{"answers":{"affected":"2 open source packages ship an affected version, including golang and stdlib. It affects 1 product.","exploited":"There is no known exploitation of CVE-2026-39820 in the wild and no public exploit code.","fix":"Upgrade golang to a fixed version for your release line: 1.25.10 or 1.26.3.","what":"CVE-2026-39820 is a high-severity denial of service vulnerability in Golang Go, published on 7 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-39820 and fix it if it is affected.\n\nWhat it is: CVE-2026-39820 is a high-severity denial of service vulnerability in Golang Go, published on 7 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-39820 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- golang (Bitnami): affected all versions; fixed in 1.25.10, 1.26.3\n- stdlib (Go): affected all versions; fixed in 1.25.10, 1.26.3\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-39820/ (Markdown: https://insights.sbomify.com/CVE-2026-39820/index.md)","id":"CVE-2026-39820","markdown":"https://insights.sbomify.com/CVE-2026-39820/index.md","name":"CVE-2026-39820","record":{"aliases":["AZL-98772","BELL-CVE-2026-39820","BIT-golang-2026-39820","CLEANSTART-2026-DV13191","CLEANSTART-2026-IX22065","CLEANSTART-2026-KS11045","CLEANSTART-2026-QM07954","CLEANSTART-2026-RV93629","CLEANSTART-2026-RZ44910","CLEANSTART-2026-VH11808","CLEANSTART-2026-VN37726","CLEANSTART-2026-WI70265","CLEANSTART-2026-ZD25071","CLSA-2026-1781178389","CLSA-2026-1789041229","DEBIAN-CVE-2026-39820","ECHO-0092-cdc5-7f5c","GHSA-p9h5-jm8x-mjm5","GO-2026-4986","MINI-22hj-fvqg-m257","MINI-22v6-7gmw-4pq8","MINI-2375-2vhr-5m56","MINI-239g-f6jf-9245","MINI-249j-7g86-hrcm","MINI-24vv-h22v-52xq","MINI-258q-v3fc-jwg2","MINI-25gf-425m-p34p","MINI-264g-4mh7-7262","MINI-27m8-73q2-fcxm","MINI-27p7-5fw4-6cpj","MINI-2847-p45f-v3h4","MINI-284m-vvxm-3x3w","MINI-2894-fqxg-cf2c","MINI-28jj-6jvq-7qf8","MINI-28rc-pv7v-2xrc","MINI-2948-3h63-qm69","MINI-29gx-9642-674x","MINI-2c6h-hr35-55xj","MINI-2fgx-m3xc-mhr5","MINI-2g69-466x-2966","MINI-2hmq-wfjr-669c","MINI-2hq5-7252-g27f","MINI-2jp9-vjc6-99hj","MINI-2mfx-cgv5-c9h8","MINI-2q7p-q6qj-3r56","MINI-2qcg-gg3x-jq5w","MINI-2qmr-pf6r-jqpw","MINI-2qrg-gvjf-5fm4","MINI-2qrj-6h48-8gmv","MINI-2r85-pmcw-8v2r","MINI-2rp2-xfhf-pr5g","MINI-2rqj-p4rf-699m","MINI-2v35-x27p-rgfm","MINI-2wfm-9xjq-p6gg","MINI-2x6j-q92v-5r57","MINI-2xgg-43g2-88vx","MINI-3353-55f8-xpmm","MINI-33xr-347x-xxrp","MINI-3445-4m99-5wrp","MINI-34q2-27cf-hc5r","MINI-34q9-7j3m-7r2v","MINI-3553-39gp-f62w","MINI-35c3-xxjq-6mmf","MINI-35mw-cxcr-fcx3","MINI-36h2-f9v3-r2wq","MINI-36jf-6p3v-rrq3","MINI-36xf-ffmp-w45w","MINI-3744-999g-9g9g","MINI-379h-gxj8-53f6","MINI-38mf-88vh-2xwx","MINI-38q5-g9wc-qcwq","MINI-39pq-4x3x-9vq2","MINI-39x2-vj3v-q45g","MINI-39x9-c78m-f6ff","MINI-3h34-wqc9-c43v","MINI-3hpp-8vh2-xgmw","MINI-3j2w-p6jm-5grf","MINI-3j9v-f6v3-wq34","MINI-3m98-48hh-xf7g","MINI-3p4p-6crg-vj9r","MINI-3pcp-5mgv-7pj9","MINI-3pgp-2xf4-mqqp","MINI-3pxg-fw7x-3qjf","MINI-3q69-937r-7h7c","MINI-3q9c-hm4w-j29j","MINI-3r7g-chj8-w48c","MINI-3v34-xwfh-xfhf","MINI-3v72-c5h5-67c9","MINI-3vhj-mhrj-62cg","MINI-3vwv-j3x8-hcp2","MINI-3wc9-h7mw-5mx5","MINI-3x78-fq8r-4p4q","MINI-42m8-2pq7-2543","MINI-42pv-hwgx-9vmp","MINI-433q-vwm6-wj8f","MINI-4397-8vfx-fq46","MINI-446q-qh93-fq42","MINI-44hq-xj87-3qch","MINI-45cq-5jxw-jhhh","MINI-46gm-p3pq-c9r3","MINI-4759-3r54-rc8r","MINI-47c5-284c-2gcg","MINI-47h6-4p2q-gwwg","MINI-484x-hg84-pv9x","MINI-487x-4v46-24xm","MINI-48gf-h8x9-4vpv","MINI-496m-rqcg-wx55","MINI-49gg-p84c-wcqj","MINI-49qp-rqj9-4v59","MINI-49qq-ch6v-qm78","MINI-49w5-j56w-xh57","MINI-4c63-w55m-3c4g","MINI-4c7h-hqp9-rv36","MINI-4f78-x957-vc8g","MINI-4gjw-782r-2p5h","MINI-4gp9-x429-f88h","MINI-4j55-8vj2-vcmc","MINI-4jv5-r3q4-44xm","MINI-4m2q-g5w7-p56r","MINI-4p5m-q5gj-9g5v","MINI-4pxg-cgwg-296w","MINI-4q7h-fp5j-q53w","MINI-4qr7-vv54-wh7v","MINI-4qv9-5j2q-2mf6","MINI-4qw8-gff4-f4jx","MINI-4r96-7gmx-rw75","MINI-4vj6-2w2q-8r5j","MINI-4vj8-m7h6-cg25","MINI-4vv5-pg5p-r2mw","MINI-4w4h-vqp3-c3gx","MINI-4w7j-99mm-8wcj","MINI-4xwq-6mf5-r82j","MINI-5257-h7wf-whxg","MINI-52g3-2v9m-jvcc","MINI-539r-9q3g-gj5w","MINI-53v3-f3f8-j4r8","MINI-542c-c222-4mq9","MINI-54f7-3mq7-64h5","MINI-54fj-r95x-gw7c","MINI-54gw-22ch-p367","MINI-54xc-49c2-pfv8","MINI-55hv-g593-g3hx","MINI-55vv-7m7f-7r3x","MINI-565m-gwqg-gv58","MINI-56jw-4q87-f43v","MINI-56vc-hr7p-43x7","MINI-573f-2c8p-4j8w","MINI-589v-r3rc-mm5r","MINI-5c66-xg6c-mpxx","MINI-5fgw-3hh6-3grg","MINI-5fw5-h924-q2fj","MINI-5g9c-jf44-5vj8","MINI-5hf3-x288-cm97","MINI-5hg8-v8mm-mj63","MINI-5hwr-643w-q6p3","MINI-5m45-4v6r-7wcf","MINI-5m77-5h9w-7gg2","MINI-5m98-4vrj-m55c","MINI-5mmm-56r4-22g4","MINI-5mv7-45j5-pjf5","MINI-5p9g-2h7p-9mfx","MINI-5pqh-rc4m-p42v","MINI-5q7g-54vq-7phf","MINI-5r3c-52r9-33rr","MINI-5r56-5jrq-gg47","MINI-5r5h-m756-475r","MINI-5rx3-6837-f2mh","MINI-5v44-mgvm-jxvm","MINI-5vjg-p8h8-9wj2","MINI-5vr9-xp3p-wq7m","MINI-5vv7-9323-9r33","MINI-5w94-mjqf-8mc7","MINI-5wh4-pq9c-6q7v","MINI-5xc6-qm69-8486","MINI-5xhx-3xmq-x57g","MINI-63rv-83gp-cpq6","MINI-63xh-f5vq-vrrp","MINI-6735-9296-2vpq","MINI-67p7-cgg4-x3mv","MINI-6844-r2pp-94jf","MINI-68m8-r424-w3f3","MINI-6992-wv7q-v8rh","MINI-699q-hf5w-x4m3","MINI-69g4-wpxw-fcv6","MINI-69pq-22xv-g273","MINI-6cpq-5pmr-4rgf","MINI-6cx5-mcj2-gh2p","MINI-6f4f-9j97-wxgx","MINI-6g8x-7fjj-xwm4","MINI-6jh3-4j9x-9xp5","MINI-6m65-4535-h9w9","MINI-6mm6-rxq8-x8p3","MINI-6mrc-7w59-54w5","MINI-6p73-j5qm-wwhg","MINI-6p8g-9xfv-89r9","MINI-6phj-mqfv-4xmp","MINI-6phm-jpw3-h35m","MINI-6pv3-f2qp-p2r2","MINI-6q5x-pjpf-xhrg","MINI-6q9h-mgqp-gm3m","MINI-6qw3-3g9p-x5jv","MINI-6r2p-qhh7-m5qv","MINI-6r47-2pvm-x9jm","MINI-6rhg-wpfx-769g","MINI-6rmp-r24v-rch9","MINI-6rqp-85vr-7xc2","MINI-6vx8-4455-hg36","MINI-6w5q-6jqh-c95v","MINI-6w8p-98w2-9f5q","MINI-6xq8-2m96-gwfv","MINI-726p-7qw4-89v8","MINI-72f8-f79x-8865","MINI-745f-qh9j-4pvr","MINI-759w-wv52-crqw","MINI-75m6-vxg3-q7c5","MINI-77h4-hr3q-mx7v","MINI-77mh-547r-whw4","MINI-7823-h8fx-2pvp","MINI-783j-f2jx-c39p","MINI-7843-7f67-jrpj","MINI-78j2-9wv6-hq5p","MINI-78vg-h4vv-pmqv","MINI-792x-5cfx-6jg7","MINI-7cm3-fx89-ff8q","MINI-7fhc-3hp7-xpjp","MINI-7g46-rvq3-x4j9","MINI-7g4f-w6x2-g5xj","MINI-7gcc-cj9g-mpfr","MINI-7gjg-c74x-7mm6","MINI-7hvf-6gjq-x5m9","MINI-7hx5-q56g-5w2j","MINI-7mp5-cm4f-jrqp","MINI-7mpv-v3rh-wcjc","MINI-7p8v-f6g4-jm67","MINI-7pq6-7c7q-vf73","MINI-7qc9-6jxg-m9mp","MINI-7rxg-qr66-8qp9","MINI-7v8w-9mhh-f6c5","MINI-7vx8-j3w5-4465","MINI-7w34-95v7-4cwj","MINI-7w4p-5vj2-9j4g","MINI-829g-qvcc-p4r5","MINI-82qc-vfqg-xwmh","MINI-83mq-8vgf-rj2m","MINI-84m6-2w3h-rx2f","MINI-856j-fcvc-c2x4","MINI-85qw-p573-jjw4","MINI-8669-6457-v5pf","MINI-86rh-vxgj-mj4w","MINI-8774-6v47-c56w","MINI-87rx-fmr3-w8rv","MINI-87vh-62vp-3jwf","MINI-887r-ph92-7366","MINI-895g-85m3-jj63","MINI-89cr-3mx3-mgr3","MINI-89cx-cxmw-rx2f","MINI-8c8x-9x4x-m9pc","MINI-8cq7-8jqf-jw4w","MINI-8cxw-qj9p-g632","MINI-8fr8-p57h-wc55","MINI-8frm-vq2h-7qgf","MINI-8g2g-rpm2-jgpq","MINI-8gm7-q4cx-7mh5","MINI-8h5g-wgjp-9mv7","MINI-8h7g-gj4c-7937","MINI-8h8r-6hg9-wrqx","MINI-8hq8-4x28-rcmj","MINI-8hwm-vgv3-4957","MINI-8jj7-5997-v9h7","MINI-8jjj-p84x-cqr9","MINI-8m3v-7w77-f79g","MINI-8mvr-xf5h-6f9x","MINI-8p3j-x8j4-rj8c","MINI-8p73-q447-62rj","MINI-8q69-5cvf-cvw5","MINI-8qm7-m3x2-4jww","MINI-8qm9-ccvw-frgh","MINI-8r6v-q7p5-pmh3","MINI-8v48-r759-hp8q","MINI-8vqv-636m-2224","MINI-8w8j-jg92-2h5r","MINI-8wj3-9qfj-h936","MINI-8wj5-q5c6-qh5m","MINI-8x94-x43m-cwvj","MINI-8xmp-4794-cwg6","MINI-8xrx-rm8j-35v6","MINI-92xx-84xh-92mm","MINI-9326-g48m-www8","MINI-93h8-49mh-758q","MINI-93j9-p8p2-5hmm","MINI-9445-4488-qmj7","MINI-94h6-x5rw-gv8f","MINI-94rj-7fxm-x6rq","MINI-94xq-8hrf-m5v7","MINI-952q-96r4-3m98","MINI-965q-67j6-hvmh","MINI-96xj-72fj-pmh7","MINI-97cw-7h37-rj38","MINI-97m5-f58r-wp22","MINI-97rx-c7gp-p774","MINI-97xr-g624-4vr4","MINI-982f-7p3w-vfp3","MINI-98r7-2mcv-f4hc","MINI-99fj-4wq7-gvg8","MINI-9c44-384c-v8rj","MINI-9c9q-g453-whx2","MINI-9fjc-c42m-rfgf","MINI-9fqm-hf44-4w39","MINI-9fv2-p565-4mm7","MINI-9gqx-3xfc-vrcc","MINI-9j2v-w2fr-4fcf","MINI-9j93-grxq-j28p","MINI-9mh2-6r4w-c7gv","MINI-9mw7-gjcp-qvc6","MINI-9q4h-8r3m-gr3f","MINI-9q4p-pcf4-4c7r","MINI-9qjg-f7c3-65vx","MINI-9qjr-5xfc-664g","MINI-9r9p-r492-95wx","MINI-9r9r-3h6c-xg95","MINI-9v4g-h5r4-hvw5","MINI-9w44-82cp-2m6q","MINI-9wgf-g355-85r6","MINI-9wp2-6hf3-f9rg","MINI-9wpj-r799-48xx","MINI-9wr9-cq34-cxf7","MINI-9wx6-qq3r-j3p9","MINI-9xj5-39r8-842q","MINI-c256-w35w-8rw7","MINI-c2cj-42mw-mvpx","MINI-c35r-qh46-8x5f","MINI-c364-chqw-f8h4","MINI-c37p-vc48-jrqw","MINI-c386-49v2-5r3m","MINI-c3j9-j8gr-cj65","MINI-c44r-5q5q-5mpp","MINI-c6q4-x2r5-c9m7","MINI-c6rx-2wp3-jcpq","MINI-c74h-85hr-f3fj","MINI-c74m-2c4h-cmc6","MINI-c7m5-wc7p-vpmg","MINI-c85q-wp6p-3c2p","MINI-c8xp-rfhf-7cf2","MINI-c93c-26g3-h74w","MINI-c9h5-8598-6h9f","MINI-c9j8-8w2w-828h","MINI-c9m3-m6ff-79x8","MINI-c9q7-5w36-8px6","MINI-cc67-78w4-hmp6","MINI-cc6g-hxpp-xfx9","MINI-ccgr-9qhj-q2x5","MINI-cf84-xp2v-428j","MINI-cg7j-8r48-92v2","MINI-cghf-x833-fh6g","MINI-cmj5-rm7h-rhcp","MINI-cmm9-fxgg-576q","MINI-cp9c-hvrm-7mv6","MINI-cq2j-rmpr-w87g","MINI-cq84-64h4-p372","MINI-cqhm-7x3g-mw5f","MINI-cr4j-9rg4-j9mm","MINI-cv23-836c-4hxm","MINI-cv4c-753c-9c7j","MINI-cv66-37fw-h2fj","MINI-cvcv-wq65-2hg2","MINI-cvq9-4j7r-q6q9","MINI-cvr4-h26x-qg3q","MINI-cwrp-j42v-4jm3","MINI-cxh5-p7mr-3x48","MINI-cxjc-pff8-cv94","MINI-cxr8-r699-qh67","MINI-f26m-5cf9-53wx","MINI-f294-5c9h-fjc6","MINI-f3mm-g75m-5f96","MINI-f4pf-gqp3-24c7","MINI-f4xc-cp86-mvxq","MINI-f54c-88fq-2qwr","MINI-f5rf-8c7q-32h7","MINI-f64c-83ww-p47c","MINI-f64w-6m5f-565r","MINI-f6h9-2qhh-h5g6","MINI-f79j-rj64-r78j","MINI-f7jv-vm2c-9pgf","MINI-f8rx-4w9x-qxpr","MINI-f96g-6gjf-vjf8","MINI-f9c4-7g24-ccvm","MINI-f9mg-cjff-9948","MINI-fcv9-826q-qx88","MINI-ff9p-g463-cm5f","MINI-ffrh-r5h4-2c8w","MINI-fg69-7982-v5gg","MINI-fghj-fmgf-gf25","MINI-fghx-cr98-fxfq","MINI-fjrg-j7cm-h556","MINI-fmpx-wh29-xxcj","MINI-fmw2-q779-wwfp","MINI-fp2p-pvcj-p3f7","MINI-fpcc-84mv-wmq4","MINI-fq7w-9g3f-rxm7","MINI-fqp6-vpc6-cc64","MINI-fr23-7443-grhw","MINI-frxh-856m-32fm","MINI-fv8x-88q7-wfxg","MINI-fvgv-9364-w8vj","MINI-fvqg-9f45-xf69","MINI-fwph-9h87-f9wp","MINI-fx6x-pg4f-p7rf","MINI-fx8m-3h76-7mx6","MINI-fxfq-rjw8-4x66","MINI-fxq9-g8cv-cxm5","MINI-g223-rxv2-2gw6","MINI-g27q-p9jj-ccrg","MINI-g2ww-7cw5-cw66","MINI-g3cq-r7mf-xhh4","MINI-g45m-8phg-23fv","MINI-g475-wwfh-qcxg","MINI-g4f3-jw24-mx7m","MINI-g4ww-qwvj-mrfg","MINI-g59w-w6qm-v9r2","MINI-g5hc-8wxx-prcf","MINI-g5qc-54x7-gj32","MINI-g73c-3835-vh5j","MINI-g7mv-8vp3-fjgf","MINI-g8mj-3cvj-fgv4","MINI-g8wv-rqf2-97f6","MINI-g92h-3cwf-hhhr","MINI-g97w-83r7-5r2h","MINI-g9j2-p2ff-c69x","MINI-gfcc-p5q6-3q7q","MINI-gfpr-4w68-26mr","MINI-gfqp-rhw4-jppx","MINI-gfwj-cmph-62vm","MINI-gh8q-x8w3-wmp5","MINI-gh9r-f8q4-g42g","MINI-gj7g-qhx4-25gx","MINI-gj9m-vm85-xxwp","MINI-gjcm-p2hh-h35v","MINI-gpfr-jr9c-h7ww","MINI-gpxm-hgcj-23rx","MINI-gq9f-whr4-4h68","MINI-gvf9-9f79-xm43","MINI-gvx8-whhj-hqp3","MINI-gvx9-v84x-4r4w","MINI-h2r2-chm8-6mg2","MINI-h2rw-hrmc-mvw7","MINI-h3h8-vw7w-9qx2","MINI-h3jx-c6qm-f5r8","MINI-h3r9-rggf-55cv","MINI-h3vf-fhww-x5x6","MINI-h496-mp3m-f43h","MINI-h4jr-wjv5-f798","MINI-h4r5-ff4c-xg5j","MINI-h5fh-c88c-vp93","MINI-h6x5-2gf4-rjh7","MINI-h764-7cvj-hwhj","MINI-h79j-mm27-vcwm","MINI-h7mr-45j8-wghq","MINI-h89g-g4f3-c2jr","MINI-h927-w9mw-3h2c","MINI-h944-ff3f-w589","MINI-hc4h-gh4w-ffrw","MINI-hc63-4f8g-v5w2","MINI-hcr7-rjq5-q7m9","MINI-hf56-gr77-9qmx","MINI-hf7q-jh4c-vfhf","MINI-hfqg-hrw3-3pm3","MINI-hfw5-fhfx-4c44","MINI-hg2m-hw7w-r3m9","MINI-hhrw-f4q6-33pw","MINI-hj5r-hq9j-q755","MINI-hj5w-q689-vw9x","MINI-hjrc-rwcf-pvm6","MINI-hpgv-p4p5-m8fq","MINI-hpv4-6gxr-w55f","MINI-hr33-77vc-gqvm","MINI-hw3g-7v5p-3v56","MINI-hwqj-mm96-p3jq","MINI-hww8-p548-3vh3","MINI-hwxf-4cf3-vrw9","MINI-hwxj-4xq7-5r27","MINI-hx8w-q664-m68q","MINI-hxf5-4m8q-g8p3","MINI-hxhw-p58c-crgc","MINI-j369-3mhp-p5c5","MINI-j3v9-577g-35w5","MINI-j52g-cfm8-c6cj","MINI-j582-7wqj-v9v4","MINI-j585-vxq3-vhmc","MINI-j5gq-w585-w7jg","MINI-j652-p4h7-q23q","MINI-j67m-593h-vq5p","MINI-j67w-gfq5-mxj3","MINI-j68v-rfxp-c3rj","MINI-j6pr-27ff-9q36","MINI-j6w3-6937-gm5x","MINI-j6xw-7p7q-p2xq","MINI-j76r-qjj8-8pvv","MINI-j7wv-xmhq-5cjg","MINI-j874-64p5-93hv","MINI-j976-7hg5-5mfh","MINI-jcm9-767r-r26w","MINI-jcq7-qwx5-f29f","MINI-jf4j-2mhp-rrjj","MINI-jfg6-xxxr-xfg6","MINI-jfq6-mvw7-mcv9","MINI-jg5x-ggwg-3jq8","MINI-jggj-xqg4-7p79","MINI-jh72-v3v3-w38v","MINI-jhf3-vx38-7q7q","MINI-jhh6-xmmr-vj2x","MINI-jjj4-v2xv-9rw6","MINI-jjvc-mq4m-p7wj","MINI-jm37-8hxp-f88j","MINI-jm3f-5r34-86ww","MINI-jmf5-3qfx-x745","MINI-jr84-rgh6-5cj9","MINI-jrgf-cf68-m3wj","MINI-jrhp-5rv5-p9jv","MINI-jrw2-pf7c-75x5","MINI-jv7r-c2xj-8f8q","MINI-jvpf-8xh6-6w6x","MINI-jw5h-695g-fvqv","MINI-jw9g-crq4-86wp","MINI-jx74-qf36-2wq4","MINI-jxc3-9cmx-m792","MINI-jxpr-hgcv-m6xw","MINI-m2hv-rfpg-vcfj","MINI-m3xx-3qvw-4xqm","MINI-m4mg-gg4v-28hf","MINI-m4rh-3cfm-pvfh","MINI-m4vf-67mh-rxh8","MINI-m5qq-7f8p-qg8f","MINI-m6x7-pwrc-25mq","MINI-m6xv-xh78-92vc","MINI-m7x8-fcvh-hc49","MINI-m8g6-7hwc-9qwg","MINI-m928-9jrr-36pg","MINI-m933-955g-vwr5","MINI-m9gx-cm7x-7jfv","MINI-mc33-5mhg-hwwj","MINI-mhch-36j9-5ccj","MINI-mhm7-cgr2-wc8x","MINI-mhmj-hhg9-x2pf","MINI-mhwv-c63c-88vm","MINI-mjxc-2w6g-prhm","MINI-mm2q-xx3p-rw8x","MINI-mmgg-46hx-mx29","MINI-mpvg-pcx7-5gmx","MINI-mqm6-r5x2-q867","MINI-mqqp-xvcc-fj8p","MINI-mrpr-pgf7-wvg3","MINI-mv7j-5x2p-g93p","MINI-mv8g-5j56-qp25","MINI-mv8v-h7fh-chf8","MINI-mvfw-rmvj-q4mq","MINI-mvrv-g3f9-wqgx","MINI-mxv8-53vq-f948","MINI-p279-7jv5-5x49","MINI-p2rf-xj65-97mg","MINI-p36j-46qm-v9j3","MINI-p49c-6fhf-52wm","MINI-p4g7-c373-p66m","MINI-p58w-8mp4-439w","MINI-p6hc-r4jw-p2v9","MINI-p6qj-xm9v-73g6","MINI-p6rr-mxcr-4g5m","MINI-p6vj-q925-f8rp","MINI-p734-5c3j-8pqc","MINI-p74w-vh4h-6x72","MINI-p752-jm3c-795f","MINI-p7v5-894g-q95m","MINI-p8xj-36hm-mhgg","MINI-pc6m-7xvc-56fq","MINI-pc9q-934h-hh42","MINI-pccv-v96j-m7qw","MINI-pf56-3fxh-hchj","MINI-pfgv-qgfv-73h3","MINI-pfp2-22j9-jfmp","MINI-pgcv-2m9c-ggpv","MINI-pggj-796g-hj7c","MINI-ph5w-gxqx-cv4p","MINI-phwm-pfg8-p98p","MINI-pjq5-v66m-64j9","MINI-pmqv-pm32-x3j4","MINI-pq3f-p5fg-684v","MINI-pq6g-6426-mvr5","MINI-pqj6-6xc3-f8p2","MINI-pqmw-f6pq-f8x4","MINI-pr23-347v-cggr","MINI-prgq-fr65-7g53","MINI-pvw9-2r8v-wmp3","MINI-pw4v-jrgw-vrg9","MINI-pw54-5gg4-36gv","MINI-pw7x-m6m4-5mw4","MINI-pw7x-qx8j-754m","MINI-px5c-fxwg-8w4g","MINI-q23g-86m4-jfjc","MINI-q26x-wrc8-322h","MINI-q2jf-frjh-97xj","MINI-q2qq-4v34-35jp","MINI-q3gf-7m76-h3xv","MINI-q3hh-3g8c-78w9","MINI-q3x4-mx8j-fwpc","MINI-q43m-43vf-gfmq","MINI-q45x-h8c3-qjp6","MINI-q47j-6p7f-54xw","MINI-q4rr-hh3g-7wp3","MINI-q5rr-rqf7-rv4q","MINI-q63h-xmrf-72f8","MINI-q6wx-x85w-gp9h","MINI-q7f4-73xj-mp7r","MINI-q7rg-r38w-pwxw","MINI-q82j-889x-wv6p","MINI-q8wx-hx3v-9rj3","MINI-q97w-hx3w-r7p3","MINI-q9v8-vx6p-63vr","MINI-qc64-9p5f-7hjc","MINI-qcfc-6pff-2g5w","MINI-qf59-xg8f-x7p8","MINI-qfwq-h5cj-5gxj","MINI-qg79-63wr-6r5q","MINI-qggm-hccr-pvw6","MINI-qgr7-3w5q-2987","MINI-qgwv-prq5-83v4","MINI-qh6q-7jxv-5cc6","MINI-qhpm-h57v-gwwq","MINI-qj59-38h6-v836","MINI-qjjq-c3rf-2363","MINI-qm4v-75r5-9h34","MINI-qmgx-rhf7-68fx","MINI-qmqh-wr53-jqg2","MINI-qpqv-v4q3-q8vw","MINI-qq6v-3g89-f4v3","MINI-qq8g-8ppq-v9w9","MINI-qqhw-r42h-xw2v","MINI-qqqp-h252-4jr8","MINI-qv3m-pc73-q8hw","MINI-qv43-wxmq-93pj","MINI-qwf5-hc3j-w9c2","MINI-qwvw-cg48-49f4","MINI-qxq6-9wmc-4g4g","MINI-r257-8f5x-8p3j","MINI-r359-vvjc-j36c","MINI-r3f3-qg6f-hf7r","MINI-r3f4-f4xx-wph2","MINI-r3fw-43j8-m9rh","MINI-r439-62fw-2rwm","MINI-r462-v42g-7xpq","MINI-r49p-cjxg-hp86","MINI-r4f3-wmvf-q4v4","MINI-r4hj-4x84-2684","MINI-r4jx-8gj8-4ww3","MINI-r528-j74r-rj76","MINI-r68w-j2j9-7j27","MINI-r6x2-4vv6-jqrg","MINI-r73r-vpqx-x9mf","MINI-r77r-jpg2-87m8","MINI-r93p-8rxc-58gq","MINI-r9c4-wcw7-fjgc","MINI-rc5p-rcxp-66w8","MINI-rccp-9xvc-f4mx","MINI-rcmr-36q8-2vm8","MINI-rf85-r74q-25vh","MINI-rfh9-hhv4-4cpq","MINI-rgxf-f984-8cq7","MINI-rh57-9v75-v3r6","MINI-rj2x-55pm-j3hw","MINI-rjjv-vc2x-37cp","MINI-rjwr-382w-mq29","MINI-rm35-834j-p59f","MINI-rm4f-7q33-m6v4","MINI-rmqm-fmh8-p5gv","MINI-rq4q-wfwc-v4v4","MINI-rq9g-gvv3-rpg5","MINI-rqjw-pf4r-m3cx","MINI-rr27-hhx6-wrg2","MINI-rr37-3ffx-m2pf","MINI-rrpc-qrwf-6q27","MINI-rvrr-2hr9-cm73","MINI-rw5v-45f5-75x6","MINI-rw5w-5q6x-3449","MINI-rwh7-gxgm-767p","MINI-rwjp-6m95-qhp6","MINI-rxv9-r838-h4rm","MINI-v249-pr6h-6jh4","MINI-v478-cghx-8mh4","MINI-v4vf-mp3p-cxxp","MINI-v54g-468h-j4vf","MINI-v66c-h6c9-4cg4","MINI-v66q-p34h-3f84","MINI-v6cc-cjcf-87v7","MINI-v6x5-q3ff-8m4v","MINI-v742-c6f6-5xcr","MINI-v79f-p8xw-hv6v","MINI-v7m6-6cmm-9qpv","MINI-v7x5-jjg2-3v6w","MINI-v8j9-r379-h7mh","MINI-v96r-q9p9-rgqc","MINI-v9gp-mr95-9h95","MINI-v9wg-mfqh-v5p3","MINI-vc23-hhmc-2m9r","MINI-vf55-4wqf-hc84","MINI-vg2w-mm43-f5g8","MINI-vg7h-wv47-p29q","MINI-vgmw-5x2j-37h4","MINI-vhg2-pw89-ppqq","MINI-vj76-q8mh-fwx9","MINI-vj95-p949-rwxg","MINI-vjqq-fghg-jv6q","MINI-vmcc-43f5-cg57","MINI-vmvh-85qh-gc27","MINI-vmvp-c5qv-rpx8","MINI-vp38-pgg2-x4jq","MINI-vp96-w8fj-cw4h","MINI-vpcc-37g9-g34g","MINI-vq2h-3g9p-fmxv","MINI-vq9h-hrxg-mgr7","MINI-vqj5-35v5-hppj","MINI-vr2r-6x49-gp4p","MINI-vrxc-qw88-h57f","MINI-vv8q-5v6w-gx83","MINI-vwcw-6x2p-4g29","MINI-vwrq-chpp-9762","MINI-w232-6xpc-fcfv","MINI-w274-wc24-f445","MINI-w2c2-p355-5pwg","MINI-w2c7-h34p-wvfj","MINI-w358-cgg3-96rj","MINI-w379-7g6j-x5f9","MINI-w3gj-h77q-c92q","MINI-w3x4-qh4w-cq5x","MINI-w44h-gvjc-cf4c","MINI-w4h3-jx3g-vqgc","MINI-w6fv-x2fg-3r8q","MINI-w6rf-xr9r-h3j8","MINI-w6w2-qv78-pmq8","MINI-w76f-fq9h-wgxq","MINI-w787-mfhx-hv92","MINI-w8f2-fmf6-xr3c","MINI-w8jw-2pp3-3q68","MINI-w8w5-4rr6-62h5","MINI-w9rg-4p9f-8386","MINI-w9rg-9rq5-gwwc","MINI-wfjj-84f4-fvh4","MINI-wfjm-qv8h-w57w","MINI-wfx7-p2pp-v4vw","MINI-wgh7-gx8j-c7c8","MINI-wgpx-wp9q-w594","MINI-wh59-qcp3-69w9","MINI-wm6j-f54r-rfw5","MINI-wm9f-g52m-jghp","MINI-wmhx-mq8h-c9wr","MINI-wmqw-x8cc-27p7","MINI-wpmp-933c-4hxw","MINI-wqgq-946x-m8hh","MINI-wqpm-gx7j-xjhg","MINI-wqr8-xm2j-hw8x","MINI-wrc3-cjgp-9p67","MINI-wrch-2628-8p9v","MINI-wrj8-h969-fhgw","MINI-wrx9-hp65-vvqm","MINI-wv83-gg57-7jh3","MINI-wx4m-vrgq-v38g","MINI-wx78-hx3g-mvw3","MINI-wx9w-j7x7-8p2m","MINI-wxqh-f8mp-v6c6","MINI-x276-qxmv-2qh8","MINI-x2h8-rhmr-ff72","MINI-x2q8-g26m-rqc4","MINI-x43v-83vv-5j3p","MINI-x499-27mw-4g89","MINI-x52p-jww9-hx4v","MINI-x66j-mxjm-5422","MINI-x6gm-9p8v-7p3j","MINI-x7jv-c9jh-jg4r","MINI-x7rh-rxjc-9296","MINI-x8qq-4cg8-mhrw","MINI-x9p6-g3vp-fqrv","MINI-xc85-7f79-qw38","MINI-xcmv-526j-w77p","MINI-xcxc-9vfh-f487","MINI-xf47-5h75-x6qc","MINI-xg75-f3fr-45ch","MINI-xgfv-22x5-59gg","MINI-xghq-373q-976w","MINI-xgm7-43cj-qp4g","MINI-xgmr-777h-3894","MINI-xhfr-x7rr-x343","MINI-xhp3-8f2g-pxp2","MINI-xhrm-mc8v-c982","MINI-xhwp-2cpq-6hqr","MINI-xjg7-3q2h-78wx","MINI-xjrq-qp2f-f9wp","MINI-xm65-2gg2-9p5f","MINI-xmfc-wpxv-hr76","MINI-xmhv-24pr-5mh6","MINI-xp5g-m4vc-6292","MINI-xp9p-6rcp-qr22","MINI-xpq2-c56x-r83q","MINI-xprg-232p-3976","MINI-xqqr-jf7j-vp77","MINI-xr47-78v9-4r6j","MINI-xrv7-89qw-cwxf","MINI-xw2h-h4mg-m5gh","MINI-xwf4-w8g8-cxp9","MINI-xww6-4g3h-gmj6","MINI-xx83-gmrx-7337","MINI-xxcf-pr5g-97fx","MINI-xxcr-wqm2-c386","MINI-xxg4-mj29-5fqm","MINI-xxqg-m42q-mqgj","MINI-xxrv-j6rj-jwxv","RHSA-2026:54883","RHSA-2026:57401","UBUNTU-CVE-2026-39820"],"analysis":{"component_type":"library","fix_type":"upgrade","impacts":["denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"Go standard library","requires_auth":"none","summary":"Attackers can cause CPU exhaustion and memory allocation issues in Go applications by sending crafted inputs to net/mail parsing functions.","user_interaction":"not_required","vuln_class":"denial_of_service"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Go","cpe":[{"product":"go","vendor":"golang"}],"cvss":{"score":7.5,"severity":"high","source":"cisa-adp","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"cwes":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling"},{"id":"CWE-606","name":"Unchecked Input for Loop Condition"}],"description":"Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.","ecosystems":["Bitnami","Go","Red Hat:openshift:4.19::el9"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Quadratic string concatentation in consumeComment in net/mail","id":"CVE-2026-39820","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"Bitnami","product":"golang:go","products":["golang:go"],"type":"denial_of_service","year":"2026"},"n_packages":18,"n_references":4,"next":{"headline":"Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna","id":"CVE-2026-39821"},"packages":[{"ecosystem":"Bitnami","fixed":["1.25.10","1.26.3"],"introduced":["0","1.26.0-0"],"last_affected":[],"package":"golang","purl":"pkg:bitnami/golang","source":"BIT-golang-2026-39820"},{"ecosystem":"Go","fixed":["1.25.10","1.26.3"],"introduced":["0","1.26.0-0"],"last_affected":[],"package":"stdlib","purl":"pkg:golang/stdlib","source":"GO-2026-4986"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:3.31.0-5.rhaos4.19.el9"],"introduced":["0"],"last_affected":[],"package":"kata-containers","purl":"pkg:rpm/redhat/kata-containers","source":"RHSA-2026:57401"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift","purl":"pkg:rpm/redhat/microshift","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-ai-model-serving","purl":"pkg:rpm/redhat/microshift-ai-model-serving","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-ai-model-serving-release-info","purl":"pkg:rpm/redhat/microshift-ai-model-serving-release-info","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-gateway-api","purl":"pkg:rpm/redhat/microshift-gateway-api","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-gateway-api-release-info","purl":"pkg:rpm/redhat/microshift-gateway-api-release-info","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-greenboot","purl":"pkg:rpm/redhat/microshift-greenboot","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-low-latency","purl":"pkg:rpm/redhat/microshift-low-latency","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-multus","purl":"pkg:rpm/redhat/microshift-multus","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-multus-release-info","purl":"pkg:rpm/redhat/microshift-multus-release-info","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-networking","purl":"pkg:rpm/redhat/microshift-networking","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-observability","purl":"pkg:rpm/redhat/microshift-observability","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-olm","purl":"pkg:rpm/redhat/microshift-olm","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-olm-release-info","purl":"pkg:rpm/redhat/microshift-olm-release-info","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-release-info","purl":"pkg:rpm/redhat/microshift-release-info","source":"RHSA-2026:54883"},{"ecosystem":"Red Hat:openshift:4.19::el9","fixed":["0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9"],"introduced":["0"],"last_affected":[],"package":"microshift-selinux","purl":"pkg:rpm/redhat/microshift-selinux","source":"RHSA-2026:54883"}],"prev":{"headline":"Invoking \"go bug\" follows symlinks in predictable temporary filenames in cmd/go","id":"CVE-2026-39819"},"products":["net/mail"],"published":"2026-05-07","related":[{"cvss_score":8.1,"headline":"Microsoft Windows CryptoAPI Spoofing","id":"CVE-2020-0601","kev_date_added":"2021-11-03","published":"2020-01-14"},{"cvss_score":9.8,"headline":"Missing bound checks can lead to memory corruption in safe Go in cmd/compile","id":"CVE-2026-27143","kev_date_added":null,"published":"2026-04-08"},{"cvss_score":9.8,"headline":"Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip","id":"CVE-2024-24790","kev_date_added":null,"published":"2024-06-05"},{"cvss_score":9.8,"headline":"Arbitrary code execution via go.mod toolchain directive in cmd/go","id":"CVE-2023-39320","kev_date_added":null,"published":"2023-09-08"},{"cvss_score":9.8,"headline":"Improper handling of JavaScript whitespace in html/template","id":"CVE-2023-24540","kev_date_added":null,"published":"2023-05-11"},{"cvss_score":9.8,"headline":"Backticks not treated as string delimiters in html/template","id":"CVE-2023-24538","kev_date_added":null,"published":"2023-04-06"},{"cvss_score":9.8,"headline":"Other in go/golang","id":"CVE-2012-2666","kev_date_added":null,"published":"2021-07-09"}],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"Bitnami","prefix":"BIT"},{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"Go Vulnerability Database","prefix":"GO"},{"class":"attribution","licence":"CC BY 4.0","name":"Red Hat","prefix":"RHSA"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-09-18","vendors":["Go standard library"]},"summary":"Attackers can cause CPU exhaustion and memory allocation issues in Go applications by sending crafted inputs to net/mail parsing functions.","url":"https://insights.sbomify.com/CVE-2026-39820/"}