Package impact

golang Go / golang.org/x/net

0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2026-39821 critical 9.6 9.6 7d ago The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com…
CVE-2023-44487 high 7.5 9.0 3y ago HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
CVE-2023-45288 high 8.0 2y ago Important: golang security update
CVE-2023-39325 high 8.0 3y ago Important: go-toolset and golang security and bug fix update
CVE-2019-9512 high 8.0 4y ago Important: container-tools:rhel8 security and bug fix update
CVE-2019-9514 high 8.0 4y ago Important: nodejs:10 security update
CVE-2021-44716 high 8.0 5y ago Important: grafana security update
CVE-2026-33814 high 7.5 7.5 22d ago When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.