CVE-2026-33811

Published: May 7, 2026

Modified: May 8, 2026

PUBLISHED

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Vendor	Product	Versions
Go standard library	net	affected `0 - < 1.25.10` affected `1.26.0-0 - < 1.26.3`

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.