CVE-2026-55185: Unbounded Html Tokenization No Early Exit
The function tokenizes an HTML string and writes all resulting text tokens to a buffer in a loop that only exits on EOF or error. Without an early-exit mechanism (such as short-circuiting via an iterator or length check), excessively large HTML payloads can lead to Denial of Service (DoS) due to CPU and memory exhaustion. Consider replacing rigid loops with
Gogreprules fetch cve-2026-55185-unbounded-html-tokenization-no-early-exit --engine opengrepDescription
The function tokenizes an HTML string and writes all resulting text tokens to a buffer in a loop that only exits on EOF or error. Without an early-exit mechanism (such as short-circuiting via an iterator or length check), excessively large HTML payloads can lead to Denial of Service (DoS) due to CPU and memory exhaustion. Consider replacing rigid loops with
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.