Every CVE Search/ Get API key

CVE-2026-56852

Infinite loop on invalid input in golang.org/x/text

7.5 HighPublic exploitFix available

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.47%Up 0.3 points since Jul 22, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Infinite loop on invalid input in golang.org/x/text

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
CVE-2026-56852
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
EUVDEUVD-2026-46384 7.5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
EUVD-2026-46384
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-jpjm-c3r5-q96r 7.5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
GHSA-jpjm-c3r5-q96r
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
NVD 7.5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
CVE-2026-56852
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
OSVDEBIAN-CVE-2026-56852 7.5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
DEBIAN-CVE-2026-56852
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:40964 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:40964
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVRHSA-2026:41020 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:41020
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:42083 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:42083
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:42230 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:42230
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:42241 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:42241
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43015 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:43015
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43119 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43119
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43311 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:43311
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43554 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43554
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43581 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:43581
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43716 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43716
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43797 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43797
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43799 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43799
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43801 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43801
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43803 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43803
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43852 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43852
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43866 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43866
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43873 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43873
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43906 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43906
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:44151 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:44151
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:44152 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:44152
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:44162 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:44162
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:44430 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:44430
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:44451 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:44451
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:44479 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:44479
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:46953 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:46953
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:46960 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:46960
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:46988 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:46988
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:48306 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:48306
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:49317 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:49317
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:49360 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:49360
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:51065 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:51065
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:52912 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:52912
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:54364 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:54364
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:54549 9.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:54549
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:68334 8.8

Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update

Record
RHSA-2026:68334
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:68335 8.2

Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.1 Security Update

Record
RHSA-2026:68335
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:69258 7.5

Red Hat Security Advisory: rhc security update

Record
RHSA-2026:69258
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:70201 8.8

Red Hat Security Advisory: podman security update

Record
RHSA-2026:70201
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRLSA-2026:70201 8.8

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)

  • podman: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

  • podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

  • podman: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

  • podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)

  • podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

  • podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

  • podman: golang.org/x/text: Denial of Service via invalid UTF-8 input (CVE-2026-56852)

  • podman: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)

  • podman: Quadlet install --replace non-truncating write retains removed host-access directives (CVE-2026-19730)

  • podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:70201
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2026-56852 7.5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
UBUNTU-CVE-2026-56852
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:70201 No score

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
  • podman: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)
  • podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
  • podman: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)
  • podman: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)
  • podman: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
  • podman: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
  • podman: golang.org/x/text: Denial of Service via invalid UTF-8 input (CVE-2026-56852)
  • podman: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
  • podman: Quadlet install --replace non-truncating write retains removed host-access directives (CVE-2026-19730)
  • podman: moby/go-archive: Arbitrary file write via link following in tar extraction (CVE-2026-17106)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:70201
Updated
2026-11-02
OSVAZL-111554 No score

CVE-2026-56852 affecting package kubevirt-openvmm 1.9.0-1

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
AZL-111554
Updated
2026-11-05
OSVAZL-93075 No score

CVE-2026-56852 affecting package azl-otel-collector 0.127.0-1

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
AZL-93075
Updated
2026-11-05
OSVAZL-93078 No score

CVE-2026-56852 affecting package buildah 1.43.1-3

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
AZL-93078
Updated
2026-11-05
OSVAZL-93081 No score

CVE-2026-56852 affecting package cri-o 1.30.1-1

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
AZL-93081
Updated
2026-11-05
OSVAZL-93087 No score

CVE-2026-56852 affecting package kata-containers-preview 3.27.0~preview2-2

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
AZL-93087
Updated
2026-11-05
OSVAZL-93093 No score

CVE-2026-56852 affecting package podman 5.6.1-10

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
AZL-93093
Updated
2026-11-05
OSVAZL-93099 No score

CVE-2026-56852 affecting package yq 4.45.1-1

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Record
AZL-93099
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
podman
AlmaLinux:10
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2.alma.1
7:5.8.2-9.el10_2.alma.1
podman-docker
AlmaLinux:10
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2.alma.1
7:5.8.2-9.el10_2.alma.1
podman-remote
AlmaLinux:10
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2.alma.1
7:5.8.2-9.el10_2.alma.1
podman-tests
AlmaLinux:10
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2.alma.1
7:5.8.2-9.el10_2.alma.1
kubevirt-openvmm
Azure Linux:3
 through 1.9.0-1 None known
azl-otel-collector
Azure Linux:3
 through 0.127.0-1 None known
buildah
Azure Linux:3
 through 1.43.1-3 None known
cri-o
Azure Linux:3
 through 1.30.1-1 None known
kata-containers-preview
Azure Linux:3
 through 3.27.0~preview2-2 None known
podman
Azure Linux:3
 through 5.6.1-10 None known
Show 290 moreShow less
Affected packages
PackageAffectedFixed
yq
Azure Linux:3
 through 4.45.1-1 None known
application-gateway-kubernetes-ingress
Azure Linux:3
 before 1.7.7-6
1.7.7-6
azcopy
Azure Linux:3
 before 10.25.1-7
10.25.1-7
azurelinux-image-tools
Azure Linux:3
 before 1.5.0-2
1.5.0-2
cert-manager
Azure Linux:3
 before 1.12.15-11
1.12.15-11
cf-cli
Azure Linux:3
 before 8.7.11-8
8.7.11-8
cloud-provider-kubevirt
Azure Linux:3
 before 0.5.1-6
0.5.1-6
containerd2
Azure Linux:3
 before 2.2.4-6
2.2.4-6
containerized-data-importer
Azure Linux:3
 before 1.62.0-7
1.62.0-7
coredns
Azure Linux:3
 before 1.11.4-20
1.11.4-20
cri-tools
Azure Linux:3
 before 1.32.0-7
1.32.0-7
dcos-cli
Azure Linux:3
 before 1.2.0-22
1.2.0-22
docker-buildx
Azure Linux:3
 before 0.14.0-16
0.14.0-16
docker-cli
Azure Linux:3
 before 25.0.7-4
25.0.7-4
docker-compose
Azure Linux:3
 before 2.27.0-13
2.27.0-13
etcd
Azure Linux:3
 before 3.5.33-1
3.5.33-1
flannel
Azure Linux:3
 before 0.24.2-29
0.24.2-29
gh
Azure Linux:3
 before 2.62.0-20
2.62.0-20
git-lfs
Azure Linux:3
 before 3.6.1-5
3.6.1-5
ignition-flatcar
Azure Linux:3
 before 2.22.0-6
2.22.0-6
influxdb
Azure Linux:3
 before 2.7.5-19
2.7.5-19
jx
Azure Linux:3
 before 3.10.182-5
3.10.182-5
kata-containers
Azure Linux:3
 before 3.32.0.kata0-1
3.32.0.kata0-1
kata-containers-cc
Azure Linux:3
 before 3.15.0.aks0-16
3.15.0.aks0-16
keda
Azure Linux:3
 before 2.14.1-16
2.14.1-16
kube-vip-cloud-provider
Azure Linux:3
 before 0.0.10-7
0.0.10-7
kubernetes
Azure Linux:3
 before 1.30.10-27
1.30.10-27
kubevirt
Azure Linux:3
 before 1.7.1-8
1.7.1-8
kured
Azure Linux:3
 before 1.15.0-6
1.15.0-6
moby-containerd-cc
Azure Linux:3
 before 1.7.7-16
1.7.7-16
moby-engine
Azure Linux:3
 before 25.0.3-19
25.0.3-19
multus
Azure Linux:3
 before 4.0.2-10
4.0.2-10
opa
Azure Linux:3
 before 0.63.0-5
0.63.0-5
packer
Azure Linux:3
 before 1.9.5-18
1.9.5-18
prometheus-adapter
Azure Linux:3
 before 0.12.0-7
0.12.0-7
prometheus-node-exporter
Azure Linux:3
 before 1.7.0-5
1.7.0-5
prometheus-process-exporter
Azure Linux:3
 before 0.8.2-5
0.8.2-5
skopeo
Azure Linux:3
 before 1.14.4-12
1.14.4-12
sriov-network-device-plugin
Azure Linux:3
 before 3.7.0-7
3.7.0-7
telegraf
Azure Linux:3
 before 1.31.0-27
1.31.0-27
vitess
Azure Linux:3
 before 19.0.4-11
19.0.4-11
golang-golang-x-text
Debian:12
 All versions, plus listed versions
0.10.0-10.11.0-10.12.0-10.13.0-10.14.0-1
Show 17 moreShow less
0.14.0-20.15.0-10.16.0-10.16.0-1~bpo12+10.22.0-10.29.0-10.29.0-20.31.0-10.32.0-10.35.0-10.36.0-10.36.0-1~bpo13+10.40.0-10.41.0-10.43.0-10.7.0-10.9.0-1
 None known
golang-golang-x-text
Debian:13
 All versions, plus listed versions
0.22.0-10.29.0-10.29.0-20.31.0-10.32.0-1
Show 6 moreShow less
0.35.0-10.36.0-10.36.0-1~bpo13+10.40.0-10.41.0-10.43.0-1
 None known
golang-golang-x-text
Debian:14
 before 0.40.0-1, plus listed versions
0.22.0-10.29.0-10.29.0-20.31.0-10.32.0-10.35.0-10.36.0-10.36.0-1~bpo13+1
0.40.0-1
golang.org/x/text
Go
 before 0.39.0
0.39.0
golang1.25
Red Hat:hummingbird:1
 before 0:1.25.12-1.1.hum1
0:1.25.12-1.1.hum1
golang1.25-bin
Red Hat:hummingbird:1
 before 0:1.25.12-1.1.hum1
0:1.25.12-1.1.hum1
golang1.25-docs
Red Hat:hummingbird:1
 before 0:1.25.12-1.1.hum1
0:1.25.12-1.1.hum1
golang1.25-misc
Red Hat:hummingbird:1
 before 0:1.25.12-1.1.hum1
0:1.25.12-1.1.hum1
golang1.25-src
Red Hat:hummingbird:1
 before 0:1.25.12-1.1.hum1
0:1.25.12-1.1.hum1
golang1.25-tests
Red Hat:hummingbird:1
 before 0:1.25.12-1.1.hum1
0:1.25.12-1.1.hum1
golang1.26
Red Hat:hummingbird:1
 before 0:1.26.5-0.1.1.hum1
0:1.26.5-0.1.1.hum1
golang1.26-bin
Red Hat:hummingbird:1
 before 0:1.26.5-0.1.1.hum1
0:1.26.5-0.1.1.hum1
golang1.26-docs
Red Hat:hummingbird:1
 before 0:1.26.5-0.1.1.hum1
0:1.26.5-0.1.1.hum1
golang1.26-misc
Red Hat:hummingbird:1
 before 0:1.26.5-0.1.1.hum1
0:1.26.5-0.1.1.hum1
golang1.26-src
Red Hat:hummingbird:1
 before 0:1.26.5-0.1.1.hum1
0:1.26.5-0.1.1.hum1
golang1.26-tests
Red Hat:hummingbird:1
 before 0:1.26.5-0.1.1.hum1
0:1.26.5-0.1.1.hum1
grype
Red Hat:hummingbird:1
 before 0:0.116.0-0.1.hum1
0:0.116.0-0.1.hum1
helm4
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:4.2.3-0.1.2.hum1
0:4.2.3-0.1.2.hum1
helm3
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:3.21.3-0.1.2.hum1
0:3.21.3-0.1.2.hum1
syft
Red Hat:hummingbird:1
 before 0:1.49.0-0.1.hum1
0:1.49.0-0.1.hum1
skopeo
Red Hat:hummingbird:1
 before 0:1.23.0-3.1.hum1
0:1.23.0-3.1.hum1
skopeo-tests
Red Hat:hummingbird:1
 before 0:1.23.0-3.1.hum1
0:1.23.0-3.1.hum1
spire1.14
Red Hat:hummingbird:1
 before 0:1.14.7-0.2.hum1
0:1.14.7-0.2.hum1
spire1.14-agent
Red Hat:hummingbird:1
 before 0:1.14.7-0.2.hum1
0:1.14.7-0.2.hum1
spire1.14-oidc-discovery-provider
Red Hat:hummingbird:1
 before 0:1.14.7-0.2.hum1
0:1.14.7-0.2.hum1
spire1.14-server
Red Hat:hummingbird:1
 before 0:1.14.7-0.2.hum1
0:1.14.7-0.2.hum1
opentofu1.11
Red Hat:hummingbird:1
 before 0:1.11.13-0.2.hum1
0:1.11.13-0.2.hum1
opentelemetry-collector-contrib
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:0.157.0-0.1.hum1
0:0.157.0-0.1.hum1
yq
Red Hat:hummingbird:1
 before 0:4.53.3-2.1.hum1
0:4.53.3-2.1.hum1
oauth2-proxy
Red Hat:hummingbird:1
 before 0:7.15.3-0.3.hum1
0:7.15.3-0.3.hum1
opentelemetry-collector
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:0.157.0-0.1.hum1
0:0.157.0-0.1.hum1
jaeger
Red Hat:hummingbird:1
 before 0:2.20.0-0.2.hum1
0:2.20.0-0.2.hum1
opentofu1.10
Red Hat:hummingbird:1
 before 0:1.10.10-0.3.hum1
0:1.10.10-0.3.hum1
kubernetes1.35
Red Hat:hummingbird:1
 before 0:1.35.6-2.1.hum1
0:1.35.6-2.1.hum1
kubernetes1.35-client
Red Hat:hummingbird:1
 before 0:1.35.6-2.1.hum1
0:1.35.6-2.1.hum1
kubernetes1.35-kubeadm
Red Hat:hummingbird:1
 before 0:1.35.6-2.1.hum1
0:1.35.6-2.1.hum1
kubernetes1.35-systemd
Red Hat:hummingbird:1
 before 0:1.35.6-2.1.hum1
0:1.35.6-2.1.hum1
prometheus3.13
Red Hat:hummingbird:1
 before 0:3.13.1-0.3.hum1
0:3.13.1-0.3.hum1
hugo
Red Hat:hummingbird:1
 before 0:0.164.0-0.1.2.hum1
0:0.164.0-0.1.2.hum1
kubernetes1.36
Red Hat:hummingbird:1
 before 0:1.36.2-6.1.hum1
0:1.36.2-6.1.hum1
kubernetes1.36-client
Red Hat:hummingbird:1
 before 0:1.36.2-6.1.hum1
0:1.36.2-6.1.hum1
kubernetes1.36-kubeadm
Red Hat:hummingbird:1
 before 0:1.36.2-6.1.hum1
0:1.36.2-6.1.hum1
kubernetes1.36-systemd
Red Hat:hummingbird:1
 before 0:1.36.2-6.1.hum1
0:1.36.2-6.1.hum1
caddy
Red Hat:hummingbird:1
 before 0:2.11.4-0.3.hum1
0:2.11.4-0.3.hum1
podman
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:6.0.2-2.1.hum1
0:6.0.2-2.1.hum1
podman-docker
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:6.0.2-2.1.hum1
0:6.0.2-2.1.hum1
podman-machine
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:6.0.2-2.1.hum1
0:6.0.2-2.1.hum1
podman-remote
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:6.0.2-2.1.hum1
0:6.0.2-2.1.hum1
podman-tests
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:6.0.2-2.1.hum1
0:6.0.2-2.1.hum1
podmansh
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:6.0.2-2.1.hum1
0:6.0.2-2.1.hum1
spire1.15
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:1.15.2-0.3.hum1
0:1.15.2-0.3.hum1
spire1.15-agent
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:1.15.2-0.3.hum1
0:1.15.2-0.3.hum1
spire1.15-oidc-discovery-provider
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:1.15.2-0.3.hum1
0:1.15.2-0.3.hum1
spire1.15-server
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:1.15.2-0.3.hum1
0:1.15.2-0.3.hum1
etcd
Red Hat:hummingbird:1
 before 0:3.7.0-0.3.hum1
0:3.7.0-0.3.hum1
cosign
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.1.2-0.2.hum1
0:3.1.2-0.2.hum1
prometheus3.5
Red Hat:hummingbird:1
 before 0:3.5.5-0.3.hum1
0:3.5.5-0.3.hum1
go-fdo-client
Red Hat:hummingbird:1
 before 0:1.0.0-2.1.hum1
0:1.0.0-2.1.hum1
opentofu1.12
Red Hat:hummingbird:1
 before 0:1.12.5-0.2.hum1
0:1.12.5-0.2.hum1
trivy
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:0.72.0-0.1.2.hum1
0:0.72.0-0.1.2.hum1
go-fdo-server
Red Hat:hummingbird:1
 before 0:1.0.1-0.5.hum1
0:1.0.1-0.5.hum1
go-fdo-server-manufacturer
Red Hat:hummingbird:1
 before 0:1.0.1-0.5.hum1
0:1.0.1-0.5.hum1
go-fdo-server-owner
Red Hat:hummingbird:1
 before 0:1.0.1-0.5.hum1
0:1.0.1-0.5.hum1
go-fdo-server-rendezvous
Red Hat:hummingbird:1
 before 0:1.0.1-0.5.hum1
0:1.0.1-0.5.hum1
prometheus3.13
Red Hat:hummingbird:1
 before 0:3.13.2-0.1.hum1
0:3.13.2-0.1.hum1
buildah
Red Hat:hummingbird:1
 before 0:1.44.0-3.3.hum1
0:1.44.0-3.3.hum1
buildah
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:1.45.0-2.hum1
0:1.45.0-2.hum1
skopeo
Red Hat:hummingbird:1
 before 0:1.24.0-2.hum1
0:1.24.0-2.hum1
skopeo-tests
Red Hat:hummingbird:1
 before 0:1.24.0-2.hum1
0:1.24.0-2.hum1
cosign
Red Hat:hummingbird:1
 before 0:3.1.2-0.3.hum1
0:3.1.2-0.3.hum1
hugo
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:0.165.0-0.1.hum1
0:0.165.0-0.1.hum1
flightctl
Red Hat:edge_manager:1.1::el10
From an advisory covering 23 CVEs
 before 0:1.1.4-1.el10em
0:1.1.4-1.el10em
flightctl-agent
Red Hat:edge_manager:1.1::el10
From an advisory covering 23 CVEs
 before 0:1.1.4-1.el10em
0:1.1.4-1.el10em
flightctl-cli
Red Hat:edge_manager:1.1::el10
From an advisory covering 23 CVEs
 before 0:1.1.4-1.el10em
0:1.1.4-1.el10em
flightctl
Red Hat:edge_manager:1.1::el9
From an advisory covering 23 CVEs
 before 0:1.1.4-1.el9em
0:1.1.4-1.el9em
flightctl-agent
Red Hat:edge_manager:1.1::el9
From an advisory covering 23 CVEs
 before 0:1.1.4-1.el9em
0:1.1.4-1.el9em
flightctl-cli
Red Hat:edge_manager:1.1::el9
From an advisory covering 23 CVEs
 before 0:1.1.4-1.el9em
0:1.1.4-1.el9em
flightctl
Red Hat:edge_manager:1.2::el10
From an advisory covering 12 CVEs
 before 0:1.2.1-1.el10
0:1.2.1-1.el10
flightctl-agent
Red Hat:edge_manager:1.2::el10
From an advisory covering 12 CVEs
 before 0:1.2.1-1.el10
0:1.2.1-1.el10
flightctl-cli
Red Hat:edge_manager:1.2::el10
From an advisory covering 12 CVEs
 before 0:1.2.1-1.el10
0:1.2.1-1.el10
flightctl
Red Hat:edge_manager:1.2::el9
From an advisory covering 12 CVEs
 before 0:1.2.1-1.el9
0:1.2.1-1.el9
flightctl-agent
Red Hat:edge_manager:1.2::el9
From an advisory covering 12 CVEs
 before 0:1.2.1-1.el9
0:1.2.1-1.el9
flightctl-cli
Red Hat:edge_manager:1.2::el9
From an advisory covering 12 CVEs
 before 0:1.2.1-1.el9
0:1.2.1-1.el9
rhc
Red Hat:enterprise_linux:8::appstream
 before 1:0.2.5-11.el8_10
1:0.2.5-11.el8_10
rhc-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:0.2.5-11.el8_10
1:0.2.5-11.el8_10
rhc-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:0.2.5-11.el8_10
1:0.2.5-11.el8_10
podman
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2
7:5.8.2-9.el10_2
podman-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2
7:5.8.2-9.el10_2
podman-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2
7:5.8.2-9.el10_2
podman-docker
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2
7:5.8.2-9.el10_2
podman-remote
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2
7:5.8.2-9.el10_2
podman-remote-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2
7:5.8.2-9.el10_2
podman-tests-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2
7:5.8.2-9.el10_2
podman-tests
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2
7:5.8.2-9.el10_2
podman
Rocky Linux:10
From an advisory covering 11 CVEs
 before 7:5.8.2-9.el10_2
7:5.8.2-9.el10_2
golang.org/x/text
Root:Go
 before v0.26.0-aikido.1
v0.26.0-aikido.1v0.22.0-aikido.1v0.13.0-aikido.1v0.23.0-aikido.1v0.16.0-aikido.1v0.28.0-aikido.1v0.33.0-aikido.1v0.24.0-aikido.1v0.37.0-aikido.1v0.27.0-aikido.1v0.35.0-aikido.1v0.38.0-aikido.1v0.21.0-aikido.1v0.34.0-aikido.1v0.32.0-aikido.1v0.38.0-aikido.2v0.23.0-aikido.2v0.13.0-aikido.2v0.31.0-aikido.1v0.22.0-aikido.2v0.18.0-aikido.1v0.25.0-aikido.1v0.25.0-aikido.2v0.14.0-aikido.1v0.35.0-aikido.2v0.28.0-aikido.2v0.26.0-aikido.2v0.28.0-aikido.3v0.32.0-aikido.2v0.37.0-aikido.2v0.32.0-aikido.3v0.22.0-aikido.3v0.31.0-aikido.2v0.26.0-aikido.3v0.37.0-aikido.3v0.28.0-aikido.4v0.18.0-aikido.2v0.33.0-aikido.2v0.14.0-aikido.2
rootio-golang.org/x/text
Root:Go
 before v0.26.0-root.io.1
v0.26.0-root.io.1v0.13.0-root.io.1v0.22.0-root.io.1v0.23.0-root.io.1v0.16.0-root.io.1v0.28.0-root.io.1v0.33.0-root.io.1v0.24.0-root.io.1v0.37.0-root.io.1v0.27.0-root.io.1v0.35.0-root.io.1v0.38.0-root.io.1v0.21.0-root.io.1v0.34.0-root.io.1v0.32.0-root.io.1v0.38.0-root.io.2v0.23.0-root.io.2v0.13.0-root.io.2v0.31.0-root.io.1v0.22.0-root.io.2v0.18.0-root.io.1v0.25.0-root.io.1v0.25.0-root.io.2v0.14.0-root.io.1v0.35.0-root.io.2v0.28.0-root.io.2v0.26.0-root.io.2v0.28.0-root.io.3v0.32.0-root.io.2v0.37.0-root.io.2v0.32.0-root.io.3v0.22.0-root.io.3v0.31.0-root.io.2v0.26.0-root.io.3v0.37.0-root.io.3v0.28.0-root.io.4v0.18.0-root.io.2v0.33.0-root.io.2v0.14.0-root.io.2
helm
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 3.21.3-160000.1.1
3.21.3-160000.1.1
helm
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 3.21.3-160000.1.1
3.21.3-160000.1.1
helm
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 3.21.3-160000.1.1
3.21.3-160000.1.1
distribution
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 3.1.1-160000.2.1
3.1.1-160000.2.1
distribution
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 3.1.1-160000.2.1
3.1.1-160000.2.1
mcphost
SUSE:Linux Micro 6.2
From an advisory covering 3 CVEs
 before 0.34.0-160000.3.1
0.34.0-160000.3.1
ignition
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 2.21.0-160000.5.1
2.21.0-160000.5.1
google-osconfig-agent
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 20260615.01-2.1
20260615.01-2.1
google-guest-agent
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 20260529.00-2.1
20260529.00-2.1
helm
SUSE:Linux Micro 6.0
From an advisory covering 3 CVEs
 before 3.21.3-1.1
3.21.3-1.1
ignition
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 2.19.0-5.1
2.19.0-5.1
google-osconfig-agent
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 20260615.01-slfo.1.1_2.1
20260615.01-slfo.1.1_2.1
google-guest-agent
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 20260529.00-slfo.1.1_2.1
20260529.00-slfo.1.1_2.1
helm
SUSE:Linux Micro 6.1
From an advisory covering 3 CVEs
 before 3.21.3-slfo.1.1_1.1
3.21.3-slfo.1.1_1.1
ignition
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 2.19.0-slfo.1.1_5.1
2.19.0-slfo.1.1_5.1
google-osconfig-agent
SUSE:Linux Micro 6.0
From an advisory covering 5 CVEs
 before 20260908.00-1.1
20260908.00-1.1
govulncheck-vulndb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 181 CVEs
 before 0.0.20260827T195228-160000.1.1
0.0.20260827T195228-160000.1.1
govulncheck-vulndb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 181 CVEs
 before 0.0.20260827T195228-160000.1.1
0.0.20260827T195228-160000.1.1
google-cloud-sap-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 3.15-160000.4.1
3.15-160000.4.1
google-cloud-sap-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 3.15-160000.4.1
3.15-160000.4.1
google-guest-agent
SUSE:Linux Micro 6.1
From an advisory covering 7 CVEs
 before 20260903.01-slfo.1.1_1.1
20260903.01-slfo.1.1_1.1
google-osconfig-agent
SUSE:Linux Micro 6.1
From an advisory covering 7 CVEs
 before 20260908.00-slfo.1.1_1.1
20260908.00-slfo.1.1_1.1
google-guest-agent
SUSE:Linux Micro 6.0
From an advisory covering 7 CVEs
 before 20260903.01-1.1
20260903.01-1.1
helm
SUSE:Linux Micro 6.2
From an advisory covering 18 CVEs
 before 4.3.0-160000.1.1
4.3.0-160000.1.1
helm
SUSE:Linux Enterprise Server 16.0
From an advisory covering 18 CVEs
 before 4.3.0-160000.1.1
4.3.0-160000.1.1
helm
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 18 CVEs
 before 4.3.0-160000.1.1
4.3.0-160000.1.1
alloy
SUSE:Linux Enterprise Server 16.0
From an advisory covering 19 CVEs
 before 1.19.2-160000.1.1
1.19.2-160000.1.1
alloy
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 19 CVEs
 before 1.19.2-160000.1.1
1.19.2-160000.1.1
cosign
SUSE:Linux Enterprise Server 16.0
From an advisory covering 6 CVEs
 before 3.1.3-160000.1.1
3.1.3-160000.1.1
cosign
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 6 CVEs
 before 3.1.3-160000.1.1
3.1.3-160000.1.1
helm
SUSE:Linux Micro 6.1
From an advisory covering 20 CVEs
 before 4.3.0-slfo.1.1_1.1
4.3.0-slfo.1.1_1.1
ignition
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 2.17.0-150500.3.21.1
2.17.0-150500.3.21.1
ignition
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 2.15.0-150400.4.20.1
2.15.0-150400.4.20.1
ignition
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 2.14.0-150400.4.21.1
2.14.0-150400.4.21.1
ignition
SUSE:Linux Enterprise Module for HPC 15 SP7
From an advisory covering 2 CVEs
 before 2.14.0-150400.9.21.1
2.14.0-150400.9.21.1
ignition
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 2 CVEs
 before 2.14.0-150400.9.21.1
2.14.0-150400.9.21.1
yq
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 2 CVEs
 before 4.53.3-150500.3.12.1
4.53.3-150500.3.12.1
helm
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
helm
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 2 CVEs
 before 3.21.3-150000.1.85.1
3.21.3-150000.1.85.1
apptainer
SUSE:Linux Enterprise Module for HPC 15 SP7
From an advisory covering 2 CVEs
 before 1.5.3-150600.4.34.2
1.5.3-150600.4.34.2
apptainer
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 2 CVEs
 before 1.5.3-150600.4.34.2
1.5.3-150600.4.34.2
apptainer
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 2 CVEs
 before 1.5.3-150600.4.34.2
1.5.3-150600.4.34.2
google-osconfig-agent
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 20260615.01-150000.1.60.1
20260615.01-150000.1.60.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 2 CVEs
 before 20260615.01-150000.1.60.1
20260615.01-150000.1.60.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 2 CVEs
 before 20260615.01-150000.1.60.1
20260615.01-150000.1.60.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 2 CVEs
 before 20260615.01-150000.1.60.1
20260615.01-150000.1.60.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 2 CVEs
 before 20260615.01-150000.1.60.1
20260615.01-150000.1.60.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 12
From an advisory covering 2 CVEs
 before 20260529.00-1.66.2
20260529.00-1.66.2
kubevirt
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 4 CVEs
 before 1.7.4-150700.3.33.1
1.7.4-150700.3.33.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 12
 before 20260615.01-1.53.2
20260615.01-1.53.2
google-guest-agent
SUSE:Linux Enterprise Micro 5.5
 before 20260529.00-150000.1.76.1
20260529.00-150000.1.76.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
 before 20260529.00-150000.1.76.1
20260529.00-150000.1.76.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
 before 20260529.00-150000.1.76.1
20260529.00-150000.1.76.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
 before 20260529.00-150000.1.76.1
20260529.00-150000.1.76.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
 before 20260529.00-150000.1.76.1
20260529.00-150000.1.76.1
azure-storage-azcopy
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 2 CVEs
 before 10.32.6-150400.9.16.2
10.32.6-150400.9.16.2
azure-storage-azcopy
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 2 CVEs
 before 10.32.6-150400.9.16.2
10.32.6-150400.9.16.2
azure-storage-azcopy
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 2 CVEs
 before 10.32.6-150400.9.16.2
10.32.6-150400.9.16.2
azure-storage-azcopy
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 2 CVEs
 before 10.32.6-150400.9.16.2
10.32.6-150400.9.16.2
kubevirt-1.6
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 16 CVEs
 before 1.6.6-150700.15.17.1
1.6.6-150700.15.17.1
terraform-provider-aws
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 3.11.0-150200.6.24.2
3.11.0-150200.6.24.2
terraform-provider-azurerm
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 2.32.0-150200.6.18.2
2.32.0-150200.6.18.2
terraform-provider-external
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 2.0.0-150200.6.18.2
2.0.0-150200.6.18.2
terraform-provider-google
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 3.43.0-150200.6.18.2
3.43.0-150200.6.18.2
terraform-provider-helm
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 2.9.0-150200.6.29.2
2.9.0-150200.6.29.2
terraform-provider-kubernetes
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 1.13.2-150200.6.18.2
1.13.2-150200.6.18.2
terraform-provider-local
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 2.0.0-150200.6.25.1
2.0.0-150200.6.25.1
terraform-provider-null
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 3.0.0-150200.6.24.2
3.0.0-150200.6.24.2
terraform-provider-random
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 3.0.0-150200.6.21.2
3.0.0-150200.6.21.2
terraform-provider-tls
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 3 CVEs
 before 3.0.0-150200.5.21.2
3.0.0-150200.5.21.2
terraform-provider-aws
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 3.11.0-150200.6.24.2
3.11.0-150200.6.24.2
terraform-provider-azurerm
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 2.32.0-150200.6.18.2
2.32.0-150200.6.18.2
terraform-provider-external
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 2.0.0-150200.6.18.2
2.0.0-150200.6.18.2
terraform-provider-google
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 3.43.0-150200.6.18.2
3.43.0-150200.6.18.2
terraform-provider-helm
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 2.9.0-150200.6.29.2
2.9.0-150200.6.29.2
terraform-provider-kubernetes
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 1.13.2-150200.6.18.2
1.13.2-150200.6.18.2
terraform-provider-local
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 2.0.0-150200.6.25.1
2.0.0-150200.6.25.1
terraform-provider-null
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 3.0.0-150200.6.24.2
3.0.0-150200.6.24.2
terraform-provider-random
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 3.0.0-150200.6.21.2
3.0.0-150200.6.21.2
terraform-provider-tls
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 3 CVEs
 before 3.0.0-150200.5.21.2
3.0.0-150200.5.21.2
terraform-provider-susepubliccloud
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
 before 0.0.1-150100.3.20.1
0.0.1-150100.3.20.1
terraform-provider-susepubliccloud
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
 before 0.0.1-150100.3.20.1
0.0.1-150100.3.20.1
google-cloud-sap-agent
SUSE:Linux Enterprise Module for Public Cloud 12
From an advisory covering 4 CVEs
 before 3.15-6.81.1
3.15-6.81.1
google-cloud-sap-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 4 CVEs
 before 3.15-150100.3.87.1
3.15-150100.3.87.1
google-cloud-sap-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 4 CVEs
 before 3.15-150100.3.87.1
3.15-150100.3.87.1
google-cloud-sap-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 4 CVEs
 before 3.15-150100.3.87.1
3.15-150100.3.87.1
google-cloud-sap-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 4 CVEs
 before 3.15-150100.3.87.1
3.15-150100.3.87.1
containerized-data-importer
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 27 CVEs
 before 1.64.0-150700.9.14.1
1.64.0-150700.9.14.1
distribution
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 21 CVEs
 before 3.1.1-150400.9.41.1
3.1.1-150400.9.41.1
distribution
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 21 CVEs
 before 3.1.1-150400.9.41.1
3.1.1-150400.9.41.1
distribution
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 21 CVEs
 before 3.1.1-150400.9.41.1
3.1.1-150400.9.41.1
golang-golang-x-text
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.3.2-30.3.2-40.3.2-4ubuntu0.1
 None known
golang-golang-x-text
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.3.6-10.3.7-10.3.7-1ubuntu0.20.04.1
 None known
golang-golang-x-text
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.9.0-10.13.0-10.14.0-10.14.0-2
 None known
golang-golang-x-text
Ubuntu:26.10
 All versions, plus listed versions
0.31.0-10.36.0-10.40.0-1
 None known
golang-golang-x-text
Ubuntu:26.04:LTS
 All versions, plus listed versions
0.22.0-10.31.0-1
 None known
trivy
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.72.0-2.1
0.72.0-2.1
distribution
openSUSE:Tumbleweed
 before 3.1.1-4.1
3.1.1-4.1
helm
openSUSE:Tumbleweed
 before 4.2.3-3.1
4.2.3-3.1
helm3
openSUSE:Tumbleweed
 before 3.21.3-3.1
3.21.3-3.1
amazon-ecs-init
openSUSE:Tumbleweed
 before 1.105.0-2.1
1.105.0-2.1
google-guest-agent
openSUSE:Tumbleweed
 before 20260529.00-4.1
20260529.00-4.1
google-osconfig-agent
openSUSE:Tumbleweed
 before 20260708.00-3.1
20260708.00-3.1
mcphost
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.34.0-9.1
0.34.0-9.1
apptainer
openSUSE:Tumbleweed
 before 1.5.3-1.1
1.5.3-1.1
ignition
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 2.26.0-5.1
2.26.0-5.1
yq
openSUSE:Tumbleweed
 before 4.53.3-1.2
4.53.3-1.2
kubevirt1.8
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 1.8.4-3.1
1.8.4-3.1
warewulf4
openSUSE:Tumbleweed
 before 4.7.0-4.1
4.7.0-4.1
golang-github-prometheus-prometheus
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 3.13.2-1.1
3.13.2-1.1
azure-storage-azcopy
openSUSE:Tumbleweed
 before 10.32.6-1.1
10.32.6-1.1
containerized-data-importer1.66
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 1.66.0-1.1
1.66.0-1.1
kubevirt1.9
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 1.9.0-1.1
1.9.0-1.1
grafana
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 12.4.10-1.1
12.4.10-1.1
containerized-data-importer1.65
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 1.65.0-3.1
1.65.0-3.1
alloy
openSUSE:Tumbleweed
From an advisory covering 18 CVEs
 before 1.19.2-1.1
1.19.2-1.1
cosign
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 3.1.3-1.1
3.1.3-1.1
velociraptor
openSUSE:Tumbleweed
From an advisory covering 40 CVEs
 before 0.76.7.0.git145.b60ef1146-1.1
0.76.7.0.git145.b60ef1146-1.1
flannel
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 0.28.10-1.1
0.28.10-1.1
trivy
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.72.0-160000.2.1
0.72.0-160000.2.1
helm
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 3.21.3-160000.1.1
3.21.3-160000.1.1
distribution
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 3.1.1-160000.2.1
3.1.1-160000.2.1
amazon-ecs-init
openSUSE:Leap 16.0
 before 1.103.2-160000.2.1
1.103.2-160000.2.1
google-osconfig-agent
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 20260615.01-160000.2.1
20260615.01-160000.2.1
google-guest-agent
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 20260529.00-160000.2.1
20260529.00-160000.2.1
mcphost
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.34.0-160000.3.1
0.34.0-160000.3.1
ignition
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 2.21.0-160000.5.1
2.21.0-160000.5.1
govulncheck-vulndb
openSUSE:Leap 16.0
From an advisory covering 1734 CVEs
 before 0.0.20260723T184607-160000.1.1
0.0.20260723T184607-160000.1.1
apptainer
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.5.3-bp160.1.1
1.5.3-bp160.1.1
yq
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 4.53.3-bp160.1.1
4.53.3-bp160.1.1
warewulf4
openSUSE:Leap 16.0
 before 4.7.0-bp160.3.1
4.7.0-bp160.3.1
kubevirt1.8
openSUSE:Leap 16.0
From an advisory covering 25 CVEs
 before 1.8.4-160000.1.1
1.8.4-160000.1.1
govulncheck-vulndb
openSUSE:Leap 16.0
From an advisory covering 181 CVEs
 before 0.0.20260827T195228-160000.1.1
0.0.20260827T195228-160000.1.1
containerized-data-importer1.65
openSUSE:Leap 16.0
From an advisory covering 39 CVEs
 before 1.65.0-160000.3.1
1.65.0-160000.3.1
google-cloud-sap-agent
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 3.15-160000.4.1
3.15-160000.4.1
google-guest-agent
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 20260903.01-160000.1.1
20260903.01-160000.1.1
google-osconfig-agent
openSUSE:Leap 16.0
From an advisory covering 8 CVEs
 before 20260911.00-160000.1.1
20260911.00-160000.1.1
helm
openSUSE:Leap 16.0
From an advisory covering 18 CVEs
 before 4.3.0-160000.1.1
4.3.0-160000.1.1
alloy
openSUSE:Leap 16.0
From an advisory covering 19 CVEs
 before 1.19.2-160000.1.1
1.19.2-160000.1.1
cosign
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 3.1.3-160000.1.1
3.1.3-160000.1.1
grafana
openSUSE:Leap 16.0
From an advisory covering 17 CVEs
 before 12.4.10-bp160.1.1
12.4.10-bp160.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubkatekeiroz-dev/golang-x-text2026-08-17

History

History
RecordedChangedSources
affected
factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-56852 is a high vulnerability (CVSS 7.5) in Golang.org/x/text Golang.org/x/text/unicode/norm, published July 14, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. Fixed in application-gateway-kubernetes-ingress 1.7.7-6.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 48 package rows and 2,419 references. The JSON record has them. Also not on the record: 97 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 145 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open