The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Multicluster engine for Kubernetes 2.9 | RedHat | multicluster-engine/hive-rhel9:sha256:8422d2c6e47dbb14bc80b03734fd702c57724bf384557e9b9e1a67b85e6b8185 | * |