CyberSecBulletin

Vlang vulnerabilities

We track 2 vulnerabilities in Vlang products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.

2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score

Latest Vlang vulnerabilities

  • 7.4 High severity

    v: Improper Certificate Validation

    CVE-2026-82509Vlang

    V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation bypass vulnerability that allows on-path attackers to intercept HTTPS traffic by exploiting the default false value of SSLConne

  • 8.6 High severity

    v: Interpretation Conflict

    CVE-2026-67201Vlang

    V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting a parser differential between net.urllib and net.http. Attackers can craft a UR