{"schema_version":"1.8.0","id":"GO-2026-5970","published":"2026-07-14T17:29:56Z","modified":"2026-08-14T10:42:20.494473428Z","aliases":["CVE-2026-56852"],"related":["CGA-jjqc-qfr4-frh9","RHSA-2026:40964","RHSA-2026:41020","RHSA-2026:42083","RHSA-2026:42230","RHSA-2026:42241","RHSA-2026:43015","RHSA-2026:43119","RHSA-2026:43311","RHSA-2026:43554","RHSA-2026:43581","RHSA-2026:43716","RHSA-2026:43797","RHSA-2026:43799","RHSA-2026:43801","RHSA-2026:43803","RHSA-2026:43852","RHSA-2026:43866","RHSA-2026:43873","RHSA-2026:43906","RHSA-2026:44151","RHSA-2026:44152","RHSA-2026:44162","RHSA-2026:44430","RHSA-2026:44451","RHSA-2026:44479","RHSA-2026:46953","RHSA-2026:46960","RHSA-2026:46988","RHSA-2026:48306","RHSA-2026:49317","RHSA-2026:49360","RHSA-2026:51065","RHSA-2026:52912","RHSA-2026:54364","RHSA-2026:54549"],"summary":"Infinite loop on invalid input in golang.org/x/text","details":"A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.","affected":[{"package":{"name":"golang.org/x/text","ecosystem":"Go","purl":"pkg:golang/golang.org/x/text"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.39.0"}]}],"ecosystem_specific":{"imports":[{"path":"golang.org/x/text/unicode/norm","symbols":["Form.Append","Form.AppendString","Form.Bytes","Form.FirstBoundary","Form.FirstBoundaryInString","Form.IsNormal","Form.IsNormalString","Form.LastBoundary","Form.NextBoundary","Form.NextBoundaryInString","Form.Properties","Form.PropertiesString","Form.QuickSpan","Form.QuickSpanString","Form.Span","Form.SpanString","Form.String","Form.Transform","Iter.Init","Iter.InitString","Iter.Next","Iter.Seek","nextComposed","normReader.Read","normWriter.Write"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-5970.json"}}],"references":[{"type":"REPORT","url":"https://go.dev/issue/80142"},{"type":"FIX","url":"https://go.dev/cl/794100"}],"database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2026-5970"},"credits":[{"name":"Viky Choi (\"vikychoi\" on GitHub)"}]}