{"answers":{"affected":"2 open source packages ship an affected version, including golang and stdlib. It affects 1 product.","exploited":"There is no known exploitation of CVE-2026-33811 in the wild and no public exploit code.","fix":"Upgrade golang to a fixed version for your release line: 1.25.10 or 1.26.3.","what":"CVE-2026-33811 is a high-severity memory corruption vulnerability in Golang Go, published on 7 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-33811 and fix it if it is affected.\n\nWhat it is: CVE-2026-33811 is a high-severity memory corruption vulnerability in Golang Go, published on 7 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-33811 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- golang (Bitnami): affected all versions; fixed in 1.25.10, 1.26.3\n- stdlib (Go): affected all versions; fixed in 1.25.10, 1.26.3\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-33811/ (Markdown: https://insights.sbomify.com/CVE-2026-33811/index.md)","id":"CVE-2026-33811","markdown":"https://insights.sbomify.com/CVE-2026-33811/index.md","name":"CVE-2026-33811","record":{"aliases":["ALSA-2026:36617","ALSA-2026:39266","ALSA-2026:39272","ALSA-2026:39319","AZL-98853","BELL-CVE-2026-33811","BIT-golang-2026-33811","CLEANSTART-2026-AC13048","CLEANSTART-2026-AF09428","CLEANSTART-2026-CQ72737","CLEANSTART-2026-DN56555","CLEANSTART-2026-TG48757","CLEANSTART-2026-TS93212","CLEANSTART-2026-UM51998","CLEANSTART-2026-WJ46547","CLEANSTART-2026-ZA04816","CLSA-2026-1784541123","CLSA-2026-1784646805","CLSA-2026-1784707996","DEBIAN-CVE-2026-33811","ECHO-d751-00cb-d453","GHSA-497x-jcxf-m478","GO-2026-4981","MINI-2235-3r6g-h998","MINI-226g-9h2m-jm42","MINI-2275-5mg2-wc2j","MINI-22rf-qmr7-f96v","MINI-23cg-xwg8-wqpv","MINI-23v2-8r33-fmm3","MINI-249j-g2m4-87xp","MINI-26p2-gm2v-v27w","MINI-27jw-6hw6-35rw","MINI-2822-883x-pcjx","MINI-283v-jchq-6397","MINI-285x-fwrg-8xf3","MINI-2c3g-pc9v-j27j","MINI-2c55-2hhf-mq56","MINI-2c59-fgf4-73f2","MINI-2ccx-gghm-89gc","MINI-2cq7-2vpp-26gx","MINI-2f4c-q3ch-rxw5","MINI-2fgj-8qq3-qwv4","MINI-2fw9-qr24-qcvr","MINI-2g36-6v4g-j63j","MINI-2g93-56j3-mfjm","MINI-2gr4-h54p-wv33","MINI-2h7q-pjr6-wq3w","MINI-2hfg-j6x2-hjph","MINI-2m8q-fcx5-c5q5","MINI-2pcg-gx3j-rq4p","MINI-2pjr-jf8h-7q69","MINI-2pq4-rhj6-hx95","MINI-2q94-v4m5-66jf","MINI-2qj5-xj6h-w7j8","MINI-2qm2-j7w7-hwpj","MINI-2r49-5v7g-p7g9","MINI-2rjp-vf43-qw5m","MINI-2wp2-j2cx-mccx","MINI-2xp8-vg5p-q3fr","MINI-2xvm-74gj-9fr5","MINI-3233-45hc-mmgw","MINI-32hq-3qpg-96pq","MINI-32wc-6gm6-fvgp","MINI-333f-37jf-xp96","MINI-33f2-pmc5-2cwm","MINI-33j5-7fh7-4fwh","MINI-3436-f7rm-h9pv","MINI-346g-pj42-qxp3","MINI-3597-7m8c-376g","MINI-369r-3ph5-q546","MINI-36fv-5rcw-84rp","MINI-37cc-c5r3-gvw2","MINI-37qm-v74p-9fvc","MINI-3846-q932-fqh4","MINI-38x9-6276-pw6f","MINI-3c79-g4f5-9g62","MINI-3cf8-mv5g-6cgx","MINI-3cp2-w4x7-238p","MINI-3f53-vrrp-x377","MINI-3g45-qwp5-v3h5","MINI-3g5w-gx78-cc2m","MINI-3ghm-p776-mp38","MINI-3ghp-4hmm-9qvf","MINI-3gx2-5f48-qfgf","MINI-3hjc-jc3p-qq97","MINI-3j6c-95g7-fmxx","MINI-3jwf-wcgv-7v7w","MINI-3m3c-hqf6-gfvx","MINI-3qc9-rwq5-xfrw","MINI-3qhh-vhrw-hfrh","MINI-3r7q-h9rg-mp9g","MINI-3rp2-wjrp-p9mv","MINI-3vc3-99gc-pfvp","MINI-3w6x-q2fv-3vrr","MINI-3w82-4r7g-4h5j","MINI-3wjm-852q-p2cq","MINI-43m7-j483-vg6r","MINI-445c-vwgv-cx9r","MINI-44wm-c8h4-7mc9","MINI-45x4-g439-8c9m","MINI-4677-6f4h-7cfq","MINI-46cj-8cfh-fhxq","MINI-46f5-q9p9-36qp","MINI-47mh-pxc7-pqhv","MINI-483x-r42g-53x2","MINI-488c-xm5g-8vx9","MINI-48m2-vrmc-xjwf","MINI-48vg-j769-75m7","MINI-48w6-wc59-wvj7","MINI-49hp-qccj-g9wr","MINI-49pr-jmrx-7hg3","MINI-4c64-487g-rjmr","MINI-4f92-hp84-mmxw","MINI-4fcw-qfg3-249p","MINI-4fr5-r4rq-fg7j","MINI-4gfp-rf72-q874","MINI-4h23-67gq-xpvw","MINI-4h2m-9v9v-5gwq","MINI-4h5p-hg5g-8qrm","MINI-4hh2-2v42-fm5v","MINI-4hm7-jrvh-6xf3","MINI-4hqj-7cqj-f6f2","MINI-4hwg-m88m-pprr","MINI-4j54-x4f5-4vrm","MINI-4j6f-xp55-8fx8","MINI-4jh6-pqpj-6jvw","MINI-4jq7-93w3-f8xc","MINI-4m3r-c86h-vhg8","MINI-4p29-c9f6-hg9c","MINI-4pp5-679g-g5g6","MINI-4qj4-gg8g-vvhc","MINI-4qp2-f4hg-8rh7","MINI-4qrm-3625-3mwq","MINI-4rfv-pcxc-6cgv","MINI-4v7f-4r7m-ccjh","MINI-4v8p-458x-w48q","MINI-4vgx-pj26-p3rx","MINI-4vm7-gxjm-2xv6","MINI-4vq2-fphh-jj7g","MINI-4vrf-3xmf-26g5","MINI-4vrx-3v8m-j36v","MINI-4w63-x9c7-qrcj","MINI-4w8g-6vh4-x25c","MINI-4wfw-q22h-6m3q","MINI-4wqx-rgh6-r43r","MINI-529w-wh2q-x5gj","MINI-52m7-4x48-mc4c","MINI-53f9-mhrr-4qxm","MINI-53p9-gh6w-crvr","MINI-53rh-f8hr-f6f8","MINI-5448-jhvr-xm6g","MINI-54g6-445j-vr3c","MINI-554x-6w55-r3c5","MINI-55g6-8267-cmcw","MINI-56g9-3xpj-cq38","MINI-56qx-47w7-4hmp","MINI-584j-58q6-xcmj","MINI-58pc-v25x-2ph9","MINI-5c9h-q722-6f4x","MINI-5chg-38gh-m7jx","MINI-5f86-7qv3-pqph","MINI-5fw2-qrw9-f5vg","MINI-5g8r-r28r-3fch","MINI-5g96-pj9c-crg6","MINI-5gfr-g789-498h","MINI-5gj5-q866-hf5c","MINI-5gv9-g9vp-6gv5","MINI-5h48-93x2-84ww","MINI-5hfq-p5jc-gcx9","MINI-5hp8-55gm-475v","MINI-5p28-qf42-rm2p","MINI-5p74-2q85-c23f","MINI-5pph-6mf9-9353","MINI-5px4-qg9f-vrg7","MINI-5qr2-f396-hqcr","MINI-5r6c-q68g-x56h","MINI-5rmw-7g64-mc8q","MINI-5vrh-3fxq-gf78","MINI-5wv9-4c8c-63m3","MINI-5x48-m84g-r2rq","MINI-5x55-px2v-5p67","MINI-5xp4-f269-jxjj","MINI-5xqg-hwxr-hhc8","MINI-62jv-xhjw-4vv9","MINI-634m-7r3r-686j","MINI-63gr-vm95-c6c7","MINI-645h-5xh8-2v8x","MINI-64r8-mcjr-29g7","MINI-6637-3584-mgmf","MINI-66c5-7hvp-98fp","MINI-66fq-cfjg-phh3","MINI-66mq-qjwv-qcp3","MINI-66pq-gmvg-6wrv","MINI-6732-322g-g78h","MINI-67jq-xfv2-mfgp","MINI-67rx-jrcm-q5mr","MINI-67v9-3mcc-gj56","MINI-67vq-6f88-64c4","MINI-6987-mrcr-3ff6","MINI-6c3v-72j5-q9h7","MINI-6c6v-52x5-wqqx","MINI-6fqg-55xg-4v9f","MINI-6frg-jhg2-v8h4","MINI-6fvg-pp6f-xj7w","MINI-6fwq-c8c9-525p","MINI-6g34-rv3j-785q","MINI-6gp3-2493-98cm","MINI-6hm2-7hx6-5786","MINI-6jxp-qm3q-r43f","MINI-6p29-99m4-5qwr","MINI-6p33-m6mh-vgf3","MINI-6q4q-vwgh-f3cp","MINI-6r7c-p2xq-cv3f","MINI-6r82-f972-482p","MINI-6v57-36xp-cmcx","MINI-6vwx-8648-67p8","MINI-6w2c-7rfx-c9xf","MINI-6wj4-44wq-wqg9","MINI-6wrq-3j9h-xmcm","MINI-6wv8-2fp3-977c","MINI-72hx-f458-7454","MINI-746w-jgrg-rc8x","MINI-74f9-gf7m-7f8x","MINI-74hw-2r5x-fmx7","MINI-74pq-px84-9834","MINI-75mc-jfpq-cgxw","MINI-76ch-5fxf-q9r7","MINI-776v-xrqj-qfph","MINI-779m-vhjx-h4v2","MINI-77fp-32x7-x4m4","MINI-7828-c9vm-6j6j","MINI-78h4-6xx7-2p2r","MINI-79c9-gj86-47pf","MINI-79xr-x722-mc5w","MINI-7fm2-92rm-2qr6","MINI-7g6j-g9x3-6h6m","MINI-7g77-vqh7-27m2","MINI-7gj9-4682-6q73","MINI-7h78-mqfw-5c3h","MINI-7hcv-364j-jgx4","MINI-7hmc-6gfc-4p4v","MINI-7hx6-cx78-4cvp","MINI-7m3c-g7vw-whpw","MINI-7mh6-3rr6-jfgh","MINI-7mhw-rxm7-wf3x","MINI-7mm6-885m-4g6v","MINI-7p4x-53mm-r52r","MINI-7pjx-jvh4-387p","MINI-7r6r-wxhm-x27j","MINI-7r79-79pw-mcpr","MINI-7rmv-7v3r-8j8g","MINI-7vgg-4gqv-pw3f","MINI-7vjg-fgwq-x96c","MINI-7w95-h9j8-xcxj","MINI-7wc7-hxvr-jpqf","MINI-822q-c477-qcvv","MINI-82j3-rhpq-25cf","MINI-82wp-w9m3-3693","MINI-82wr-62jp-382v","MINI-82xj-4496-25wc","MINI-835q-9cv3-99h3","MINI-836x-phcg-29f7","MINI-8382-87pf-m3fr","MINI-83wh-3mvm-7jhh","MINI-842q-3rm5-4hf6","MINI-847v-653j-rh4x","MINI-84j4-8v6q-ccr4","MINI-868q-9vqj-rvq8","MINI-869g-c8gc-7wwp","MINI-86pg-59wq-hg77","MINI-87h7-44m8-7932","MINI-87x7-c2jf-wmhp","MINI-88q9-p3h5-f43w","MINI-8964-2f5f-75m2","MINI-8c46-9hjx-33cq","MINI-8f79-95jw-f4wm","MINI-8g9v-fp96-6mp3","MINI-8gc7-fw7p-c8w8","MINI-8gvw-9r5g-vcgf","MINI-8h3h-jv45-4rvc","MINI-8hq6-85rc-p9r3","MINI-8hq9-jg78-8g6g","MINI-8hr5-v9mp-7329","MINI-8j9c-7w7h-ppjh","MINI-8jh9-v9fw-hpp3","MINI-8mg7-p72g-wm3p","MINI-8mm4-354h-8955","MINI-8p75-9r7j-5pv6","MINI-8p8h-wqhq-pw74","MINI-8prh-j5wp-8239","MINI-8prp-gf89-rh9p","MINI-8r2j-g9xm-rvg7","MINI-8r7x-jrf4-5jfq","MINI-8r8q-9qwp-m9wf","MINI-8rhr-hj62-m28r","MINI-8v5f-v2j6-jxxg","MINI-8v63-4r5f-59mr","MINI-8v7p-2x5r-g4g6","MINI-8vww-v2jv-2xqj","MINI-8w4x-5fgv-hhmf","MINI-8ww6-gvg8-wxj3","MINI-8wxw-334r-5x9f","MINI-8x7w-89w2-cr9g","MINI-9267-5xqc-hf5f","MINI-935j-c33r-f9xg","MINI-9396-m2xm-hmwv","MINI-93r3-24x9-wgq9","MINI-94c2-57wc-vfhm","MINI-94p2-vjx3-m3pm","MINI-954j-qx54-rgf4","MINI-959p-w8m6-c76p","MINI-96f9-wgqx-c6r3","MINI-973m-x4h9-5495","MINI-97f7-cj33-qfhw","MINI-97qv-hr99-h73g","MINI-993v-46cj-2c43","MINI-997c-49jc-vq9q","MINI-9c8m-f34f-xmqp","MINI-9f37-3c9c-gxp3","MINI-9f6v-h3c8-hfcq","MINI-9f8p-vj92-hf86","MINI-9g8j-7256-7h5x","MINI-9hqv-cmch-7h84","MINI-9m2h-x583-65vm","MINI-9m48-jrjv-4h58","MINI-9p7v-3hmp-mwf8","MINI-9p9j-g984-6jrq","MINI-9q68-xr38-wcg2","MINI-9q79-pvf6-98rh","MINI-9qf2-hjgp-3299","MINI-9qmq-v284-jqc2","MINI-9r8f-fp6q-vmg7","MINI-9rjq-j7hc-rvpq","MINI-9rqf-3wq2-qq8h","MINI-9vrr-r4gm-fvc9","MINI-9vvv-4w28-fp4p","MINI-9w3g-9wx6-mmvc","MINI-9wcc-2q7c-wqf2","MINI-9wcc-6wv5-pcq3","MINI-9wg7-6g68-2ffv","MINI-9wgh-prcg-79h9","MINI-9x5q-cm98-wp9c","MINI-c22c-296w-ggx6","MINI-c2fh-f94j-wjhv","MINI-c2gm-qccg-q3hx","MINI-c344-p279-v9fp","MINI-c3qq-wpvf-c5c5","MINI-c5pq-jrxp-w359","MINI-c5px-q7xc-x5f5","MINI-c5wq-3r82-v9vj","MINI-c6h8-vqvm-822q","MINI-c6jc-hw48-v9wq","MINI-c6vv-r2x9-5m4p","MINI-c7qr-wpf8-fxg4","MINI-c876-xjg7-jw2w","MINI-c99g-q77r-44v4","MINI-c9g3-q6xf-3xrw","MINI-cc7q-j62v-6f6p","MINI-cchx-pm4h-w2x8","MINI-ccpc-47g9-35x9","MINI-cg23-hc9m-jjq8","MINI-ch24-3883-vf2f","MINI-chwj-wvg2-jjf7","MINI-cj2p-jjgh-4q7g","MINI-cjj9-fm5h-8f4v","MINI-cm66-q2p5-c74c","MINI-cp62-r4mh-8vcq","MINI-cpjh-h62x-jh48","MINI-crg8-f4qw-6rwv","MINI-crw7-gxx6-q3pj","MINI-cvpr-q5xp-v67r","MINI-cw2c-wcqc-m9qj","MINI-cwqm-3xp8-hpj5","MINI-cwr2-99jf-hcq6","MINI-cx32-g65x-gp9p","MINI-f2w6-47xx-7p7q","MINI-f39h-69hg-vx8c","MINI-f5c9-p25x-ggwj","MINI-f6r2-9wx3-jr86","MINI-f78c-9rhj-jx4w","MINI-f7mg-cr63-cf5m","MINI-f7q4-frqc-vjr3","MINI-f7v4-g4jr-hr5x","MINI-f7w5-4whx-6ww3","MINI-f84x-x9vv-cp58","MINI-f89v-cpjm-5726","MINI-f949-6fmq-3rxf","MINI-f9fv-rc9x-3rvm","MINI-f9hx-wj9f-256p","MINI-fc49-h25f-76g3","MINI-ff2x-7fm4-5j3g","MINI-ff8c-g466-j6vw","MINI-ffg4-r6wv-vgv6","MINI-ffqv-69mq-m27x","MINI-fg86-658w-qf4f","MINI-fh2h-x7m5-mj7f","MINI-fh36-xwf7-vfp5","MINI-fh7r-4cfj-95ww","MINI-fh7r-c395-3gx5","MINI-fh87-7fr2-gf6g","MINI-fhj8-rxvm-92p3","MINI-fm2q-p8jv-w29m","MINI-fq3g-p56r-m8xv","MINI-fq5x-5r6j-q5h8","MINI-fqhm-w2r8-53r5","MINI-frhx-7gmh-2xc8","MINI-frx8-w79j-rjmc","MINI-fv24-whgg-2qj3","MINI-fvhg-v9rf-c28m","MINI-fvq5-5fpr-5m4c","MINI-fw79-57jv-p876","MINI-fxg6-frjg-gm24","MINI-fxpp-wp2c-3v42","MINI-fxq9-w59w-2jjq","MINI-g27r-q5hp-vrgq","MINI-g2vp-8mx6-x2mp","MINI-g44p-mfjf-c28q","MINI-g46h-65q7-3f7c","MINI-g4qx-86xj-6hfw","MINI-g53g-3vqm-hhx6","MINI-g57j-6cvq-h83r","MINI-g5j4-76g4-8c4r","MINI-g64h-wh9p-8wvw","MINI-g72g-3q36-cjvg","MINI-g7w9-429x-xmcj","MINI-g86q-c4xh-p2rm","MINI-g8q2-6m3j-h53r","MINI-g93g-2fjm-7r36","MINI-g9f5-58ff-5324","MINI-gchh-c87m-g93m","MINI-gcmf-r87f-99x7","MINI-gfmv-jqf7-h7p6","MINI-ggj8-f4gw-m5q4","MINI-ggmx-4hg7-92cv","MINI-gjg4-5whf-4ffq","MINI-gmwh-g87m-p466","MINI-gp2m-x48p-px7j","MINI-gpx2-g3fx-4x82","MINI-gqx3-gj2m-x7j7","MINI-gr7r-98c6-2qhq","MINI-grc5-9422-ghw4","MINI-grr6-g38m-v9rx","MINI-gv4f-6fm3-h763","MINI-gvpx-3qc2-x9mq","MINI-gvx6-fmhm-98vv","MINI-gwgc-j286-f2f8","MINI-gx5r-whv6-q5wj","MINI-gxgr-j63h-6vvv","MINI-h27p-mvgx-5xxf","MINI-h2h5-j6v3-8rxr","MINI-h337-ggwx-9xpw","MINI-h3rm-4gpq-x8c6","MINI-h3w2-q357-vh64","MINI-h4wp-c3rq-q7g8","MINI-h668-x9v3-rjf7","MINI-h69x-494j-x996","MINI-h6cf-8v4q-gvp9","MINI-h767-r9vx-3hjf","MINI-h78x-8cw5-9r4h","MINI-h8pc-m3mm-2gfq","MINI-h8wh-h23g-cvx7","MINI-h947-wggj-9f5c","MINI-h972-x5j7-p8qf","MINI-h9rh-chw3-pmq6","MINI-hc5r-f4cx-6wgj","MINI-hf2f-9xcg-9m77","MINI-hgj7-hv7g-r9wr","MINI-hhjg-9px7-3777","MINI-hhxf-5r64-mm85","MINI-hj53-jwx8-f8gg","MINI-hjfr-q739-pg2m","MINI-hm6f-2j57-www2","MINI-hmc4-qvpv-j3mm","MINI-hp24-9vc9-q5p4","MINI-hp3f-9829-hxc7","MINI-hpcx-9pxg-99gr","MINI-hpvp-8f2p-h2hv","MINI-hq6q-c3c9-rjjv","MINI-hqmc-hr8g-2f8h","MINI-hrf3-hjf2-j7vj","MINI-hrrr-jw64-wm89","MINI-hrw3-pq8w-gvqj","MINI-hv57-gxq3-gjpg","MINI-hv9j-f7x4-gvr3","MINI-hvgq-vfj6-4hxh","MINI-hvx4-q9xw-wr65","MINI-hw69-hq8p-w3xr","MINI-hxg3-63vm-hc55","MINI-hxg3-h86j-vfp7","MINI-hxg8-2r54-4hxx","MINI-hxj3-7p3m-4mqx","MINI-j253-q9qg-j837","MINI-j33c-c77w-j95q","MINI-j3mx-586w-hjcp","MINI-j3rj-922p-cqh5","MINI-j444-7gj2-crr3","MINI-j46p-8jf3-jf2q","MINI-j4gq-vw39-qqv7","MINI-j52p-xcr2-vp9f","MINI-j557-8292-m27j","MINI-j597-2w73-j9c6","MINI-j5fw-rvvh-7q8r","MINI-j64g-vp73-7jf3","MINI-j688-638p-v5q6","MINI-j6ch-mxxr-2f5c","MINI-j6gr-mpm9-7wwh","MINI-j6p7-pm68-fw2q","MINI-j72v-vm2f-jx5f","MINI-j7m5-cgcm-xm83","MINI-j7r9-hmjg-m583","MINI-j8gg-8cxq-g4r4","MINI-j984-4484-q47g","MINI-j9c3-v468-c83p","MINI-j9fg-crmc-p4hj","MINI-jc55-c2v5-qjx6","MINI-jf6g-cx7g-6crp","MINI-jf82-6659-5xxw","MINI-jffp-cfjc-9pwh","MINI-jfr2-p8rf-frv6","MINI-jgrc-jfrp-7fxh","MINI-jh8w-xx37-f633","MINI-jhcp-8mph-fhm7","MINI-jjff-9xmp-h86v","MINI-jm9h-527c-r3mh","MINI-jprv-8wg7-vj4q","MINI-jpwj-pjhw-vj49","MINI-jqw7-fgpj-68vf","MINI-jrph-r5r4-wqh2","MINI-jrr6-gvx8-x5qg","MINI-jrwj-cjf9-g9c3","MINI-jv65-jjw9-2pgf","MINI-jvh8-48v2-x4xg","MINI-jvhh-wwfj-2852","MINI-jwf3-38wq-vrjp","MINI-jwj3-2fjp-6rph","MINI-jwm7-j743-ff7q","MINI-jx24-hfwg-ggr8","MINI-jxc3-4fq5-x637","MINI-jxxj-f6xx-w588","MINI-m29f-jff9-g9mp","MINI-m2qj-g7w2-3v3m","MINI-m2r7-g38x-pwp2","MINI-m385-cmgh-gpq4","MINI-m389-4c4h-2m55","MINI-m448-c899-ccfc","MINI-m46r-fffh-q753","MINI-m4jw-q37r-q5x7","MINI-m53j-45gq-9hwf","MINI-m5g7-2w55-m662","MINI-m5gh-gr95-6j38","MINI-m5hh-c3fq-fr8r","MINI-m62q-hqf9-fxg9","MINI-m64j-qf7c-7cxg","MINI-m66v-p3m9-4g4m","MINI-m6f4-fhhv-cw3h","MINI-m6wf-gj36-cv92","MINI-m73g-9jfw-phc8","MINI-m797-58wj-f58v","MINI-m7q2-cmq3-8r3m","MINI-m854-xx8c-263c","MINI-m87q-fhq4-m9jp","MINI-m8c5-3xmc-fwqm","MINI-m959-6cpq-p4cq","MINI-m9j5-9jc2-g987","MINI-m9p9-qxwm-g3r5","MINI-m9wh-q63p-wcpg","MINI-mf56-xcjg-8p8g","MINI-mfpg-8756-px6q","MINI-mfpv-2rph-79qq","MINI-mg5c-mw4q-8mqc","MINI-mgjp-78xh-f392","MINI-mgxj-7546-cxhq","MINI-mhh6-pwv6-hwfw","MINI-mhh7-jch9-r38r","MINI-mj8m-32m6-wrr9","MINI-mjxp-j324-j6v3","MINI-mm35-rq8v-37rp","MINI-mp4f-q4w2-jmqr","MINI-mpf2-6vrg-mg4r","MINI-mpmv-vjf8-jgr2","MINI-mpr4-mwwj-x8h8","MINI-mq76-9j79-39qh","MINI-mrjg-q7f9-6vp6","MINI-mvmf-cwmh-wmm3","MINI-mvwg-vmpg-g3cg","MINI-mwjh-qc57-43q8","MINI-mwm2-4639-8c66","MINI-mwvx-wp34-m2rr","MINI-mxqf-28q9-4g4m","MINI-mxqv-q7vq-q4ch","MINI-p28w-rwq9-967j","MINI-p2qw-vpv4-hmm5","MINI-p3gh-6vj4-7rqp","MINI-p3ph-76fg-g2r6","MINI-p49r-95j4-qxh6","MINI-p4rv-8qqg-4p8j","MINI-p55f-hpxm-g2m8","MINI-p55v-rvvv-q5wm","MINI-p5pw-64gf-wh9v","MINI-p62m-cxc8-x2qp","MINI-p6rf-5738-r869","MINI-p786-7fv7-j97p","MINI-p7gm-r9wf-3pgc","MINI-p7j9-h4p9-phmg","MINI-p7qw-gr75-rvhj","MINI-p89q-r5v4-wx7h","MINI-p8fg-853p-ch78","MINI-p8j4-975f-vc4g","MINI-p8jr-4qfp-h77h","MINI-p8jw-x2gr-p59v","MINI-p8rc-9w54-2865","MINI-p8v5-348j-4mpm","MINI-p99c-7v5x-6756","MINI-p9pp-xgph-8hxg","MINI-p9qv-5hhf-6mqw","MINI-pc8h-ppg5-5c23","MINI-pcwc-j7pc-64hj","MINI-pf72-f3vp-5h93","MINI-pfwq-x57w-cq86","MINI-pg42-8jv3-8886","MINI-pg8m-vgf2-5952","MINI-pg9p-6x5f-r35x","MINI-phmm-x8r9-w24g","MINI-pj7r-fmj3-rq6f","MINI-pj99-hvx6-4m79","MINI-pjmp-5g9q-xm6f","MINI-pjmr-2wq4-rxfp","MINI-pjmx-4932-q4j3","MINI-pm3w-q58c-f63q","MINI-pq52-q7qq-h6mg","MINI-pq7c-34g5-2cp8","MINI-pqrx-34jv-6cfp","MINI-prch-5x7h-75gm","MINI-prp7-wpxc-7993","MINI-pv2w-7c4c-x4xq","MINI-pvvp-8c5g-vf3p","MINI-pw7m-hrjv-hj8v","MINI-px5m-v2f6-2rh8","MINI-pxhr-mchj-wxvw","MINI-q2gx-8f8v-542j","MINI-q32p-75gp-h42v","MINI-q372-qr7j-jq97","MINI-q3p7-xj8c-hcfj","MINI-q483-2vjm-7fq8","MINI-q48p-4m9w-3fwf","MINI-q4cq-2vmq-7wm9","MINI-q4f9-9xg4-r5vw","MINI-q4p6-475q-rw25","MINI-q4v3-rjcg-69gr","MINI-q4xg-fgcw-vmxq","MINI-q56q-cxfh-ghcq","MINI-q57p-w3w2-gg79","MINI-q584-w6x2-cv89","MINI-q5f6-6g33-rxvm","MINI-q697-p82v-rj6v","MINI-q6j8-gw96-c853","MINI-q786-cprv-5fcw","MINI-q8m7-x695-j6j6","MINI-q924-j397-x3vc","MINI-q998-89w7-c5v3","MINI-qcmr-wrp3-vxjr","MINI-qcv7-3vcq-p6fm","MINI-qcvp-jm36-hcw7","MINI-qf9q-j473-rwr3","MINI-qfhq-rrrq-mjmf","MINI-qg95-fq24-jcjx","MINI-qh2m-3mj6-73mj","MINI-qh5v-6v52-4xfj","MINI-qhw4-8w7p-7rqc","MINI-qj69-p4j6-fqh6","MINI-qjfw-g89h-w94g","MINI-qmfm-x56x-7rfp","MINI-qpcm-7qhx-4hj8","MINI-qpx4-5vcm-22v4","MINI-qqrj-5vw6-hp86","MINI-qr97-9q2h-pp6p","MINI-qrc5-rgw9-h73c","MINI-qrq4-5cwh-f5v7","MINI-r25f-6643-xfm3","MINI-r3g5-g9cp-28xq","MINI-r42w-rq69-f4cf","MINI-r4pm-4cmq-frcw","MINI-r4v7-ph23-gp33","MINI-r4x5-qmjh-r929","MINI-r5v2-c8x3-6wpp","MINI-r5wr-g8rv-7gpp","MINI-r6v3-v32v-22ff","MINI-r784-hm6c-6jp5","MINI-r867-33rf-c7r5","MINI-r93f-9r9q-px9x","MINI-r988-j3fv-qfc8","MINI-r9hg-6v6j-v58h","MINI-rc2j-273f-7843","MINI-rc3h-jmm7-w7jr","MINI-rfc5-vm7f-hm3h","MINI-rfc8-rq2p-3pm5","MINI-rfh5-vv32-63c3","MINI-rfvp-c487-qc3w","MINI-rg2h-7443-9hxg","MINI-rg8c-h2rc-rpmw","MINI-rgj2-9gvg-5j9f","MINI-rgqv-f87r-83rx","MINI-rhh2-w3xh-xjv9","MINI-rhvr-xmxc-f2mf","MINI-rjvj-6h8g-3x2h","MINI-rmfc-4rx7-ff89","MINI-rmhx-c5wc-wx89","MINI-rp6c-gj23-fwp2","MINI-rp6q-2vxq-2mpf","MINI-rrvf-hqr4-6rmv","MINI-rvgf-f6x4-pp79","MINI-rw4x-3hfg-cq24","MINI-rwq9-vrhw-9x86","MINI-rx62-2v2p-75qp","MINI-rxmg-jj67-pxmj","MINI-rxxh-mq8h-qmc6","MINI-v235-gqvj-3g6j","MINI-v2m7-gf7r-fxm7","MINI-v3p3-ghqj-8w37","MINI-v3qp-7g48-8vg8","MINI-v45f-w6hh-4c98","MINI-v468-7qg6-6qf8","MINI-v49f-95q7-487w","MINI-v4fg-x5gf-jmm2","MINI-v53v-mxq2-j97h","MINI-v5rv-p87h-v84f","MINI-v6q4-47j7-4m26","MINI-v6rc-rwxc-w92p","MINI-v75f-g43g-cmrj","MINI-v77j-p2rv-r5hw","MINI-v7rw-v8hh-w924","MINI-v7v6-9vfc-vph2","MINI-v882-g93w-f7v9","MINI-v8cv-wprv-v6c4","MINI-v8g7-jqjg-hw92","MINI-v8jh-h3x4-xh77","MINI-v9r4-9j54-mvf3","MINI-v9v2-m6x8-qwv8","MINI-vcmj-fj4r-hpm6","MINI-vg9w-43hv-5826","MINI-vgfh-45cr-88c3","MINI-vjc8-9vhh-j4rj","MINI-vmh4-h63r-7g7p","MINI-vmjq-jpmx-hv6c","MINI-vp9x-p7jw-82vw","MINI-vq3h-c78r-4qq3","MINI-vq4w-w2qh-33vf","MINI-vq4w-wcgg-2hjh","MINI-vq55-jq6w-8hj7","MINI-vqcc-2gmp-7gh7","MINI-vqq5-9p7r-wmv8","MINI-vqrm-3wvc-g57q","MINI-vw9c-967j-2cgh","MINI-vx65-52wv-wrjg","MINI-w2pg-423v-79p6","MINI-w37w-3whv-9p5j","MINI-w3m3-pjrr-j6j8","MINI-w3vf-8qqg-539j","MINI-w46r-5vhx-2548","MINI-w48w-2m6q-5x37","MINI-w497-5qcx-2mp2","MINI-w5vf-25p7-gv2x","MINI-w6v7-p6gq-p53r","MINI-w758-hcm5-vw2r","MINI-w85c-cmp3-hjrw","MINI-w883-rqj5-wgg5","MINI-w89p-xjqh-mqjf","MINI-w8mf-vm72-5c34","MINI-w8w9-vfhx-wrxw","MINI-w93j-grjc-56mv","MINI-w9f3-pwp2-74h2","MINI-w9j2-rcrw-w288","MINI-wf7v-9fvf-jwhj","MINI-wg7c-h64m-3wm5","MINI-wh78-4v93-777x","MINI-whpp-53jh-m8rx","MINI-wmgv-f4ch-fv38","MINI-wq5w-crhm-rjjm","MINI-wq67-7h92-wfrh","MINI-wq67-vg9m-vjm6","MINI-wr8g-rhj6-f765","MINI-wrfv-rwvm-wwxx","MINI-wv9p-36fr-9cxw","MINI-ww26-f2c9-fr9r","MINI-ww3f-r59f-mmhr","MINI-wxcw-wp27-8vcj","MINI-wxhc-3m3g-vwvm","MINI-wxm4-32ph-jcvq","MINI-x2rm-cqc2-hqv6","MINI-x33q-54x4-3q8f","MINI-x37w-47gq-jc88","MINI-x3h9-g4h6-hj54","MINI-x3m5-xmh4-93r7","MINI-x42x-cq82-fwff","MINI-x5xr-4j99-3pcj","MINI-x8g5-f27w-jgfq","MINI-x978-pxcc-377r","MINI-x97h-x5g4-qv9h","MINI-x97v-r92x-m23w","MINI-x9c8-fpwp-784m","MINI-xc7p-r9mm-jh45","MINI-xhmh-4gm5-wqw6","MINI-xjgg-74xh-f783","MINI-xm2h-2248-6f43","MINI-xmhh-42m5-3v86","MINI-xpcv-mfh4-7mqj","MINI-xqcg-h8mr-g2q6","MINI-xrww-hm74-w757","MINI-xv6r-jgpv-57c5","MINI-xvmp-hwhf-rmfc","MINI-xw4x-8m6q-43v9","MINI-xw9w-966h-7hmr","MINI-xwm7-p3qh-3pmm","MINI-xwqv-whr5-56wc","MINI-xx3c-mx93-r3w2","MINI-xxrg-696c-f6g5","RHSA-2026:36617","RHSA-2026:36776","RHSA-2026:39266","RHSA-2026:39272","RHSA-2026:39319","RLSA-2026:36617","RLSA-2026:39266","RLSA-2026:39272","RLSA-2026:39319","UBUNTU-CVE-2026-33811"],"analysis":{"component_type":"library","fix_type":"upgrade","impacts":["denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"Go standard library","requires_auth":"none","summary":"A double-free vulnerability in the Go net package's cgo DNS resolver allows attackers to cause a crash via long CNAME responses.","user_interaction":"not_required","vuln_class":"memory_corruption"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Go","cpe":[{"product":"go","vendor":"golang"}],"cvss":{"score":7.5,"severity":"high","source":"cisa-adp","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"cwes":[{"id":"CWE-415","name":"Double Free"},{"id":"CWE-1341","name":"Multiple Releases of Same Resource or Handle"}],"description":"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.","ecosystems":["AlmaLinux:10","AlmaLinux:8","AlmaLinux:9","Bitnami","Go","Red Hat:enterprise_linux:10.2","Red Hat:enterprise_linux:8::appstream","Red Hat:enterprise_linux:9::appstream","Rocky Linux:10","Rocky Linux:8","Rocky Linux:9"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Crash when handling long CNAME response in net","id":"CVE-2026-33811","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"Bitnami","product":"golang:go","products":["golang:go"],"type":"memory_corruption","year":"2026"},"n_packages":25,"n_references":4,"next":{"headline":"Excessive memory allocation when decoding malicious SFNT in golang.org/x/image","id":"CVE-2026-33812"},"packages":[{"ecosystem":"Bitnami","fixed":["1.25.10","1.26.3"],"introduced":["0","1.26.0-0"],"last_affected":[],"package":"golang","purl":"pkg:bitnami/golang","source":"BIT-golang-2026-33811"},{"ecosystem":"Go","fixed":["1.25.10","1.26.3"],"introduced":["0","1.26.0-0"],"last_affected":[],"package":"stdlib","purl":"pkg:golang/stdlib","source":"GO-2026-4981"},{"ecosystem":"AlmaLinux:10","fixed":["3.7.1-5.el10_2.6"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/almalinux/git-lfs","source":"ALSA-2026:39272"},{"ecosystem":"AlmaLinux:8","fixed":["3.4.1-12.el8_10"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/almalinux/git-lfs","source":"ALSA-2026:39266"},{"ecosystem":"AlmaLinux:9","fixed":["3.7.1-4.el9_8.2"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/almalinux/git-lfs","source":"ALSA-2026:39319"},{"ecosystem":"AlmaLinux:9","fixed":["1.2.11-2.el9_8"],"introduced":["0"],"last_affected":[],"package":"oci-seccomp-bpf-hook","purl":"pkg:rpm/almalinux/oci-seccomp-bpf-hook","source":"ALSA-2026:36617"},{"ecosystem":"Red Hat:enterprise_linux:10.2","fixed":["0:3.7.1-5.el10_2.6"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/redhat/git-lfs","source":"RHSA-2026:39272"},{"ecosystem":"Red Hat:enterprise_linux:10.2","fixed":["0:3.7.1-5.el10_2.6"],"introduced":["0"],"last_affected":[],"package":"git-lfs-debuginfo","purl":"pkg:rpm/redhat/git-lfs-debuginfo","source":"RHSA-2026:39272"},{"ecosystem":"Red Hat:enterprise_linux:10.2","fixed":["0:3.7.1-5.el10_2.6"],"introduced":["0"],"last_affected":[],"package":"git-lfs-debugsource","purl":"pkg:rpm/redhat/git-lfs-debugsource","source":"RHSA-2026:39272"},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","fixed":["0:3.4.1-12.el8_10"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/redhat/git-lfs","source":"RHSA-2026:39266"},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","fixed":["0:3.4.1-12.el8_10"],"introduced":["0"],"last_affected":[],"package":"git-lfs-debuginfo","purl":"pkg:rpm/redhat/git-lfs-debuginfo","source":"RHSA-2026:39266"},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","fixed":["0:3.4.1-12.el8_10"],"introduced":["0"],"last_affected":[],"package":"git-lfs-debugsource","purl":"pkg:rpm/redhat/git-lfs-debugsource","source":"RHSA-2026:39266"},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","fixed":["1:0.2.5-8.el8_10"],"introduced":["0"],"last_affected":[],"package":"rhc","purl":"pkg:rpm/redhat/rhc","source":"RHSA-2026:36776"},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","fixed":["1:0.2.5-8.el8_10"],"introduced":["0"],"last_affected":[],"package":"rhc-debuginfo","purl":"pkg:rpm/redhat/rhc-debuginfo","source":"RHSA-2026:36776"},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","fixed":["1:0.2.5-8.el8_10"],"introduced":["0"],"last_affected":[],"package":"rhc-debugsource","purl":"pkg:rpm/redhat/rhc-debugsource","source":"RHSA-2026:36776"},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","fixed":["0:3.7.1-4.el9_8.2"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/redhat/git-lfs","source":"RHSA-2026:39319"},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","fixed":["0:3.7.1-4.el9_8.2"],"introduced":["0"],"last_affected":[],"package":"git-lfs-debuginfo","purl":"pkg:rpm/redhat/git-lfs-debuginfo","source":"RHSA-2026:39319"},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","fixed":["0:3.7.1-4.el9_8.2"],"introduced":["0"],"last_affected":[],"package":"git-lfs-debugsource","purl":"pkg:rpm/redhat/git-lfs-debugsource","source":"RHSA-2026:39319"},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","fixed":["0:1.2.11-2.el9_8"],"introduced":["0"],"last_affected":[],"package":"oci-seccomp-bpf-hook","purl":"pkg:rpm/redhat/oci-seccomp-bpf-hook","source":"RHSA-2026:36617"},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","fixed":["0:1.2.11-2.el9_8"],"introduced":["0"],"last_affected":[],"package":"oci-seccomp-bpf-hook-debuginfo","purl":"pkg:rpm/redhat/oci-seccomp-bpf-hook-debuginfo","source":"RHSA-2026:36617"},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","fixed":["0:1.2.11-2.el9_8"],"introduced":["0"],"last_affected":[],"package":"oci-seccomp-bpf-hook-debugsource","purl":"pkg:rpm/redhat/oci-seccomp-bpf-hook-debugsource","source":"RHSA-2026:36617"},{"ecosystem":"Rocky Linux:10","fixed":["0:3.7.1-5.el10_2.6"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/rocky-linux/git-lfs?distro=rocky-linux-10\u0026epoch=0","source":"RLSA-2026:39272"},{"ecosystem":"Rocky Linux:8","fixed":["0:3.4.1-12.el8_10"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/rocky-linux/git-lfs?distro=rocky-linux-8\u0026epoch=0","source":"RLSA-2026:39266"},{"ecosystem":"Rocky Linux:9","fixed":["0:3.7.1-4.el9_8.2"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/rocky-linux/git-lfs?distro=rocky-linux-9\u0026epoch=0","source":"RLSA-2026:39319"},{"ecosystem":"Rocky Linux:9","fixed":["0:1.2.11-2.el9_8"],"introduced":["0"],"last_affected":[],"package":"oci-seccomp-bpf-hook","purl":"pkg:rpm/rocky-linux/oci-seccomp-bpf-hook?distro=rocky-linux-9\u0026epoch=0","source":"RLSA-2026:36617"}],"prev":{"headline":"Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509","id":"CVE-2026-33810"},"products":["net"],"published":"2026-05-07","related":[{"cvss_score":8.1,"headline":"Microsoft Windows CryptoAPI Spoofing","id":"CVE-2020-0601","kev_date_added":"2021-11-03","published":"2020-01-14"},{"cvss_score":9.8,"headline":"Missing bound checks can lead to memory corruption in safe Go in cmd/compile","id":"CVE-2026-27143","kev_date_added":null,"published":"2026-04-08"},{"cvss_score":9.8,"headline":"Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip","id":"CVE-2024-24790","kev_date_added":null,"published":"2024-06-05"},{"cvss_score":9.8,"headline":"Arbitrary code execution via go.mod toolchain directive in cmd/go","id":"CVE-2023-39320","kev_date_added":null,"published":"2023-09-08"},{"cvss_score":9.8,"headline":"Improper handling of JavaScript whitespace in html/template","id":"CVE-2023-24540","kev_date_added":null,"published":"2023-05-11"},{"cvss_score":9.8,"headline":"Backticks not treated as string delimiters in html/template","id":"CVE-2023-24538","kev_date_added":null,"published":"2023-04-06"},{"cvss_score":9.8,"headline":"Other in go/golang","id":"CVE-2012-2666","kev_date_added":null,"published":"2021-07-09"}],"sources":[{"class":"attribution","licence":"MIT","name":"AlmaLinux","prefix":"ALSA"},{"class":"attribution","licence":"Apache-2.0","name":"Bitnami","prefix":"BIT"},{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"Go Vulnerability Database","prefix":"GO"},{"class":"attribution","licence":"CC BY 4.0","name":"Red Hat","prefix":"RHSA"},{"class":"attribution","licence":"BSD","name":"Rocky Linux","prefix":"RLSA"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-09-18","vendors":["Go standard library"]},"summary":"A double-free vulnerability in the Go net package's cgo DNS resolver allows attackers to cause a crash via long CNAME responses.","url":"https://insights.sbomify.com/CVE-2026-33811/"}