CVE-2026-56858

ADVISORY - golang

Summary

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

Common Weakness Enumeration (CWE)

Impacted images

Advisories

GoLang

CREATED

2 hours ago

UPDATED

2 hours ago

ADVISORY IDGO-2026-6091⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
stdlib	golang	-	-	>=1.26.0-0,<1.26.6	1.26.6
stdlib	golang	-	-	<1.25.13	1.25.13
stdlib	golang	-	-	>=1.27.0-0,<1.27.0-rc.3	1.27.0-rc.3

Severity and metrics

No CVSS data available from this advisory.