mailwal

golang.org/x/net v0.62.0 patches two html parser bugs

GoDaily
🐿️ GoDaily - October 28, 2026

The x/net team tagged v0.62.0 to fix a pair of html package issues: quadratic blowup when coalescing adjacent text nodes, and a namespace-walk bug that could render raw text under the wrong ancestor. Neither is dramatic on its own, but anything parsing untrusted HTML through x/net should pick up the bump. Elsewhere, a Medium piece argues worker pools are often hiding the real bottleneck rather than fixing it, which pairs oddly well with a quadratic string-concat bug in the standard tree.

Discussions 2
Golang Nuts
Hello gophers, We have tagged version v0.62.0 of golang.org/x/net in order to address the following security issues: - html: avoid quadratic complexity when coalescing text nodes When coalescing adjac
Hacker News
ollama api client for golang. Contribute to okunix/gollama development by creating an account on GitHub.
Articles 5
Medium
In the previous article, we rebuilt the backend of AIDA, the AI Diagnostic Agent, replacing her legacy Python and SQLite RAG setup with a… Continue reading on Google Cloud - Community »
Medium
How I turned a pile of messy internal documents into a queryable graph — and what broke along the way Continue reading on Medium »
Medium
Your worker pool might be hiding the bottleneck instead of fixing it Continue reading on Dev Genius »
Medium
While learning Go backend development, I started exploring two concepts: Hexagonal Architecture and Uber Fx. Continue reading on Medium »
Medium
A hands-on look at file I/O, buffers, syscalls, and memory in Go — and why one innocent line can cost you a gigabyte of RAM. Continue reading on Medium »
Videos 5
YouTube
CONNECT WITH ME X: https://x.com/bright alaribe LinkedIn: https://www.linkedin.com/in/laribright/ Learn Go from scratch in this ...
YouTube
I don't write most of my code anymore. Agents do, and a set of rules decides what ships. A tour of my software factory: a Kanban ...
YouTube
Welcome to Mixible, your go-to source for comprehensive and informative content covering a broad range of topics from Stack ...
YouTube
Welcome to Mixible, your go-to source for comprehensive and informative content covering a broad range of topics from Stack ...
YouTube
Welcome to Mixible, your go-to source for comprehensive and informative content covering a broad range of topics from Stack ...
Trending 1
GitHub Trending
Optimized Go Compression Packages
Security 2
Go Vulnerabilities
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant
Go Vulnerabilities
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on eve
Social 1
Bluesky
🔁 Filament is an opensource engine for pluggable data replication written in golang. It moves data from sources to sinks via full, incremental or change data capture ( CDC) replication 🧵👇
Enjoying this issue? Share it →