Skip to content

Vulnerabilities of golang.org/x/net golang.org/x/net/idna

Is your version affected?

CVE Summary Score Published
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critical May 22, 2026

Other golang.org/x/net products