CVE-2026-56852

Go/golang.org/x/text CVE-2026-56852: unknown, EPSS 0.47%

Infinite loop on invalid input in golang.org/x/text

Action: Upgrade golang.org/x/text to 0.39.0 or later.

go get golang.org/x/text@v0.39.0

Affected

Fixed versions

Sources

• osv: GO-2026-5970
• https://go.dev/issue/80142
• https://go.dev/cl/794100

CVE-2026-56852 · published 2026-07-14T17:29:56Z · modified 2026-09-23T10:41:39.386264978Z · JSON