HTML Integration Issue in Go Language Parsing Mechanism

CVE-2026-97045

What is CVE-2026-97045?

A vulnerability exists in the Go Language's HTML parsing mechanism where the traversal of the ancestor tree may not account for specific foreign namespace configurations. When an HTML integration point is detected, the parser can mistakenly resolve to a different namespace due to improper handling of foster-parented elements. This flaw can lead to incorrect output resolution when re-parsing documents, posing potential risks to applications utilizing this parsing framework.

References