https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-02T09:45:31.736969+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2026-fa45918 CLEANSTART-2026-FA45918 — When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string co… 2026-11-02T09:45:31.781511+00:00

Affected: CleanStart: prometheus

Security vulnerability affects the prometheus package. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.

 https://db.gcve.eu/vuln/fkie_cve-2026-78661 fkie_cve-2026-78661 2026-11-02T09:45:31.781597+00:00

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as "a</x>") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse.

 https://db.gcve.eu/vuln/ghsa-75pg-wvh3-34jr GHSA-75pg-wvh3-34jr 2026-11-02T09:45:31.781645+00:00

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as "a</x>") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse.

 https://db.gcve.eu/vuln/msrc_cve-2026-78661 msrc_CVE-2026-78661 — Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net 2026-11-02T09:45:31.781672+00:00 msrc_CVE-2026-78661 https://db.gcve.eu/vuln/ubuntu-cve-2026-78661 UBUNTU-CVE-2026-78661 2026-11-02T09:45:31.781699+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:16.04:LTS: juju-core, Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:16.04:LTS: containerd, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:Pro:16.04:LTS: google-guest-agent and 67 more

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as "a</x>") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse.