[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-33811":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-06T08:55:34.825Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":24,"downstream":25,"duplicates":34,"related":35,"reserved_at":9,"published_at":40,"modified_at":41,"state":42,"summary":43,"references_raw":52,"kevs":79,"epss":80,"epss_history":83,"metrics":170,"affected":178},"CVE-2026-33811","When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-415","Double Free","The product calls free() twice on the same memory address.","weakness","Draft","Variant","High",[],[],[22,23],"GO-2026-4981","BIT-golang-2026-33811",[],[26,28,30,32],{"_key":27},"OPENSUSE-SU-2026:10723-1",{"_key":29},"OPENSUSE-SU-2026:10741-1",{"_key":31},"DEBIAN-CVE-2026-33811",{"_key":33},"UBUNTU-CVE-2026-33811",[],[36,37,38],{"_key":27},{"_key":29},{"_key":39},"CGA-XR8M-473W-FVFQ","2026-05-07T19:41:19.285Z","2026-05-08T14:25:43.896Z","Analyzed",{"cisa_kev":44,"cisa_ransomware":44,"cisa_vendor":9,"epss_severity":45,"epss_score":46,"severity":47,"severity_score":48,"severity_version":49,"severity_source":50,"severity_vector":51,"severity_status":42},false,"low",0.00017,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[53,61,67,74],{"url":54,"sources":55,"tags":58},"https://go.dev/issue/78803",[50,56,57],"nvd","osv_go",[59,60],"REPORT","Issue Tracking",{"url":62,"sources":63,"tags":64},"https://go.dev/cl/767860",[50,56,57],[65,66],"FIX","Patch",{"url":68,"sources":69,"tags":70},"https://groups.google.com/g/golang-announce/c/qcCIEXso47M",[50,56,57],[71,72,73],"WEB","Mailing List","Third Party Advisory",{"url":75,"sources":76,"tags":77},"https://pkg.go.dev/vuln/GO-2026-4981",[50,56],[78],"Vendor Advisory",[],{"date":81,"score":46,"percentile":82},"2026-06-05",0.04327,[84,88,92,95,98,101,104,107,110,113,116,119,122,125,128,131,134,137,140,143,146,149,152,155,157,160,163,166,169],{"date":85,"score":86,"percentile":87},"2026-05-08",0.00007,0.00663,{"date":89,"score":90,"percentile":91},"2026-05-09",0.00018,0.04706,{"date":93,"score":90,"percentile":94},"2026-05-10",0.04723,{"date":96,"score":90,"percentile":97},"2026-05-11",0.04714,{"date":99,"score":90,"percentile":100},"2026-05-12",0.04717,{"date":102,"score":46,"percentile":103},"2026-05-13",0.04238,{"date":105,"score":46,"percentile":106},"2026-05-14",0.0424,{"date":108,"score":46,"percentile":109},"2026-05-15",0.04253,{"date":111,"score":46,"percentile":112},"2026-05-16",0.04262,{"date":114,"score":46,"percentile":115},"2026-05-17",0.04261,{"date":117,"score":46,"percentile":118},"2026-05-18",0.04237,{"date":120,"score":46,"percentile":121},"2026-05-19",0.04225,{"date":123,"score":46,"percentile":124},"2026-05-20",0.04226,{"date":126,"score":46,"percentile":127},"2026-05-21",0.0423,{"date":129,"score":46,"percentile":130},"2026-05-22",0.04418,{"date":132,"score":46,"percentile":133},"2026-05-23",0.04406,{"date":135,"score":46,"percentile":136},"2026-05-24",0.04397,{"date":138,"score":46,"percentile":139},"2026-05-25",0.04377,{"date":141,"score":46,"percentile":142},"2026-05-26",0.04373,{"date":144,"score":46,"percentile":145},"2026-05-27",0.04403,{"date":147,"score":46,"percentile":148},"2026-05-28",0.04409,{"date":150,"score":46,"percentile":151},"2026-05-29",0.04422,{"date":153,"score":46,"percentile":154},"2026-05-30",0.04439,{"date":156,"score":46,"percentile":130},"2026-05-31",{"date":158,"score":46,"percentile":159},"2026-06-01",0.04352,{"date":161,"score":46,"percentile":162},"2026-06-02",0.04324,{"date":164,"score":46,"percentile":165},"2026-06-03",0.04306,{"date":167,"score":46,"percentile":168},"2026-06-04",0.0431,{"date":81,"score":46,"percentile":82},[171,176],{"source":50,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":172,"cvss_v4_0":9},{"baseScore":48,"baseSeverity":173,"vectorString":51,"impactScore":174,"exploitabilityScore":175},"HIGH",6,10,{"source":56,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":177,"cvss_v4_0":9},{"baseScore":48,"baseSeverity":173,"vectorString":51,"impactScore":174,"exploitabilityScore":175},[179,194,204],{"ecosystem":9,"name":180,"vendor":181,"product":180,"cpe_part":182,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":183},"net","go standard library","a",[184,189],{"version":185,"is_range":186,"range_type":50,"version_start":9,"version_start_type":9,"version_end":187,"version_end_type":188,"fixed_in":9},"\u003C 1.25.10",true,"1.25.10","excluding",{"version":190,"is_range":186,"range_type":50,"version_start":191,"version_start_type":192,"version_end":193,"version_end_type":188,"fixed_in":9},">= 1.26.0-0, \u003C 1.26.3","1.26.0-0","including","1.26.3",{"ecosystem":9,"name":195,"vendor":196,"product":195,"cpe_part":182,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":197},"go","golang",[198,201],{"version":199,"is_range":186,"range_type":200,"version_start":9,"version_start_type":9,"version_end":187,"version_end_type":188,"fixed_in":9},"lt1.25.10","cpe",{"version":202,"is_range":186,"range_type":200,"version_start":203,"version_start_type":192,"version_end":193,"version_end_type":188,"fixed_in":9},"gte1.26.0_lt1.26.3","1.26.0",{"ecosystem":205,"name":206,"vendor":205,"product":206,"cpe_part":9,"purl_type":196,"purl_namespace":9,"purl_name":206,"source":9,"versions":207},"Go","stdlib",[208],{"version":209,"is_range":186,"range_type":210,"version_start":191,"version_start_type":192,"version_end":193,"version_end_type":188,"fixed_in":9},"gte1_26_0_0_lt1_26_3","semver"]