Golang.org/x/net Golang.org/x/net/dns/dnsmessage vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Golang.org/x/net Golang.org/x/net/dns/dnsmessage: 1 record(s), with affected versions and fixes.

CVE-2026-46600 High · 7.5 CWE-125 Jul 21, 2026

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.