Denial of Service (DoS)

Overview golang.org/x/net/html is a package that implements an HTML5-compliant tokenizer and parser. Affected versions of this package are vulnerable to Denial of Service DoS in the addText and fosterParent functions of the html package. An attacker can force quadratic allocations and byte copies...

EUVD-2026-38385

MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps...