45 matches found
CLEANSTART-2026-WG30440 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
CLEANSTART-2026-OQ60440 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
CLEANSTART-2026-SQ71978 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
CLEANSTART-2026-IY63295 malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go ...
Security vulnerability affects the kubernetes package. A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache...
CLEANSTART-2026-TI58218 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Security vulnerability affects the kubernetes package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
CLEANSTART-2026-VA45937 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Security vulnerability affects the kyverno package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
CLEANSTART-2026-WP85134 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Security vulnerability affects the atlantis package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
PT-2026-134751
Security vulnerability affects the atlantis package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
Unity Linux 20.1070e Security Update: golang (UTSA-2026-130379)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130379 advisory. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and...
CLEANSTART-2026-OF55498 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Security vulnerability affects the wave package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
PT-2026-122338
Security vulnerability affects the wave package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
Security Bulletin: Security vulnerability in Golang affects IBM Robotic Process Automation for Cloud Pak
Summary A security vulnerability in Golang affects IBM Robotic Process Automation. Golang is used by IBM Robotic Process Automation as part of its deployment. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2026-56864 DESCRIPTION: A...
CLEANSTART-2026-BH69902 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Security vulnerability affects the syft package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
CLEANSTART-2026-ZT93395 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
CLEANSTART-2026-FZ80823 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
CLEANSTART-2026-TO10251 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Security vulnerability affects the minio-operator package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
CLEANSTART-2026-QU13613 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
CLEANSTART-2026-KO31881 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Multiple security vulnerabilities affect the dex package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
BIT-GOLANG-2026-56864 Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb
A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...
OPENSUSE-SU-2026:21593-1 Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.6 released 2026-08-13, bsc1255111. Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive structures bsc1275034. - CVE-2026-39821:...