CVE-2026-42501 Malicious module proxy can bypass checksum database in cmd/go
CVE-2026-42499 Quadratic string concatenation in consumePhrase in net/mail
Information published. Continue reading CVE-2026-42499 Quadratic string concatenation in consumePhrase in net/mail
CVE-2026-39836 Panic in Dial and LookupPort when handling NUL byte on Windows in net
CVE-2026-39826 Escaper bypass leads to XSS in html/template
Information published. Continue reading CVE-2026-39826 Escaper bypass leads to XSS in html/template
