CVE-2026-78661
Public on 2026-10-27
Modified on 2026-10-31
Description
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as "a") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse.
Severity
See what this means
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | amazon-cloudwatch-agent | Pending Fix | ||
| Amazon Linux 2023 | amazon-cloudwatch-agent | Pending Fix | ||
| Amazon Linux 2027 Preview | amazon-cloudwatch-agent | Pending Fix | ||
| Amazon Linux 2 - Core | amazon-ssm-agent | Pending Fix | ||
| Amazon Linux 2023 | amazon-ssm-agent | Pending Fix | ||
| Amazon Linux 2027 Preview | amazon-ssm-agent | Pending Fix | ||
| Amazon Linux 2023 | buildah | Pending Fix | ||
| Amazon Linux 2027 Preview | buildah | Pending Fix | ||
| Amazon Linux 2 - Core | cni-plugins | Pending Fix | ||
| Amazon Linux 2023 | cni-plugins | Pending Fix | ||
| Amazon Linux 2027 Preview | cni-plugins | Pending Fix | ||
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | containerd | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | containerd | Pending Fix | ||
| Amazon Linux 2 - Ecs Extra | containerd | Pending Fix | ||
| Amazon Linux 2023 | containerd | Pending Fix | ||
| Amazon Linux 2027 Preview | containerd | Pending Fix | ||
| Amazon Linux 2023 | credentials-fetcher | Pending Fix | ||
| Amazon Linux 2027 Preview | credentials-fetcher | Pending Fix | ||
| Amazon Linux 2 - Core | cri-tools | Pending Fix | ||
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | docker | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | docker | Pending Fix | ||
| Amazon Linux 2 - Ecs Extra | docker | Pending Fix | ||
| Amazon Linux 2023 | docker | Pending Fix | ||
| Amazon Linux 2027 Preview | docker | Not Affected | ||
| Amazon Linux 2 - Ecs Extra | ecs-init | Pending Fix | ||
| Amazon Linux 2023 | ecs-init | Pending Fix | ||
| Amazon Linux 2027 Preview | ecs-init | Pending Fix | ||
| Amazon Linux 2023 | git-lfs | Pending Fix | ||
| Amazon Linux 2027 Preview | git-lfs | Pending Fix | ||
| Amazon Linux 2 - Core | golang | Not Affected | ||
| Amazon Linux 2 - Golang1.11 Extra | golang | No Fix Planned | ||
| Amazon Linux 2 - Golang1.19 Extra | golang | No Fix Planned | ||
| Amazon Linux 2 - Golang1.9 Extra | golang | No Fix Planned | ||
| Amazon Linux 2023 | golang | Not Affected | ||
| Amazon Linux 2027 Preview | golang | Not Affected | ||
| Amazon Linux 2 - Core | nerdctl | Pending Fix | ||
| Amazon Linux 2023 | nerdctl | Pending Fix | ||
| Amazon Linux 2027 Preview | nerdctl | Pending Fix | ||
| Amazon Linux 2 - Core | rclone | Pending Fix | ||
| Amazon Linux 2023 | rclone | Pending Fix | ||
| Amazon Linux 2027 Preview | rclone | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | runfinch-finch | Pending Fix | ||
| Amazon Linux 2023 | runfinch-finch | Pending Fix | ||
| Amazon Linux 2027 Preview | runfinch-finch | Pending Fix | ||
| Amazon Linux 2023 | skopeo | Pending Fix | ||
| Amazon Linux 2027 Preview | skopeo | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | soci-snapshotter | Pending Fix | ||
| Amazon Linux 2023 | soci-snapshotter | Pending Fix | ||
| Amazon Linux 2027 Preview | soci-snapshotter | Pending Fix | ||
| Amazon Linux 2023 | yq | Pending Fix | ||
| Amazon Linux 2027 Preview | yq | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |