Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-6603
  • Go/golang.org/x/net
  • Go/stdlib
 HTTP/2 server memory exhaustion due to Trailer headers in net/http 08 Oct
  • Fix available
GO-2026-6610
  • Go/golang.org/x/net
  • Go/stdlib
 HTTP/2 transport accepts malformed framing-related headers in net/http 08 Oct
  • Fix available
GO-2026-6611
  • Go/golang.org/x/net
  • Go/stdlib
 Excessive CPU consumption from repeated initial window changes in net/http 08 Oct
  • Fix available
GO-2026-6612
  • Go/golang.org/x/net
  • Go/stdlib
 Double flow control refund on HTTP/2 server streams in net/http 08 Oct
  • Fix available
GO-2026-6617
  • Go/golang.org/x/net
  • Go/stdlib
 HTTP/2 server crash due to HPACK encoder race in net/http 08 Oct
  • Fix available
GO-2026-5942
  • Go/golang.org/x/net
  • Go/stdlib
 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage 14 Jul
  • Fix available
GHSA-5cv4-jp36-h3mw
  • Go/golang.org/x/net
 Go Net HTML parser is vulnerable to denial of service 26 May
  • Fix available
  • Severity - 6.5 (Medium)
GO-2026-5025
  • Go/golang.org/x/net
 Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 22 May
  • Fix available
GO-2026-5026
  • Go/golang.org/x/net
  • Go/stdlib
 Invoking failure to reject ASCII-only Punycode-encoded labels in... 22 May
  • Fix available
GO-2026-5027
  • Go/golang.org/x/net
 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 22 May
  • Fix available
GO-2026-5028
  • Go/golang.org/x/net
 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 22 May
  • Fix available
GO-2026-5029
  • Go/golang.org/x/net
 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 22 May
  • Fix available
GO-2026-5030
  • Go/golang.org/x/net
 Invoking duplicate attributes can cause XSS in golang.org/x/net/html 22 May
  • Fix available
GO-2026-4918
  • Go/golang.org/x/net
  • Go/stdlib
 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in... 07 May
  • Fix available
GO-2026-4559
  • Go/golang.org/x/net
 Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net 26 Feb
  • Fix available
GO-2026-4441
  • Go/golang.org/x/net
 Infinite parsing loop in golang.org/x/net 05 Feb
  • Fix available
Load more...