Product by Golang
Net
15 known vulnerabilities in Net (Golang), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-39821 | Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | 10.0 | |
| High | CVE-2018-17075 | Golang Net: security vulnerability | 7.5 | |
| High | CVE-2018-17143 | Golang Net: security vulnerability | 7.5 | |
| High | CVE-2018-17846 | Golang Net: Infinite Loop | 7.5 | |
| High | CVE-2018-17142 | Golang Net: security vulnerability | 7.5 | |
| High | CVE-2018-17847 | Golang Net: security vulnerability | 7.5 | |
| High | CVE-2018-17848 | Golang Net: security vulnerability | 7.5 | |
| High | CVE-2026-33811 | Crash when handling long CNAME response in net | 7.5 | |
| High | CVE-2026-46600 | Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage | 7.5 | |
| High | CVE-2026-39836 | Panic in Dial and LookupPort when handling NUL byte on Windows in net | 7.5 | |
| Medium | CVE-2026-25680 | Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html | 6.5 | |
| Medium | CVE-2026-42506 | Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html | 6.1 | |
| Medium | CVE-2026-27136 | Invoking duplicate attributes can cause XSS in golang.org/x/net/html | 6.1 | |
| Medium | CVE-2026-25681 | Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html | 6.1 | |
| Medium | CVE-2026-42502 | Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html | 6.1 |