Количество 15
Количество 15
CVE-2026-94447
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.
CVE-2026-94447
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.
CVE-2026-94447
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.
CVE-2026-94447
Checksum database bypass for golang.org/toolchain in cmd/go
CVE-2026-94447
Previously, a user operating inside of a malicious Go project that def ...
GHSA-cgx4-3g64-rvr7
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.
openSUSE-SU-2026:22095-1
Security update for go1.26
SUSE-SU-2026:4629-1
Security update for go1.26
openSUSE-SU-2026:22093-1
Security update for go1.27
SUSE-SU-2026:4625-1
Security update for go1.27
RLSA-2026:86203
Important: go-toolset:rhel8 security, bug fix, and enhancement update
RLSA-2026:86196
Important: golang security, bug fix, and enhancement update
RLSA-2026:86093
Important: golang security, bug fix, and enhancement update
SUSE-SU-2026:4867-1
Security update for go1.26-openssl
SUSE-SU-2026:4866-1
Security update for go1.26-openssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-94447 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum. | CVSS3: 7.8 | 0% Низкий | 18 дней назад |
 | CVE-2026-94447 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum. | CVSS3: 6.7 | 0% Низкий | 18 дней назад |
 | CVE-2026-94447 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum. | CVSS3: 7.8 | 0% Низкий | 18 дней назад |
 | CVE-2026-94447 Checksum database bypass for golang.org/toolchain in cmd/go | CVSS3: 7 | 0% Низкий | 16 дней назад |
| CVE-2026-94447 Previously, a user operating inside of a malicious Go project that def ... | CVSS3: 7.8 | 0% Низкий | 18 дней назад |
| GHSA-cgx4-3g64-rvr7 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum. | CVSS3: 7.8 | 0% Низкий | 18 дней назад |
 | openSUSE-SU-2026:22095-1 Security update for go1.26 | 13 дней назад | ||
| SUSE-SU-2026:4629-1 Security update for go1.26 | 14 дней назад | ||
| openSUSE-SU-2026:22093-1 Security update for go1.27 | 13 дней назад | ||
| SUSE-SU-2026:4625-1 Security update for go1.27 | 15 дней назад | ||
 | RLSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update | 6 дней назад | ||
| RLSA-2026:86196 Important: golang security, bug fix, and enhancement update | 5 дней назад | ||
| RLSA-2026:86093 Important: golang security, bug fix, and enhancement update | 5 дней назад | ||
| SUSE-SU-2026:4867-1 Security update for go1.26-openssl | 4 дня назад | ||
| SUSE-SU-2026:4866-1 Security update for go1.26-openssl | 4 дня назад |
Уязвимостей на страницу