Go standard library net
- CVE-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage 0.5%
- CVE-2026-33811 Crash when handling long CNAME response in net 0.9%
- CVE-2026-39836 Panic in Dial and LookupPort when handling NUL byte on Windows in net 0.6%
- CVE-2024-24788 Malformed DNS message can cause infinite loop in net 1.0%