golang.org/x/text (Go)
Advisories
9
Latest version
v0.43.0
Released Oct 9, 2026
License
BSD-3-Clause
OpenSSF Scorecard
—
How to fix
Upgrading to 0.41.0 or later clears every advisory below that has a fix.
Upgrade commands
go
go get golang.org/x/text@v0.43.0 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GO-2026-6629 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text |
High EPSS 0.47% |
< 0.41.0 | 0.41.0 |
| GO-2026-5970 Infinite loop on invalid input in golang.org/x/text |
High EPSS 0.47% |
< 0.39.0 | 0.39.0 |
| GHSA-69ch-w2m2-3vjp golang.org/x/text/language Denial of service via crafted Accept-Language header |
High EPSS 1.84% |
< 0.3.8 | 0.3.8 |
| GHSA-69ch-w2m2-3vjp golang.org/x/text/language Denial of service via crafted Accept-Language header |
High EPSS 1.84% |
< 0.3.8 | 0.3.8 |
| GHSA-69ch-w2m2-3vjp golang.org/x/text/language Denial of service via crafted Accept-Language header |
High EPSS 1.84% |
< 0.3.8 | 0.3.8 |
| GHSA-ppp9-7jff-5vj2 golang.org/x/text/language Out-of-bounds Read vulnerability |
High EPSS 1.48% |
< 0.3.7 | 0.3.7 |
| GHSA-ppp9-7jff-5vj2 golang.org/x/text/language Out-of-bounds Read vulnerability |
High EPSS 1.48% |
< 0.3.7 | 0.3.7 |
| GHSA-5rcv-m4m3-hfh7 golang.org/x/text Infinite loop |
High EPSS 1.84% |
< 0.3.3 | 0.3.3 |
| GHSA-5rcv-m4m3-hfh7 golang.org/x/text Infinite loop |
High EPSS 1.84% |
< 0.3.3 | 0.3.3 |
Source: https://go.googlesource.com/text
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor