Количество 15
Количество 15
CVE-2026-94444
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and construct its entry in the GOMODCACHE such that it can be verified by the toolchain.
CVE-2026-94444
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and construct its entry in the GOMODCACHE such that it can be verified by the toolchain.
CVE-2026-94444
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and construct its entry in the GOMODCACHE such that it can be verified by the toolchain.
CVE-2026-94444
Checksum bypass for golang.org/fips140 in cmd/go
CVE-2026-94444
Previously, a user operating inside of a malicious Go project that def ...
GHSA-2f4j-3hgj-v9j7
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and construct its entry in the GOMODCACHE such that it can be verified by the toolchain.
openSUSE-SU-2026:22095-1
Security update for go1.26
SUSE-SU-2026:4629-1
Security update for go1.26
openSUSE-SU-2026:22093-1
Security update for go1.27
SUSE-SU-2026:4625-1
Security update for go1.27
RLSA-2026:86203
Important: go-toolset:rhel8 security, bug fix, and enhancement update
RLSA-2026:86196
Important: golang security, bug fix, and enhancement update
RLSA-2026:86093
Important: golang security, bug fix, and enhancement update
SUSE-SU-2026:4867-1
Security update for go1.26-openssl
SUSE-SU-2026:4866-1
Security update for go1.26-openssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-94444 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and construct its entry in the GOMODCACHE such that it can be verified by the toolchain. | CVSS3: 7.8 | 0% Низкий | 18 дней назад |
 | CVE-2026-94444 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and construct its entry in the GOMODCACHE such that it can be verified by the toolchain. | CVSS3: 6.7 | 0% Низкий | 18 дней назад |
 | CVE-2026-94444 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and construct its entry in the GOMODCACHE such that it can be verified by the toolchain. | CVSS3: 7.8 | 0% Низкий | 18 дней назад |
 | CVE-2026-94444 Checksum bypass for golang.org/fips140 in cmd/go | CVSS3: 7.8 | 0% Низкий | 16 дней назад |
| CVE-2026-94444 Previously, a user operating inside of a malicious Go project that def ... | CVSS3: 7.8 | 0% Низкий | 18 дней назад |
| GHSA-2f4j-3hgj-v9j7 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and construct its entry in the GOMODCACHE such that it can be verified by the toolchain. | CVSS3: 7.8 | 0% Низкий | 18 дней назад |
 | openSUSE-SU-2026:22095-1 Security update for go1.26 | 13 дней назад | ||
| SUSE-SU-2026:4629-1 Security update for go1.26 | 14 дней назад | ||
| openSUSE-SU-2026:22093-1 Security update for go1.27 | 13 дней назад | ||
| SUSE-SU-2026:4625-1 Security update for go1.27 | 15 дней назад | ||
 | RLSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update | 6 дней назад | ||
| RLSA-2026:86196 Important: golang security, bug fix, and enhancement update | 5 дней назад | ||
| RLSA-2026:86093 Important: golang security, bug fix, and enhancement update | 5 дней назад | ||
| SUSE-SU-2026:4867-1 Security update for go1.26-openssl | 4 дня назад | ||
| SUSE-SU-2026:4866-1 Security update for go1.26-openssl | 4 дня назад |
Уязвимостей на страницу