A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
PoC: golang-x-text
golang.org/x/text v0.33.0 backport of CVE-2026-56852 (GO-2026-5970) for Go 1.24
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.