AZL-79610 CVE-2026-27138 affecting package golang for versions less than 1.25.8-1

🗓️ 06 Mar 2026 22:16:00Reported by GoogleType

osv🔗 osv.dev👁 17 Views

AZL-79610 CVE-2026-27138: golang 1.25.7-1 panics on empty domain name with excluded name constraints.

Reporter	Title	Published	Views	Family All 683
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and IntegrationRuntime & IntegrationServer operands are vulnerable to loss of confidentiality (CVE-2026-27137) and denial of service (CVE-2026-27138)	1 May 202616:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	26 May 202606:03	–	ibm
ATTACKERKB	CVE-2026-27138	6 Mar 202621:28	–	attackerkb
AlpineLinux	CVE-2026-27138	6 Mar 202621:28	–	alpinelinux
BDU FSTEC	The vulnerability of the Go programming language, related to errors in the certificate validation process, allows a perpetrator to cause service failures.	27 Mar 202600:00	–	bdu_fstec
CBLMariner	CVE-2026-27138 affecting package golang for versions less than 1.25.8-1	13 Mar 202619:01	–	cbl_mariner
CBLMariner	CVE-2026-27138 affecting package golang for versions less than 1.26.1-1	13 Mar 202619:01	–	cbl_mariner
Chainguard	CVE-2026-27138 vulnerabilities	10 Mar 202619:18	–	cgr
Circl	CVE-2026-27138	6 Mar 202601:19	–	circl
CNNVD	Google Go 安全漏洞	6 Mar 202600:00	–	cnnvd