CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, aws-s3-controller, kafka-proxy, configmap-reload, timescaledb-tune, sftpgo-plugin-pubsub, promxy, ini-file, kubernetes-ingress-defaultbackend, kubernetes-event-exporter, dgraph, kube-state-metrics, falco-exporter, sftpgo-plugin-auth,...

CVE-2026-27140

CVE-2026-27140 is disclosed across multiple sources as a trust-layer bypass in Go toolchain when using cgo with SWIG, enabling potential code execution at build time. SUSE advisories for openSUSE Leap 16.0 (go1.25.9) and go1.26.2 fix this, with patches listed as CVE-2026-27140 in the SUSE advisor...