Threats affecting pkg:golang/golang.org/x/text

CVE-2026-56851 is a denial of service vulnerability in the golang.org/x/text library's Nickname profile. An attacker can cause an application panic and crash by submitting specially crafted input that triggers an out-of-bounds slice indexing error when transforming text into an undersized buffer. This affects applications using the Nickname profile for string normalization or validation with small memory buffers. The vulnerability has been rated as important severity due to the potential for remote unauthenticated attackers to cause service disruption.