NE
Product
Net
by Golang · last CVE May 22, 2026
12
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 5Low 0
Watch

Add Net to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25680
6.5
0%
May 22
Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html
Affected: before 0.55.0
CVE-2026-27136
6.1
0%
May 22
Invoking duplicate attributes can cause XSS in golang.org/x/net/html
Affected: before 0.55.0
CVE-2026-25681
6.1
0%
May 22
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
Affected: before 0.55.0
CVE-2026-42502
6.1
0%
May 22
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
Affected: before 0.55.0
CVE-2026-42506
6.1
0%
May 22
Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
Affected: before 0.55.0
Showing 5