Known vulnerabilities in golang.org/x/net/dns/dnsmessage
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-46600 | Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer | 7.5 High | Jul 21, 2026 |