2026-11
“Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows”
“golang.org/x/text/language Denial of service via crafted Accept-Language header”
“golang.org/x/text/language Out-of-bounds Read vulnerability”
“Infinite loop on invalid input in golang.org/x/text”
“Panic parsing crafted input in x/text/secure/precis in golang.org/x/text”
“gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing :authority and Host headers”
“gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities”
“gRPC-Go has an authorization bypass via missing leading slash in :path”
“gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion”
“gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation”
2026-10
“Version retracted: v11.2.0 accidentally introduced a breaking change regarding the behavior of nil slices of complex types.”