HIGH7.5
GO-2026-4981
Crash when handling long CNAME response in net
Quick fix
GO-2026-4981 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.25.10Details
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Are you affected?
Enter the version of the package you're using.