NE
Product
net
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add net to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46600 | 7.5 | Jul 21 | Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage Affected: 1.26.0-0 before 1.26.6; 1.27.0-0 before 1.27.0-rc.3 |
| CVE-2026-33811 | 7.5 | May 7 | Crash when handling long CNAME response in net Affected: before 1.25.10; 1.26.0-0 before 1.26.3 |
| CVE-2026-39836 | 7.5 | May 7 | Panic in Dial and LookupPort when handling NUL byte on Windows in net Affected: before 1.25.10; 1.26.0-0 before 1.26.3 |
| CVE-2024-24788 | 5.9 | May 8 | Malformed DNS message can cause infinite loop in net Affected: 1.22.0-0 before 1.22.3 |
Showing 4