net

3 results · Clear filters · Feed

• High 7.5
  CVE-2026-46600

  Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

  Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

  Go standard library golang.org/x/net net golang.org/x/net/dns/dnsmessage Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jul 21, 2026
• High 7.5
  CVE-2026-33811

  Crash when handling long CNAME response in net

  When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

  Go standard library net golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  May 7, 2026
• High 7.5
  CVE-2026-39836

  Panic in Dial and LookupPort when handling NUL byte on Windows in net

  The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).

  Go standard library net golang go Ubuntu Azure Linux Alpine Wolfi Go
  May 7, 2026