Skip to main content

CVE-2025-47911

CVE Details

Visit the official vulnerability details page for CVE-2025-47911 to learn more.

Initial Publication

02/05/2026

Last Update

02/18/2026

Third Party Dependency

golang.org/x/net

NIST CVE Summary

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

CVE Severity

5.3

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Analyzed

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
0.7.1⚠️ Impacted⚠️ Impacted
0.6.6⚠️ Impacted⚠️ Impacted
0.5.11⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.