Skip to content

[Aikido] Fix 2 security issues in x/text, x/net - #136

Closed
aikido-autofix[bot] wants to merge 1 commit into
masterfrom
fix/aikido-security-update-packages-73703468-qalu
Closed

[Aikido] Fix 2 security issues in x/text, x/net#136
aikido-autofix[bot] wants to merge 1 commit into
masterfrom
fix/aikido-security-update-packages-73703468-qalu

Conversation

@aikido-autofix

Copy link
Copy Markdown
Contributor

Upgrade golang.org/x/text and golang.org/x/net to fix infinite loop DoS in UTF-8 handling and panic DoS in DNS record parsing.

✅ 2 CVEs resolved by this upgrade

This PR will resolve the following CVEs:

Issue Severity           Description
CVE-2026-56852
HIGH
[golang.org/x/text] A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
CVE-2026-46600
HIGH
[golang.org/x/net] Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

@aikido-autofix aikido-autofix Bot added the aikido Label created by Aikido AutoFix label Jul 25, 2026
@aikido-autofix aikido-autofix Bot closed this Jul 26, 2026
@aikido-autofix

Copy link
Copy Markdown
Contributor Author

Closed by Aikido: the vulnerabilities are already resolved.

@aikido-autofix
aikido-autofix Bot deleted the fix/aikido-security-update-packages-73703468-qalu branch July 26, 2026 01:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

aikido Label created by Aikido AutoFix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants