CVE-2026-33811

The CVE-2026-33811 entry describes a crash in the Go ecosystem when using LookupCNAME with the cgo DNS resolver: very long CNAME responses can trigger a double-free of C memory, leading to a crash. Affected item: Go net/cgo DNS resolver (LookupCNAME path). Root cause: memory management error (dou...