Package · Wolfi

typescript

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Unscored —

CVE-2026-97054

HTTP/1 server crash due to MaxBytesReader header race in net/http

For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes …

Go standard library net/http stdlib k3d Debian Wolfi Go

Nov 11, 2026
Medium 6.8

CVE-2026-111943 Public exploit

Distrust compromised intermediate certificates in crypto/x509

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in cr…

Go standard library crypto/x509 renovate golang Debian Ubuntu Azure Linux Alpine Wolfi Go crates.io

Oct 21, 2026
High 7.5

CVE-2026-56851

Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.

golang.org/x/text golang.org/x/text/secure/precis renovate trino Debian Ubuntu Azure Linux Wolfi Go

Oct 7, 2026