golang.org/x/net: Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage. GO-2026-5942, BIT-golang-2026-46600, CVE-2026-46600.
osv.devquote checked- security advisory
- Your code10 things to find
Nemotron fixes
In its own wordsmatches the page ✓
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage
What Teire looks for in your code
- golang.org/x/net/dns/dnsmessage.Message.Unpack (go)
- golang.org/x/net/dns/dnsmessage.Parser.Additional (go)
- golang.org/x/net/dns/dnsmessage.Parser.AllAdditionals (go)
- golang.org/x/net/dns/dnsmessage.Parser.AllAnswers (go)
- golang.org/x/net/dns/dnsmessage.Parser.AllAuthorities (go)
- golang.org/x/net/dns/dnsmessage.Parser.Answer (go)
- golang.org/x/net/dns/dnsmessage.Parser.Authority (go)
- golang.org/x/net/dns/dnsmessage.Parser.HTTPSResource (go)
- golang.org/x/net/dns/dnsmessage.Parser.SVCBResource (go)
- golang.org/x/net/dns/dnsmessage.unpackSVCBResource (go)
Does it reach your code?