Product by Golang
Go Net Module
6 known vulnerabilities in Go Net Module (Golang), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-39821 | Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | 10.0 | |
| Medium | CVE-2026-25680 | Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html | 6.5 | |
| Medium | CVE-2026-42506 | Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html | 6.1 | |
| Medium | CVE-2026-27136 | Invoking duplicate attributes can cause XSS in golang.org/x/net/html | 6.1 | |
| Medium | CVE-2026-25681 | Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html | 6.1 | |
| Medium | CVE-2026-42502 | Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html | 6.1 |