p PatchFirst

PatchFirst · Latest vulnerabilities

go1.26 vulnerabilities

Vulnerabilities published for go1.26 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. SUSE-SU-2026:0876-1

    Not ratedFix available

    Security update for go1.26

    This update for go1.26 fixes the following issues: Update to go1.26.1 (bsc#1255111): - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints (bsc#1259266). - CVE-2026-27138: crypto/x509: panic in name constraint checking for malformed certificates (bsc#1259267). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-27142: html/template: URLs in meta content attribute actions are not escaped (bsc#1259265). Changelog: * go#77252 cmd/compile: miscompile of global array initialization * go#77407 os: Go 1.25.x regressi

    go1.26Operating systems
    • Update to 1.26.1-150000.1.6.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →