Go Standard Library Net vulnerabilities
4 vulnerabilities
Known vulnerabilities in Go Standard Library Net, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2024-24788chainguard · aactl +585 moreMalformed DNS message can cause infinite loop in netA malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.EPSS1.00%HighCVE-2026-39836chainguard · aactl +3388 morePanic in Dial and LookupPort when handling NUL byte on Windows in netThe Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).EPSS0.62%HighCVE-2026-46600chainguard · aactl +5575 moreParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessageEPSS0.55%HighCVE-2026-33811chainguard · aactl +3388 moreCrash when handling long CNAME response in netWhen using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.EPSS0.81%