{"id":"CVE-2026-56852","revision":"33acdfe79ae84885afc87a1b77618ccb","records":[{"revision":"33acdfe79ae84885afc87a1b77618ccb","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-56852","aliases":[],"title":"Infinite loop on invalid input in golang.org/x/text","description":"A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.","state":0,"publishedAt":"2026-07-21T19:18:59.951+00:00","modifiedAt":"2026-08-10T22:57:54.703+00:00","affected":[{"ecosystem":"https://pkg.go.dev","name":"golang.org/x/text/unicode/norm","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"golang.org/x/text\",\n                    \"product\": \"golang.org/x/text/unicode/norm\",\n                    \"collectionURL\": \"https://pkg.go.dev\",\n                    \"packageName\": \"golang.org/x/text/unicode/norm\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"0.39.0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"nextComposed\"\n                        },\n                        {\n                            \"name\": \"Form.Append\"\n                        },\n                        {\n                            \"name\": \"Form.AppendString\"\n                        },\n                        {\n                            \"name\": \"Form.Bytes\"\n                        },\n                        {\n                            \"name\": \"Form.FirstBoundary\"\n                        },\n                        {\n                            \"name\": \"Form.FirstBoundaryInString\"\n                        },\n                        {\n                            \"name\": \"Form.IsNormal\"\n                        },\n                        {\n                            \"name\": \"Form.IsNormalString\"\n                        },\n                        {\n                            \"name\": \"Form.LastBoundary\"\n                        },\n                        {\n                            \"name\": \"Form.NextBoundary\"\n                        },\n                        {\n                            \"name\": \"Form.NextBoundaryInString\"\n                        },\n                        {\n                            \"name\": \"Form.Properties\"\n                        },\n                        {\n                            \"name\": \"Form.PropertiesString\"\n                        },\n                        {\n                            \"name\": \"Form.QuickSpan\"\n                        },\n                        {\n                            \"name\": \"Form.QuickSpanString\"\n                        },\n                        {\n                            \"name\": \"Form.Span\"\n                        },\n                        {\n                            \"name\": \"Form.SpanString\"\n                        },\n                        {\n                            \"name\": \"Form.String\"\n                        },\n                        {\n                            \"name\": \"Form.Transform\"\n                        },\n                        {\n                            \"name\": \"Iter.Init\"\n                        },\n                        {\n                            \"name\": \"Iter.InitString\"\n                        },\n                        {\n                            \"name\": \"Iter.Next\"\n                        },\n                        {\n                            \"name\": \"Iter.Seek\"\n                        },\n                        {\n                            \"name\": \"normReader.Read\"\n                        },\n                        {\n                            \"name\": \"normWriter.Write\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://go.dev/issue/80142","https://go.dev/cl/794100","https://pkg.go.dev/vuln/GO-2026-5970"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-56852","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-56852","identifiers":["CVE-2026-56852"]},"retained":false,"historicalAffected":[]}],"coverage":[]}