169 matches found
ROOT-APP-GOBINARY-CVE-2026-56851 CVE-2026-56851 in golang.org/x/text - Patched by Root
Root has patched CVE-2026-56851 in the golang.org/x/text package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-56852 CVE-2026-56852 in golang.org/x/text - Patched by Root
Root has patched CVE-2026-56852 in the golang.org/x/text package for Root:Go. Multiple fixed versions available...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
golang-x-text
Go Text This repository holds supplementary Go packages for text processing, many involving Unicode. CLDR Versioning It is important that the Unicode version used in x/text matches the one used by your Go compiler. The x/text repository supports multiple versions of Unicode and will match the...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2026:4891-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4891-1 advisory. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. - CVE-2026-78669:...
SUSE-SU-2026:4891-1 Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285302. Chang...
Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issues: CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285302. Changes f...
Security Bulletin: IBM CloudPak for Data Scheduling Service is vulnerable to CVE-2026-56851, CVE-2026-56852.
Summary golang.org/x/text is used by the CPD Scheduling Service. CVE-2026-56851, CVE-2026-56852. Vulnerability Details CVEID:CVE-2026-56851 DESCRIPTION: The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer. CWE:CWE-787:...
CVE-2026-56851
A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service DoS by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing th...
Security update for cosign (important)
openSUSE security update: security update for cosign ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22064-1 Rating: important References: bsc1272117 bsc1275025 bsc1278614 bsc1279215 bsc1282542 Cross-References: CVE-2026-56852 CVE-2026-56854...
Golang X Text Package Heap Overflow DoS
The vulnerability of the Golang X Text package for text processing is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Golang X Text Package Heap Buffer Overflow DoS
The vulnerability of the Golang X Text package for text processing is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
CVE-2026-56851
The golang.org/x/text library, specifically within the x/text/secure/precis component, contains a vulnerability where the Nickname profile can panic due to an out-of-bounds slice error . This occurs when the software attempts to transform crafted input into a short destination buffer. Exploitatio...
CVE-2026-56851 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...
CVE-2026-56851 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...
GO-2026-6629 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...
golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile
A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service DoS by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing th...