Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

Description

References

• go.dev/cl/793360 · FIX
• go.dev/issue/80112 · REPORT
• pkg.go.dev/vuln/GO-2026-6629

Autres vulnérabilités de golang.org/x/text

• CVE-2026-56852ÉLEVÉE 7.5A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
• CVE-2021-38561ÉLEVÉE 7.5golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index …
• CVE-2022-32149ÉLEVÉE 7.5An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to pars…
• CVE-2020-14040ÉLEVÉE 7.5The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite lo…