GHSA-75pg-wvh3-34jrunknown

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing...

Published
October 28, 2026
Last Modified
October 28, 2026

🔗 CVE IDs covered (1)

📋 Description

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as "a") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse.

🔗 References (6)