https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-58190.htmlhttps://patchthecve.com/cve/CVE-2025-58190.htmlWed, 17 Jun 2026 09:44:02 +0000MEDIUM 5.3: The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.https://patchthecve.com/cve/CVE-2025-47911.htmlhttps://patchthecve.com/cve/CVE-2025-47911.htmlWed, 17 Jun 2026 09:28:50 +0000MEDIUM 5.3: The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.https://patchthecve.com/cve/CVE-2025-68120.htmlhttps://patchthecve.com/cve/CVE-2025-68120.htmlTue, 13 Oct 2026 09:10:00 +0000MEDIUM 5.4: To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.https://patchthecve.com/cve/CVE-2025-47913.htmlhttps://patchthecve.com/cve/CVE-2025-47913.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.5: SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.https://patchthecve.com/cve/CVE-2025-22869.htmlhttps://patchthecve.com/cve/CVE-2025-22869.htmlWed, 17 Jun 2026 08:50:40 +0000HIGH 7.5: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.https://patchthecve.com/cve/CVE-2025-22868.htmlhttps://patchthecve.com/cve/CVE-2025-22868.htmlWed, 17 Jun 2026 08:50:39 +0000HIGH 7.5: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.