{"schema_version":"1.3.1","id":"GO-2026-5970","modified":"2026-08-10T22:42:36Z","published":"2026-07-14T17:29:56Z","aliases":["CVE-2026-56852"],"summary":"Infinite loop on invalid input in golang.org/x/text","details":"A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.","affected":[{"package":{"name":"golang.org/x/text","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.39.0"}]}],"ecosystem_specific":{"imports":[{"path":"golang.org/x/text/unicode/norm","symbols":["Form.Append","Form.AppendString","Form.Bytes","Form.FirstBoundary","Form.FirstBoundaryInString","Form.IsNormal","Form.IsNormalString","Form.LastBoundary","Form.NextBoundary","Form.NextBoundaryInString","Form.Properties","Form.PropertiesString","Form.QuickSpan","Form.QuickSpanString","Form.Span","Form.SpanString","Form.String","Form.Transform","Iter.Init","Iter.InitString","Iter.Next","Iter.Seek","nextComposed","normReader.Read","normWriter.Write"]}]}}],"references":[{"type":"REPORT","url":"https://go.dev/issue/80142"},{"type":"FIX","url":"https://go.dev/cl/794100"}],"credits":[{"name":"Viky Choi (\"vikychoi\" on GitHub)"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2026-5970","review_status":"REVIEWED"}}