Golang Net vulnerabilities

• golang net, golang.org/x/net golang.org/x/net/html +1 more Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html CVE-2026-42506 Fix available 6.1 MediumMay 22, 2026
• golang net, golang.org/x/net golang.org/x/net/html +1 more Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html CVE-2026-42502 Fix available 6.1 MediumMay 22, 2026
• golang net, golang.org/x/net golang.org/x/net/html +1 more Invoking duplicate attributes can cause XSS in golang.org/x/net/html CVE-2026-27136 Fix available 6.1 MediumMay 22, 2026
• golang net, golang.org/x/net golang.org/x/net/html +1 more Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html CVE-2026-25681 Fix available 6.1 MediumMay 22, 2026
• golang net, golang.org/x/net golang.org/x/net/html +1 more Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html CVE-2026-25680 Fix available 6.5 MediumMay 22, 2026
• golang.org/x/net golang.org/x/net/html, golang networking +1 more Improper rendering of text nodes in golang.org/x/net/html CVE-2023-3978 Fix available 6.1 MediumAugust 2, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• golang net, fedoraproject fedora +1 more golang.org/x/net/html Improper Validation of Array Index vulnerability CVE-2018-17848 Fix available 7.5 HighOctober 1, 2018
• golang net, fedoraproject fedora +1 more golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer CVE-2018-17847 Fix available 7.5 HighOctober 1, 2018
• golang net, fedoraproject fedora +1 more x/net/html Vulnerable to DoS During HTML Parsing CVE-2018-17846 Fix available 7.5 HighOctober 1, 2018
• golang net, fedoraproject fedora +1 more golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer CVE-2018-17143 Fix available 7.5 HighSeptember 17, 2018
• golang net, fedoraproject fedora +1 more golang.org/x/net/html NULL Pointer Dereference vulnerability CVE-2018-17142 Fix available 7.5 HighSeptember 17, 2018
• golang net, fedoraproject fedora +1 more golang.org/x/net/html NULL Pointer Dereference vulnerability CVE-2018-17075 Fix available 7.5 HighSeptember 16, 2018
• golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 more Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna CVE-2026-39821 Fix available 9.6 CriticalNovember 5, 2016