CVE-2026-56851: Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
Published Oct 7, 2026
·Updated
Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
Other sources
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
— MITRE
Affected Software
2 affected componentsFixes available
go/golang.org/x/text
Microsoft azl3 keda 2.14.1-19<2.14.1-19
2.14.1-19
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.14.1-19
Event History
Oct 7, 2026
CVE Published
via MITRE·05:46 PM
Data Sourced
via MITRE·05:46 PM
DescriptionWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Oct 11, 2026
Data Sourced
via Microsoft·08:59 AM
DescriptionSeverityWeaknessAffected Software