How many golang.org golang.org/x/net CVEs are in CISA KEV?

Yes — 1 of golang.org golang.org/x/net's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of golang.org golang.org/x/net are affected?

43 distinct golang.org golang.org/x/net versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in golang.org golang.org/x/net CVEs?

golang.org golang.org/x/net's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-115 (Misinterpretation of Input), CWE-1289 (Improper Validation of Unsafe Equivalence in Input), CWE-1333 (Inefficient Regular Expression Complexity).

How many critical golang.org golang.org/x/net vulnerabilities are there?

golang.org golang.org/x/net has 1 critical and 17 high-severity CVEs.

What is the average severity of golang.org golang.org/x/net CVEs?

The average CVSS base score across golang.org golang.org/x/net's scored CVEs is 6.9.

golang.org golang.org/x/net Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: golang.org golang.org/x/net vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

golang.org golang.org/x/net Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

golang.org golang.org/x/net has 31 published CVE records since 2018, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting golang.org golang.org/x/net, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of golang.org golang.org/x/net's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High17

Medium13

Low0

In CISA’s Known Exploited Vulnerabilities catalog

One of golang.org golang.org/x/net's CVEs is confirmed exploited in the wild.

Public exploits

2 of golang.org golang.org/x/net's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every golang.org golang.org/x/net version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.55.06 CVEs
< 0.0.0-20190125002852-4b62a64f59f72 CVEs
< 0.0.0-20190813141303-74dc4d7220e72 CVEs
< 0.17.02 CVEs
< 0.45.02 CVEs
< 0.0.0-20180816102801-aaf60122140d1 CVE
< 0.0.0-20180921000356-2f5d2388922f1 CVE
< 0.0.0-20180925071336-cf3bd585ca2a1 CVE
< 0.0.0-20190125091013-d26f9f9a57f31 CVE
< 0.0.0-20210428140749-89ef3d95e7811 CVE

Common weakness types

The CWE weakness categories most often found in golang.org golang.org/x/net CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many golang.org golang.org/x/net CVEs were published each year.

2018

2019

2021

2022

2023

2024

2025

Other golang.org products

Browse vulnerabilities for other products by golang.org.

golang.org/x/crypto28 CVEs golang.org/x/image8 CVEs golang.org/x/net/http24 CVEs golang.org/x/text3 CVEs golang.org/x/net/html2 CVEs golang.org/x/crypto/ssh/agent1 CVEs golang.org/x/oauth21 CVEs

Frequently asked questions

Common questions about golang.org golang.org/x/net vulnerabilities.

How many CVEs does golang.org golang.org/x/net have?: golang.org golang.org/x/net has 31 published CVE records since 2018.
How many golang.org golang.org/x/net CVEs are in CISA KEV?: Yes — 1 of golang.org golang.org/x/net's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for golang.org golang.org/x/net vulnerabilities?: Yes — 2 of golang.org golang.org/x/net's CVEs have a known public exploit.
Which versions of golang.org golang.org/x/net are affected?: 43 distinct golang.org golang.org/x/net versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in golang.org golang.org/x/net CVEs?: golang.org golang.org/x/net's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-115 (Misinterpretation of Input), CWE-1289 (Improper Validation of Unsafe Equivalence in Input), CWE-1333 (Inefficient Regular Expression Complexity).
How many critical golang.org golang.org/x/net vulnerabilities are there?: golang.org golang.org/x/net has 1 critical and 17 high-severity CVEs.
What is the average severity of golang.org golang.org/x/net CVEs?: The average CVSS base score across golang.org golang.org/x/net's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track golang.org golang.org/x/net vulnerabilities

Monitor new golang.org golang.org/x/net vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing