CVE-2026-56865

The CVE-2026-56865 issue affects the Go module sumdb/tlog mechanism, where a malicious GOPROXY could forge up to two sumdb tiles, bypass the GOSUMDB check, and persist attacker-controlled module content to a local Go module cache. The consequence is the risk of serving malicious module content th...