{"id":"GO-2026-6629","summary":"Panic parsing crafted input in x/text/secure/precis in golang.org/x/text","details":"The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.","aliases":["CVE-2026-56851"],"modified":"2026-10-07T17:45:13.919634270Z","published":"2026-10-07T14:09:43Z","database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2026-6629"},"references":[{"type":"FIX","url":"https://go.dev/cl/793360"},{"type":"REPORT","url":"https://go.dev/issue/80112"}],"affected":[{"package":{"name":"golang.org/x/text","ecosystem":"Go","purl":"pkg:golang/golang.org/x/text"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.41.0"}]}],"ecosystem_specific":{"imports":[{"symbols":["Profile.Append","Profile.AppendCompareKey","Profile.Bytes","Profile.Compare","Profile.CompareKey","Profile.NewTransformer","Profile.String","Transformer.Bytes","Transformer.String","Transformer.Transform","nickAdditionalMapping.Transform"],"path":"golang.org/x/text/secure/precis"}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-6629.json"}}],"schema_version":"1.9.0","credits":[{"name":"Omkhar Arasaratnam (GitHub: omkhar)"}]}