{"id":"GO-2026-6866","aliases":["CVE-2026-97045"],"title":"Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net","titleSource":"OSV","descriptionSource":"OSV","description":"In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as <mglyph> or <malignmark> fostered under <mtext>), causing a parser to resolve the subtree in a different foreign namespace upon re-parsing the rendered output.\n\nContinue walking the full ancestor chain and verify that every transition from a non-empty namespace occurs at an HTML integration point before emitting literal text.","severity":"unknown","score":null,"published":"2026-10-27T21:16:18.000Z","modified":"2026-10-27T21:45:08.978Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Go","name":"golang.org/x/net","sources":[{"name":"OSV · GO-2026-6866","url":"https://osv.dev/vulnerability/GO-2026-6866"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.62.0"}],"type":"SEMVER"}],"versions":[],"fixed":["0.62.0"]}],"sourceAffected":[],"references":["https://go.dev/cl/855121","https://go.dev/issue/82622","https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs","https://pkg.go.dev/vuln/GO-2026-6866"],"sources":[{"name":"OSV","id":"GO-2026-6866","modified":"2026-10-27T21:45:08.978077289Z","url":"https://osv.dev/vulnerability/GO-2026-6866"},{"name":"CVE","id":"CVE-2026-97045","modified":"2026-10-27T21:38:56.700Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-97045"}],"assessments":[],"products":[{"vendor":"golang.org/x/net","name":"golang.org/x/net/html","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"0.62.0","versionType":"semver"}],"defaultStatus":"unaffected","source":"Go","url":"https://www.cve.org/CVERecord?id=CVE-2026-97045"}],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T10:55:32.941Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}