How many golang.org/x/net golang.org/x/net/idna CVEs are in CISA KEV?

None of golang.org/x/net golang.org/x/net/idna's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of golang.org/x/net golang.org/x/net/idna are affected?

2 distinct golang.org/x/net golang.org/x/net/idna versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in golang.org/x/net golang.org/x/net/idna CVEs?

golang.org/x/net golang.org/x/net/idna's CVEs most often map to these CWE weakness types: CWE-1289 (Improper Validation of Unsafe Equivalence in Input).

How many critical golang.org/x/net golang.org/x/net/idna vulnerabilities are there?

golang.org/x/net golang.org/x/net/idna has 1 critical and 0 high-severity CVEs.

What is the average severity of golang.org/x/net golang.org/x/net/idna CVEs?

The average CVSS base score across golang.org/x/net golang.org/x/net/idna's scored CVEs is 9.6.

golang.org/x/net golang.org/x/net/idna Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: golang.org/x/net golang.org/x/net/idna vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

golang.org/x/net golang.org/x/net/idna Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

golang.org/x/net golang.org/x/net/idna has 1 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 9.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting golang.org/x/net golang.org/x/net/idna, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of golang.org/x/net golang.org/x/net/idna's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of golang.org/x/net golang.org/x/net/idna's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No golang.org/x/net golang.org/x/net/idna CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every golang.org/x/net golang.org/x/net/idna version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.55.01 CVE

Fixed in

0.55.01 CVE

Find a version

1 CVE

Sort

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CVE-2026-39821
Patch
Workaround
CWE-1289
Critical · CVSS 9.6
EPSS 0.7% (50th pct)2026-05-22

Common weakness types

The CWE weakness categories most often found in golang.org/x/net golang.org/x/net/idna CVEs. Follow any weakness for its full explanation.

CWE-1289Improper Validation of Unsafe Equivalence in Input1 CVE

Other golang.org/x/net products

Browse vulnerabilities for other products by golang.org/x/net.

golang.org/x/net/html10 CVEs golang.org/x/net/http26 CVEs golang.org/x/net/dns/dnsmessage1 CVEs golang.org/x/net/http2/h2c1 CVEs golang.org/x/net/http2/hpack1 CVEs golang.org/x/net/http/httpproxy1 CVEs golang.org/x/net/proxy1 CVEs

Frequently asked questions

Common questions about golang.org/x/net golang.org/x/net/idna vulnerabilities.

How many CVEs does golang.org/x/net golang.org/x/net/idna have?: golang.org/x/net golang.org/x/net/idna has 1 published CVE records since 2026.
How many golang.org/x/net golang.org/x/net/idna CVEs are in CISA KEV?: None of golang.org/x/net golang.org/x/net/idna's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for golang.org/x/net golang.org/x/net/idna vulnerabilities?: No golang.org/x/net golang.org/x/net/idna CVEs currently have a tracked public exploit in this dataset.
Which versions of golang.org/x/net golang.org/x/net/idna are affected?: 2 distinct golang.org/x/net golang.org/x/net/idna versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in golang.org/x/net golang.org/x/net/idna CVEs?: golang.org/x/net golang.org/x/net/idna's CVEs most often map to these CWE weakness types: CWE-1289 (Improper Validation of Unsafe Equivalence in Input).
How many critical golang.org/x/net golang.org/x/net/idna vulnerabilities are there?: golang.org/x/net golang.org/x/net/idna has 1 critical and 0 high-severity CVEs.
What is the average severity of golang.org/x/net golang.org/x/net/idna CVEs?: The average CVSS base score across golang.org/x/net golang.org/x/net/idna's scored CVEs is 9.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track golang.org/x/net golang.org/x/net/idna vulnerabilities

Monitor new golang.org/x/net golang.org/x/net/idna vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing