{"id":"GHSA-w4gw-w5jq-g9jh","revision":null,"records":[{"revision":"fd4e5bf3fb7a45ea9cef1b4ee35bbd30","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-47911","aliases":[],"title":"Quadratic parsing complexity in golang.org/x/net/html","description":"The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.","state":0,"publishedAt":"2026-02-05T17:48:44.562+00:00","modifiedAt":"2026-02-12T15:23:55.509+00:00","affected":[{"ecosystem":"https://pkg.go.dev","name":"golang.org/x/net/html","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"golang.org/x/net\",\n                    \"product\": \"golang.org/x/net/html\",\n                    \"collectionURL\": \"https://pkg.go.dev\",\n                    \"packageName\": \"golang.org/x/net/html\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"0.45.0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"parser.parse\"\n                        },\n                        {\n                            \"name\": \"Parse\"\n                        },\n                        {\n                            \"name\": \"ParseFragment\"\n                        },\n                        {\n                            \"name\": \"ParseFragmentWithOptions\"\n                        },\n                        {\n                            \"name\": \"ParseWithOptions\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://go.dev/cl/709876","https://github.com/golang/vulndb/issues/4440","https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c","https://pkg.go.dev/vuln/GO-2026-4440"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-47911","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-47911","identifiers":["CVE-2025-47911"]},"retained":false,"historicalAffected":[]},{"revision":"b37f24b35676451380d62d3734d5a689","observedAt":"2026-11-15T04:33:02.551+00:00","statement":{"source":"euvd","id":"EUVD-2025-206856","aliases":["CVE-2025-47911","GHSA-w4gw-w5jq-g9jh"],"title":"The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.","description":"The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","score":5.3,"severity":null}],"references":["https://go.dev/cl/709876","https://github.com/golang/vulndb/issues/4440","https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c","https://pkg.go.dev/vuln/GO-2026-4440"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-206856","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Feb 5, 2026, 5:48:44 PM","dateUpdated":"Feb 12, 2026, 3:23:55 PM"},"relatedAdvisories":[{"id":"openSUSE-SU-2025:15620-1","title":"headscale-0.26.1-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"SUSE-SU-2025:4444-1","title":"Security update 5.1.1.1 for Multi-Linux Manager Client Tools","vulnerabilityIds":["CVE-2025-11065","CVE-2025-47911","CVE-2025-58190","CVE-2025-64751"]},{"id":"openSUSE-SU-2025:20128-1","title":"Security update for shadowsocks-v2ray-plugin, v2ray-core","vulnerabilityIds":["CVE-2025-297850","CVE-2025-47911"]},{"id":"openSUSE-SU-2026:20798-1","title":"Security update for trivy","vulnerabilityIds":["CVE-2024-3817","CVE-2024-45337","CVE-2024-45338","CVE-2024-51744","CVE-2025-11065","CVE-2025-21613","CVE-2025-21614","CVE-2025-22868","CVE-2025-22869","CVE-2025-22872","CVE-2025-27144","CVE-2025-30204","CVE-2025-46569","CVE-2025-47291","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-53547","CVE-2025-58058","CVE-2025-58181","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:10173-1","title":"apptainer-1.4.5-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15607-1","title":"glow-2.1.1-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"RHSA-2026:82354","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2","vulnerabilityIds":["CVE-2024-34459","CVE-2025-5278","CVE-2025-6170","CVE-2025-9086","CVE-2025-9820","CVE-2025-11187","CVE-2025-13151","CVE-2025-14087","CVE-2025-14104","CVE-2025-14512","CVE-2025-14831","CVE-2025-15281","CVE-2025-15467","CVE-2025-15468","CVE-2025-15469","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2025-61726","CVE-2025-61728","CVE-2025-61730","CVE-2025-66199","CVE-2025-68121","CVE-2025-68160","CVE-2025-69418","CVE-2025-69419","CVE-2025-69420","CVE-2025-69421","CVE-2026-0861","CVE-2026-0915","CVE-2026-1965","CVE-2026-2100","CVE-2026-2673","CVE-2026-3783","CVE-2026-3832","CVE-2026-3833","CVE-2026-4046","CVE-2026-4111","CVE-2026-4424","CVE-2026-4437","CVE-2026-4438","CVE-2026-4878","CVE-2026-5121","CVE-2026-5260","CVE-2026-5419","CVE-2026-5435","CVE-2026-5450","CVE-2026-5928","CVE-2026-6238","CVE-2026-6653","CVE-2026-7383","CVE-2026-8286","CVE-2026-9076","CVE-2026-9547","CVE-2026-11822","CVE-2026-11824","CVE-2026-11979","CVE-2026-13757","CVE-2026-14164","CVE-2026-15588","CVE-2026-16118","CVE-2026-22795","CVE-2026-22796","CVE-2026-25679","CVE-2026-25681","CVE-2026-27135","CVE-2026-27136","CVE-2026-27145","CVE-2026-28390","CVE-2026-29111","CVE-2026-31790","CVE-2026-32280","CVE-2026-32281","CVE-2026-32283","CVE-2026-33186","CVE-2026-33811","CVE-2026-33814","CVE-2026-33818","CVE-2026-33845","CVE-2026-33846","CVE-2026-34180","CVE-2026-34181","CVE-2026-34182","CVE-2026-34183","CVE-2026-34986","CVE-2026-39820","CVE-2026-39822","CVE-2026-40355","CVE-2026-40356","CVE-2026-41989","CVE-2026-42009","CVE-2026-42010","CVE-2026-42011","CVE-2026-42012","CVE-2026-42013","CVE-2026-42014","CVE-2026-42015","CVE-2026-42499","CVE-2026-42504","CVE-2026-42764","CVE-2026-42766","CVE-2026-42767","CVE-2026-42768","CVE-2026-42769","CVE-2026-42770","CVE-2026-45445","CVE-2026-45446","CVE-2026-45447","CVE-2026-48864","CVE-2026-54369","CVE-2026-54370","CVE-2026-54371","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-58010","CVE-2026-58011","CVE-2026-58012","CVE-2026-58013","CVE-2026-58014","CVE-2026-58015","CVE-2026-58016","CVE-2026-58055"]},{"id":"openSUSE-SU-2026:10862-1","title":"yq-4.53.2-1.1 on GA media","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-58190","CVE-2026-33814"]},{"id":"openSUSE-SU-2025-20118-1","title":"Security update for gitea-tea","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15779-1","title":"helm3-3.19.2-1.1 on GA media","vulnerabilityIds":["CVE-2018-16873","CVE-2018-16874","CVE-2018-16875","CVE-2021-21272","CVE-2022-1996","CVE-2022-23524","CVE-2022-23525","CVE-2022-23526","CVE-2022-36055","CVE-2023-25165","CVE-2023-25173","CVE-2024-25620","CVE-2024-26147","CVE-2024-45337","CVE-2024-45338","CVE-2025-22870","CVE-2025-22872","CVE-2025-47911","CVE-2025-53547","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15617-1","title":"forgejo-12.0.4-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"SUSE-SU-2026:20357-1","title":"Security update for elemental-toolkit, elemental-operator","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"SUSE-SU-2026:22249-1","title":"Security update for google-osconfig-agent","vulnerabilityIds":["CVE-2023-45288","CVE-2025-22868","CVE-2025-47911","CVE-2025-58190","CVE-2026-33186","CVE-2026-33814","CVE-2026-34986","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"openSUSE-SU-2025:15689-1","title":"gomuks-0.3.1-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911"]},{"id":"openSUSE-SU-2026:21210-1","title":"Security update for google-osconfig-agent","vulnerabilityIds":["CVE-2023-45288","CVE-2025-22868","CVE-2025-47911","CVE-2025-58190","CVE-2026-33186","CVE-2026-33814","CVE-2026-34986","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"openSUSE-SU-2026:12309-1","title":"timoni-0.36.0-1.1 on GA media","vulnerabilityIds":["CVE-2024-45338","CVE-2025-22872","CVE-2025-47911","CVE-2025-58190","CVE-2026-100351","CVE-2026-100352","CVE-2026-100353","CVE-2026-100354","CVE-2026-33186","CVE-2026-78659","CVE-2026-78660","CVE-2026-78663","CVE-2026-78669","CVE-2026-97032"]},{"id":"openSUSE-SU-2025:15730-1","title":"helm-3.19.1-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"SUSE-SU-2026:2096-1","title":"Security update for yq","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-58190","CVE-2026-33814"]},{"id":"openSUSE-SU-2026:20105-1","title":"Security update for sbctl","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58058","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15852-1","title":"trivy-0.68.2-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15709-1","title":"google-osconfig-agent-20251028.00-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15830-1","title":"alloy-1.12.0-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:20318-1","title":"Security update for gitea-tea","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"SUSE-SU-2026:20685-1","title":"Security update for helm","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"SUSE-SU-2025:4190-1","title":"Security update for helm","vulnerabilityIds":["CVE-2025-47911","CVE-2025-53547","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:20044-1","title":"Security update for alloy","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15729-1","title":"go-sendxmpp-0.15.1-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15854-1","title":"kepler-0.11.3-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:12271-1","title":"kured-1.23.0-1.1 on GA media","vulnerabilityIds":["CVE-2022-21698","CVE-2025-22872","CVE-2025-47911","CVE-2026-33814","CVE-2026-39821","CVE-2026-42504"]},{"id":"SUSE-SU-2026:0028-1","title":"Security update for alloy","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:11294-1","title":"lux-0.24.1-1.1 on GA media","vulnerabilityIds":["CVE-2024-45338","CVE-2025-22872","CVE-2025-47911","CVE-2025-58190","CVE-2026-25680"]},{"id":"openSUSE-SU-2026:12300-1","title":"kumactl-3.0.0-1.1 on GA media","vulnerabilityIds":["CVE-2024-45337","CVE-2024-45338","CVE-2024-51744","CVE-2025-22869","CVE-2025-22872","CVE-2025-30204","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2026-26958","CVE-2026-33186","CVE-2026-41178"]},{"id":"openSUSE-SU-2026:20132-1","title":"Security update for elemental-register, elemental-toolkit","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:11514-1","title":"containerized-data-importer1.66-api-1.66.0-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58058","CVE-2025-58190","CVE-2026-27136","CVE-2026-34986","CVE-2026-35469","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39832","CVE-2026-42508","CVE-2026-56852"]},{"id":"RHSA-2026:43692","title":"Red Hat Security Advisory: Red Hat OpenShift API for Data Protection","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-33186","CVE-2026-33811","CVE-2026-33814","CVE-2026-39817","CVE-2026-39820","CVE-2026-39821","CVE-2026-39823","CVE-2026-39825","CVE-2026-39826","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-40356","CVE-2026-42499","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"openSUSE-SU-2026:12299-1","title":"kubeseal-0.41.1-1.1 on GA media","vulnerabilityIds":["CVE-2024-45337","CVE-2024-45338","CVE-2025-47911","CVE-2025-58181"]},{"id":"openSUSE-SU-2025:15616-1","title":"distrobuilder-3.2-4.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"SUSE-SU-2026:0580-1","title":"Security update for apptainer","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"RHSA-2026:34342","title":"Red Hat Security Advisory: Cluster Observability Operator 1.5.0","vulnerabilityIds":["CVE-2020-7753","CVE-2021-33623","CVE-2024-4068","CVE-2024-45338","CVE-2024-52011","CVE-2025-22868","CVE-2025-22870","CVE-2025-22872","CVE-2025-47911","CVE-2025-58190","CVE-2026-1526","CVE-2026-1528","CVE-2026-2229","CVE-2026-4800","CVE-2026-4867","CVE-2026-6321","CVE-2026-6322","CVE-2026-6734","CVE-2026-9277","CVE-2026-9697","CVE-2026-12143","CVE-2026-12151","CVE-2026-25680","CVE-2026-25681","CVE-2026-29063","CVE-2026-32141","CVE-2026-33228","CVE-2026-33671","CVE-2026-33814","CVE-2026-33891","CVE-2026-33894","CVE-2026-33895","CVE-2026-33896","CVE-2026-33937","CVE-2026-33938","CVE-2026-33939","CVE-2026-33940","CVE-2026-33941","CVE-2026-39821","CVE-2026-42506","CVE-2026-48779"]},{"id":"openSUSE-SU-2026:20206-1","title":"Security update for kepler","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"SUSE-SU-2025:4479-1","title":"Security update 4.3.16.2 for Multi-Linux Manager Server LTS","vulnerabilityIds":["CVE-2025-11065","CVE-2025-47911","CVE-2025-58190","CVE-2025-62348","CVE-2025-62349","CVE-2025-64751"]},{"id":"openSUSE-SU-2025:15669-1","title":"grafana-11.6.7-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:21662-1","title":"Security update for glab","vulnerabilityIds":["CVE-2024-45338","CVE-2024-6104","CVE-2025-22872","CVE-2025-47911","CVE-2025-58190","CVE-2026-25681","CVE-2026-27136","CVE-2026-33814","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"openSUSE-SU-2026:21367-1","title":"Security update for lux","vulnerabilityIds":["CVE-2024-45338","CVE-2025-22872","CVE-2025-47911","CVE-2025-58190","CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-42502","CVE-2026-42506"]},{"id":"SUSE-SU-2026:22242-1","title":"Security update for google-osconfig-agent","vulnerabilityIds":["CVE-2023-45288","CVE-2024-45339","CVE-2025-22868","CVE-2025-47911","CVE-2025-58190","CVE-2026-33186","CVE-2026-33814","CVE-2026-34986","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"openSUSE-SU-2026:11126-1","title":"velociraptor-0.7.0.4.git185.a5708584-2.1 on GA media","vulnerabilityIds":["CVE-2023-45288","CVE-2024-45339","CVE-2025-13465","CVE-2025-22868","CVE-2025-22869","CVE-2025-22870","CVE-2025-22872","CVE-2025-24358","CVE-2025-47911","CVE-2025-58058","CVE-2025-58181","CVE-2025-58190","CVE-2025-5889","CVE-2025-64718","CVE-2025-6545","CVE-2025-6547","CVE-2025-7783","CVE-2026-1229","CVE-2026-25128","CVE-2026-25680","CVE-2026-25681","CVE-2026-26278","CVE-2026-26996","CVE-2026-27136","CVE-2026-2739","CVE-2026-27606","CVE-2026-27904","CVE-2026-33036","CVE-2026-33186","CVE-2026-33487","CVE-2026-33814","CVE-2026-34986","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42039","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"openSUSE-SU-2025:15647-1","title":"ollama-0.12.6-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911"]},{"id":"openSUSE-SU-2025:15618-1","title":"forgejo-longterm-11.0.6-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"SUSE-SU-2025:4482-1","title":"Security update for grafana","vulnerabilityIds":["CVE-2025-11065","CVE-2025-3415","CVE-2025-47911","CVE-2025-58190","CVE-2025-6023","CVE-2025-6197","CVE-2025-64751"]},{"id":"openSUSE-SU-2025:15624-1","title":"golang-github-v2fly-v2ray-core-5.40.0-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911"]},{"id":"openSUSE-SU-2025-20128-1","title":"Security update for shadowsocks-v2ray-plugin, v2ray-core","vulnerabilityIds":["CVE-2025-297850","CVE-2025-47911"]},{"id":"openSUSE-SU-2025:15654-1","title":"git-bug-0.10.1-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"RHSA-2026:82304","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2","vulnerabilityIds":["CVE-2024-34459","CVE-2025-5278","CVE-2025-6170","CVE-2025-13151","CVE-2025-14087","CVE-2025-14512","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2026-1965","CVE-2026-2100","CVE-2026-2673","CVE-2026-3783","CVE-2026-3832","CVE-2026-3833","CVE-2026-4046","CVE-2026-4424","CVE-2026-4437","CVE-2026-4438","CVE-2026-4878","CVE-2026-5121","CVE-2026-5260","CVE-2026-5419","CVE-2026-5435","CVE-2026-5450","CVE-2026-5928","CVE-2026-6238","CVE-2026-6653","CVE-2026-7383","CVE-2026-8286","CVE-2026-9076","CVE-2026-9547","CVE-2026-11822","CVE-2026-11824","CVE-2026-11979","CVE-2026-13757","CVE-2026-14164","CVE-2026-15588","CVE-2026-16118","CVE-2026-25680","CVE-2026-25681","CVE-2026-27135","CVE-2026-27136","CVE-2026-28390","CVE-2026-29111","CVE-2026-31790","CVE-2026-33186","CVE-2026-33845","CVE-2026-33846","CVE-2026-34180","CVE-2026-34181","CVE-2026-34182","CVE-2026-34183","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-40355","CVE-2026-40356","CVE-2026-41989","CVE-2026-42009","CVE-2026-42010","CVE-2026-42011","CVE-2026-42012","CVE-2026-42013","CVE-2026-42014","CVE-2026-42015","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-42764","CVE-2026-42766","CVE-2026-42767","CVE-2026-42768","CVE-2026-42769","CVE-2026-42770","CVE-2026-45445","CVE-2026-45446","CVE-2026-45447","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598","CVE-2026-46600","CVE-2026-48864","CVE-2026-54369","CVE-2026-54370","CVE-2026-54371","CVE-2026-56854","CVE-2026-56855","CVE-2026-58010","CVE-2026-58011","CVE-2026-58012","CVE-2026-58013","CVE-2026-58014","CVE-2026-58015","CVE-2026-58016","CVE-2026-58055","CVE-2026-78662","CVE-2026-84304","CVE-2026-84445"]},{"id":"openSUSE-SU-2025:20118-1","title":"Security update for gitea-tea","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:11520-1","title":"kubevirt1.9-container-disk-1.9.0-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190","CVE-2026-13201","CVE-2026-27136","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39832","CVE-2026-42508","CVE-2026-56852"]},{"id":"openSUSE-SU-2025:15743-1","title":"sbctl-0.18-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-RU-2026:20010-1","title":"Recommended update for trivy","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15619-1","title":"gitea-tea-0.11.0-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15722-1","title":"hauler-1.3.1-1.1 on GA media","vulnerabilityIds":["CVE-2025-11579","CVE-2025-47911","CVE-2025-58058"]},{"id":"RHSA-2026:82322","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2","vulnerabilityIds":["CVE-2024-34459","CVE-2025-5278","CVE-2025-6170","CVE-2025-13151","CVE-2025-14087","CVE-2025-14512","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2026-1965","CVE-2026-2100","CVE-2026-2673","CVE-2026-3783","CVE-2026-3832","CVE-2026-3833","CVE-2026-4046","CVE-2026-4424","CVE-2026-4437","CVE-2026-4438","CVE-2026-4878","CVE-2026-5121","CVE-2026-5260","CVE-2026-5419","CVE-2026-5435","CVE-2026-5450","CVE-2026-5928","CVE-2026-6238","CVE-2026-6653","CVE-2026-7383","CVE-2026-8286","CVE-2026-9076","CVE-2026-9547","CVE-2026-11822","CVE-2026-11824","CVE-2026-11979","CVE-2026-13757","CVE-2026-14164","CVE-2026-15588","CVE-2026-16118","CVE-2026-25680","CVE-2026-25681","CVE-2026-27135","CVE-2026-27136","CVE-2026-28390","CVE-2026-29111","CVE-2026-29181","CVE-2026-31790","CVE-2026-33186","CVE-2026-33845","CVE-2026-33846","CVE-2026-34180","CVE-2026-34181","CVE-2026-34182","CVE-2026-34183","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-40355","CVE-2026-40356","CVE-2026-41989","CVE-2026-42009","CVE-2026-42010","CVE-2026-42011","CVE-2026-42012","CVE-2026-42013","CVE-2026-42014","CVE-2026-42015","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-42764","CVE-2026-42766","CVE-2026-42767","CVE-2026-42768","CVE-2026-42769","CVE-2026-42770","CVE-2026-45445","CVE-2026-45446","CVE-2026-45447","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598","CVE-2026-46600","CVE-2026-48864","CVE-2026-54369","CVE-2026-54370","CVE-2026-54371","CVE-2026-56854","CVE-2026-56855","CVE-2026-58010","CVE-2026-58011","CVE-2026-58012","CVE-2026-58013","CVE-2026-58014","CVE-2026-58015","CVE-2026-58016","CVE-2026-58055","CVE-2026-78662","CVE-2026-84304","CVE-2026-84445"]},{"id":"SUSE-SU-2026:22558-1","title":"Security update for google-osconfig-agent","vulnerabilityIds":["CVE-2023-45288","CVE-2025-22868","CVE-2025-47911","CVE-2025-58190","CVE-2026-33186","CVE-2026-33814","CVE-2026-34986","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"openSUSE-SU-2025:20143-1","title":"Security update for git-bug","vulnerabilityIds":["CVE-2024-45337","CVE-2025-22869","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:21603-1","title":"Security update for gitea-tea","vulnerabilityIds":["CVE-2024-45337","CVE-2024-45338","CVE-2025-22869","CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:21824-1","title":"Security update for containerized-data-importer1.65","vulnerabilityIds":["CVE-2025-22869","CVE-2025-22870","CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58058","CVE-2025-58181","CVE-2025-58190","CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-33186","CVE-2026-33814","CVE-2026-34986","CVE-2026-35469","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41178","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598","CVE-2026-56852","CVE-2026-56854","CVE-2026-56855","CVE-2026-78662","CVE-2026-84303","CVE-2026-84304"]},{"id":"openSUSE-SU-2025:20160-1","title":"Security update for hauler","vulnerabilityIds":["CVE-2024-0406","CVE-2024-45338","CVE-2025-11579","CVE-2025-22872","CVE-2025-46569","CVE-2025-47911","CVE-2025-58058","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:20654-1","title":"Security update for grafana","vulnerabilityIds":["CVE-2023-45288","CVE-2024-11741","CVE-2024-28180","CVE-2024-45339","CVE-2024-51744","CVE-2024-9264","CVE-2024-9476","CVE-2025-11065","CVE-2025-21613","CVE-2025-22870","CVE-2025-22872","CVE-2025-2703","CVE-2025-27144","CVE-2025-29923","CVE-2025-3415","CVE-2025-3454","CVE-2025-3580","CVE-2025-4123","CVE-2025-47911","CVE-2025-58190","CVE-2025-6023","CVE-2025-6197","CVE-2025-64751","CVE-2025-68156","CVE-2026-21720","CVE-2026-21721","CVE-2026-21722"]},{"id":"SUSE-SU-2025:4446-1","title":"Security update 5.1.1.1 for Multi-Linux Manager Client Tools","vulnerabilityIds":["CVE-2025-11065","CVE-2025-47911","CVE-2025-58190","CVE-2025-64751"]},{"id":"openSUSE-SU-2026:20730-1","title":"Security update for apptainer","vulnerabilityIds":["CVE-2023-45288","CVE-2024-28180","CVE-2024-3727","CVE-2024-41110","CVE-2024-45337","CVE-2024-45338","CVE-2025-22869","CVE-2025-22870","CVE-2025-22872","CVE-2025-27144","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2025-65105","CVE-2025-8556","CVE-2026-24137","CVE-2026-33186","CVE-2026-34986"]},{"id":"openSUSE-SU-2026:12167-1","title":"pocketbase-0.40.5-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190","CVE-2026-44166"]},{"id":"SUSE-SU-2025:21043-1","title":"Security update for helm","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:20327-1","title":"Security update for helm","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"RHSA-2026:7291","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-22873","CVE-2025-47910","CVE-2025-47911","CVE-2025-47912","CVE-2025-47914","CVE-2025-58181","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-58190","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121","CVE-2026-25679","CVE-2026-27137","CVE-2026-27138","CVE-2026-27139","CVE-2026-27141","CVE-2026-27142","CVE-2026-27143","CVE-2026-27144","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33809","CVE-2026-33810"]},{"id":"openSUSE-SU-2026:20892-1","title":"Security update for yq","vulnerabilityIds":["CVE-2024-45338","CVE-2025-22872","CVE-2025-47911","CVE-2025-58190","CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-33814","CVE-2026-39821","CVE-2026-42502","CVE-2026-42506"]},{"id":"openSUSE-SU-2025:16751-1","title":"gomuks-0.3.1-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911"]},{"id":"SUSE-SU-2025:21221-1","title":"Security update for helm","vulnerabilityIds":["CVE-2025-47911","CVE-2025-58190"]},{"id":"SUSE-SU-2026:20176-1","title":"Security update for elemental-register, elemental-toolkit","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"SUSE-SU-2026:20089-1","title":"Security update for alloy","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"RHSA-2026:37387","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2024-25621","CVE-2024-40635","CVE-2024-45310","CVE-2025-8766","CVE-2025-21613","CVE-2025-21614","CVE-2025-22870","CVE-2025-47911","CVE-2025-52881","CVE-2025-54410","CVE-2025-58058","CVE-2025-64329","CVE-2025-66506","CVE-2026-22772","CVE-2026-23831","CVE-2026-24117","CVE-2026-25680","CVE-2026-25681","CVE-2026-25934","CVE-2026-27136","CVE-2026-27141","CVE-2026-27903","CVE-2026-33540","CVE-2026-33747","CVE-2026-33748","CVE-2026-33814","CVE-2026-34986","CVE-2026-35172","CVE-2026-35469","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-39883","CVE-2026-41506","CVE-2026-41567","CVE-2026-41568","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-44740","CVE-2026-45571","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"WID-SEC-W-2026-1618","title":"Splunk Splunk Enterprise: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-58190","CVE-2025-61726","CVE-2025-61731","CVE-2025-61732","CVE-2025-68121","CVE-2025-68156","CVE-2026-27141","CVE-2026-20240","CVE-2026-20239"]},{"id":"RHSA-2026:7385","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-22873","CVE-2025-47910","CVE-2025-47911","CVE-2025-47912","CVE-2025-47914","CVE-2025-58181","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-58190","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121","CVE-2026-25679","CVE-2026-27139","CVE-2026-27141","CVE-2026-27143","CVE-2026-27144","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33809","CVE-2026-33813","CVE-2026-42503"]},{"id":"SUSE-SU-2026:20244-1","title":"Security update for elemental-toolkit, elemental-operator","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:20058-1","title":"Security update for go-sendxmpp","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-58190"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-206856","identifiers":["EUVD-2025-206856","CVE-2025-47911","GHSA-w4gw-w5jq-g9jh"]},"retained":false,"historicalAffected":[]},{"revision":"8902db6690cc4b9ca99a61d8c7199fb4","observedAt":"2026-10-25T02:24:54.05+00:00","statement":{"source":"nvd","id":"CVE-2025-47911","aliases":[],"title":"The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.","description":"The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.","state":0,"publishedAt":"2026-02-05T18:16:09.893+00:00","modifiedAt":"2026-06-17T09:28:50.07+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · nvd@nist.gov · Primary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","score":5.3,"severity":"MEDIUM"},{"system":"CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","score":5.3,"severity":"MEDIUM"}],"references":["https://github.com/golang/vulndb/issues/4440","https://go.dev/cl/709876","https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c","https://pkg.go.dev/vuln/GO-2026-4440"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-47911","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Analyzed","weaknesses":["NVD-CWE-noinfo"],"productCriteria":["cpe:2.3:a:go:html:*:*:*:*:*:go:*:*"],"sourceDates":{"published":"2026-02-05T18:16:09.893","lastModified":"2026-06-17T09:28:50.070"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2025-47911","identifiers":["CVE-2025-47911"]},"retained":false,"historicalAffected":[]},{"revision":"88dbb9480e254032b59601f5c52a4102","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-w4gw-w5jq-g9jh","aliases":["CVE-2025-47911","GO-2026-4440"],"title":"golang.org/x/net/html has a Quadratic Parsing Complexity issue","description":"The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to Denial of Service (DoS) if an attacker provides specially crafted HTML content.","state":0,"publishedAt":"2026-02-12T22:06:13+00:00","modifiedAt":"2026-09-10T03:50:35.970501+00:00","affected":[{"ecosystem":"Go","name":"golang.org/x/net/html","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.45.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2025-47911","https://github.com/golang/vulndb/issues/4440","https://go.dev/cl/709876","https://go.googlesource.com/net","https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c","https://pkg.go.dev/vuln/GO-2026-4440"],"sourceUrl":"https://github.com/advisories/GHSA-w4gw-w5jq-g9jh","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-w4gw-w5jq-g9jh","identifiers":["GHSA-w4gw-w5jq-g9jh","CVE-2025-47911","GO-2026-4440"]},"retained":false,"historicalAffected":[]},{"revision":"6cf7ee0f354d4c2486f514274cc099b3","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-4440","aliases":["CVE-2025-47911","GHSA-w4gw-w5jq-g9jh"],"title":"Quadratic parsing complexity in golang.org/x/net/html","description":"The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.","state":0,"publishedAt":"2026-02-05T17:23:14+00:00","modifiedAt":"2026-05-15T10:59:23.8833315+00:00","affected":[{"ecosystem":"Go","name":"golang.org/x/net","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.45.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://go.dev/cl/709876","https://github.com/golang/vulndb/issues/4440","https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-4440","license":"OSV · upstream source license applies","key":"osv:GO-2026-4440","identifiers":["GO-2026-4440","CVE-2025-47911","GHSA-w4gw-w5jq-g9jh"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-15T18:44:29.5338368+00:00","complete":true,"records":1781,"lastAttemptAt":"2026-11-15T18:44:29.5338368+00:00","lastSuccessAt":"2026-11-15T18:44:29.78352+00:00","error":null,"lastVerifiedAt":"2026-11-15T18:44:29.783521+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-7de4d7559a5263003f03d9f70577ab06f92ba4178309f26fce53e22a4a959294-b9fbd1daaa4463d210736a9586507854993056a11f4ff4425329364edc1bad1c","complete":true,"records":425838,"lastAttemptAt":"2026-11-15T18:44:28.9589827+00:00","lastSuccessAt":"2026-11-15T18:44:28.9300882+00:00","error":null,"lastVerifiedAt":"2026-11-15T18:44:28.9589827+00:00","snapshotPublishedAt":"2026-11-15T18:19:48+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-690aaf2f7fdd47eaaa0e869ffa316905","complete":true,"records":13821,"lastAttemptAt":"2026-11-15T18:59:39.6961048+00:00","lastSuccessAt":"2026-11-15T18:59:39.692+00:00","error":null,"lastVerifiedAt":"2026-11-15T18:59:39.692+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13874,"expectedIdentifiers":13874,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-15T18:44:29.5338368+00:00","complete":true,"records":1125,"lastAttemptAt":"2026-11-15T18:44:29.5338368+00:00","lastSuccessAt":"2026-11-15T18:44:29.7845261+00:00","error":null,"lastVerifiedAt":"2026-11-15T18:44:29.7845265+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-78486e6112e2477ab52683c61207b1f4","complete":true,"records":13833,"lastAttemptAt":"2026-11-15T18:45:05.0249417+00:00","lastSuccessAt":"2026-11-15T18:45:05.012+00:00","error":null,"lastVerifiedAt":"2026-11-15T18:45:05.012+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13874,"expectedIdentifiers":13874,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-64eea06dbd27de8464d5dbce1b78cc794cc59e2d901516ae0d3ea76e624cdae0","complete":true,"records":9955,"lastAttemptAt":"2026-11-15T18:44:29.2701797+00:00","lastSuccessAt":"2026-11-14T13:57:23.1208135+00:00","error":null,"lastVerifiedAt":"2026-11-15T18:44:29.2701797+00:00","snapshotPublishedAt":"2026-11-14T13:17:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-f4424d7d4861b1af1404bd15abcb83f295dcd003412a9340ca99dc8200aa148a","complete":true,"records":2014,"lastAttemptAt":"2026-11-15T18:44:29.0330557+00:00","lastSuccessAt":"2026-11-13T19:57:08.2864435+00:00","error":null,"lastVerifiedAt":"2026-11-15T18:44:29.0330557+00:00","snapshotPublishedAt":"2026-11-13T19:33:10+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-6086d649bcb454cdf302d7d9275177bda73550e1b6e446b3520e9b6266d3582c","complete":true,"records":3148,"lastAttemptAt":"2026-11-15T18:44:29.2929405+00:00","lastSuccessAt":"2026-11-15T11:05:17.1034234+00:00","error":null,"lastVerifiedAt":"2026-11-15T18:44:29.2929405+00:00","snapshotPublishedAt":"2026-11-15T10:03:04+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-ff18f36f13fcca3a20a3fb9274b59b8872d18869a99071730e1e79b625c8f612","complete":true,"records":232475,"lastAttemptAt":"2026-11-15T18:44:29.1494018+00:00","lastSuccessAt":"2026-11-15T11:05:10.4195883+00:00","error":null,"lastVerifiedAt":"2026-11-15T18:44:29.1494018+00:00","snapshotPublishedAt":"2026-11-15T10:33:06+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}