https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T18:03:49.030785+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-45338 CVE-2024-45338 — Non-linear parsing of case-insensitive content in golang.org/x/net/html 2026-10-08T18:03:49.583145+00:00

Affected: golang.org/x/net/html

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

 https://vulnerability.circl.lu/vuln/usn-7197-1 USN-7197-1 — golang-golang-x-net vulnerability 2026-10-08T18:03:49.583392+00:00

Affected: Ubuntu:Pro:16.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:16.04:LTS: juju-core, Ubuntu:Pro:18.04:LTS: golang-golang-x-net-dev, Ubuntu:20.04:LTS: adsys, Ubuntu:Pro:20.04:LTS: golang-golang-x-net-dev, Ubuntu:22.04:LTS: adsys, Ubuntu:Pro:22.04:LTS: golang-golang-x-net, Ubuntu:24.04:LTS: adsys, Ubuntu:Pro:24.04:LTS: golang-golang-x-net

Guido Vranken discovered that Go Networking handled input to the Parse functions inefficiently. An attacker could possibly use this issue to cause denial of service. This update addresses the issue in the golang-golang-x-net and golang-golang-x-net-dev packages, as well as the library vendored within adsys and juju-core.