NE
Product
Net
12
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 5Low 0
Watch
Add Net to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39821 | 9.6 | May 22 | Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna Affected: before 0.55.0 |
| CVE-2018-17848 | 7.5 | Oct 1 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a "panic: runtime error" (index out of range) in… Affected: through 2018-09-25 |
| CVE-2018-17847 | 7.5 | Oct 1 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out of range) in… Affected: through 2018-09-25 |
| CVE-2018-17846 | 7.5 | Oct 1 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because… Affected: through 2018-09-25 |
| CVE-2018-17143 | 7.5 | Sep 17 | The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in parse.go during an… Affected: through 2018-09-17 |
| CVE-2018-17142 | 7.5 | Sep 17 | The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "panic: runtime error" in parseCurrentToken in parse.go during… Affected: through 2018-09-17 |
| CVE-2018-17075 | 7.5 | Sep 16 | The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of <template><object>,… Affected: through 2018-07-12 |
| CVE-2026-25680 | 6.5 | May 22 | Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html Affected: before 0.55.0 |
| CVE-2026-27136 | 6.1 | May 22 | Invoking duplicate attributes can cause XSS in golang.org/x/net/html Affected: before 0.55.0 |
| CVE-2026-25681 | 6.1 | May 22 | Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html Affected: before 0.55.0 |
| CVE-2026-42502 | 6.1 | May 22 | Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html Affected: before 0.55.0 |
| CVE-2026-42506 | 6.1 | May 22 | Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html Affected: before 0.55.0 |
Showing 12