0","cpe",{"ecosystem":9,"name":429,"vendor":411,"product":429,"cpe_part":423,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":430},"golang.org/x/net/html",[431],{"version":432,"is_range":418,"range_type":215,"version_start":9,"version_start_type":9,"version_end":420,"version_end_type":421,"fixed_in":9},"\u003C 0.55.0"]