Vulnerability in Golang.org/x/net Golang.org/x/net/dns/dnsmessage
CVE-2026-46600
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.
Affected products
- Golang.org/x/net Golang.org/x/net/dns/dnsmessage — versions 0