Month: May 2026

Information published. Continue reading CVE-2026-39826 Escaper bypass leads to XSS in html/template→

Information published. Continue reading CVE-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil→

Information published. Continue reading CVE-2026-39823 Bypass of meta content URL escaping causes XSS in html/template→

Information published. Continue reading CVE-2026-39820 Quadratic string concatentation in consumeComment in net/mail→

Information published. Continue reading CVE-2026-39819 Invoking “go bug” follows symlinks in predictable temporary filenames in cmd/go→

Information published. Continue reading CVE-2026-39817 Invoking “go tool pack” does not sanitize output paths in cmd/go→

Information published. Continue reading CVE-2026-33814 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net→

Information published. Continue reading CVE-2026-33811 Crash when handling long CNAME response in net→