Security
فارسی
All products

golang.org/x/net

Go · Package
40 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/netCVE-2026-97045 · GO-2026-6866 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat Medium Fix reported
Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/netCVE-2026-78661 · GO-2026-6860 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat High Fix reported
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918 golang.org/x/netstdlib GoRed Hat High Fix reported
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821 · GO-2026-5026 golang.org/x/netstdlib GoRed Hat High Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/2 server memory exhaustion due to Trailer headers in net/httpCVE-2026-78659 · GO-2026-6603 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Excessive CPU consumption from repeated initial window changes in net/httpCVE-2026-78669 · GO-2026-6611 golang.org/x/netstdlib GoRed Hat High Fix reported
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/htmlCVE-2026-25681 · GO-2026-5029 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
Invoking duplicate attributes can cause XSS in golang.org/x/net/htmlCVE-2026-27136 · GO-2026-5030 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63 golang.org/x/net/htmlgolang.org/x/net GoRed Hat High Fix reported
Improper rendering of text nodes in golang.org/x/net/htmlCVE-2023-3978 · GHSA-2WRH-6PVC-2JM9Version ranges need review. golang.org/x/netOpenShift API for Data Protection/oadp/oadp-rhel8-operator GoRed Hat Medium Fix reported
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessageCVE-2026-46600 · GO-2026-5942 golang.org/x/netstdlib GoRed Hat High Fix reported