CVE-2026-78661

The golang.org/x/net package is vulnerable to a quadratic complexity issue when coalescing adjacent text nodes within the addText and fosterParent functions. The root cause is the use of string concatenation (n.Data += text) for appending data, which triggers repetitive reallocations and byte cop...