Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Azure Kubernetes may crash on crafted HTML
published 9 months ago
Summary
Azure Kubernetes versions before 1.30.10-21 use a component that can get stuck when it tries to read specially crafted web pages. This can cause the service to become unresponsive, effectively a denial of service. Updating to the latest version or applying the vendor's patch resolves the issue.
What to do
- Update azure kubernetes to version 1.30.10-21.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kubernetes |
< 1.30.10-21 Fix: upgrade to 1.30.10-21
|
Original advisory text
CVE-2025-58190 affecting package kubernetes for versions less than 1.30.10-21
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
References
Timeline
Published5 Feb 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-77013 · OSV
Track software like this
Free during beta