ghcr.io/cyclonedx/cdxgen:master (alma 10.1)

Trivy Image Scan

• Image: ghcr.io/cyclonedx/cdxgen:master (alma 10.1)
• Scan date: 2026-04-24

ghcr.io/cyclonedx/cdxgen:master (alma 10.1) (alma)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
capstone	CVE-2025-67873	HIGH	5.0.1-6.el10	5.0.1-7.el10_1	https://access.redhat.com/errata/RHSA-2026:4898 https://access.redhat.com/security/cve/CVE-2025-67873 https://bugzilla.redhat.com/2423416 https://bugzilla.redhat.com/2423419 https://bugzilla.redhat.com/show_bug.cgi?id=2423416 https://bugzilla.redhat.com/show_bug.cgi?id=2423419 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67873 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68114 https://errata.almalinux.org/9/ALSA-2026-4898.html https://errata.rockylinux.org/RLSA-2026:4898 https://github.com/capstone-engine/capstone/commit/cbef767ab33b82166d263895f24084b75b316df3 https://github.com/capstone-engine/capstone/security/advisories/GHSA-hj6g-v545-v7jg https://linux.oracle.com/cve/CVE-2025-67873.html https://linux.oracle.com/errata/ELSA-2026-6817.html https://nvd.nist.gov/vuln/detail/CVE-2025-67873 https://www.cve.org/CVERecord?id=CVE-2025-67873
capstone	CVE-2025-68114	HIGH	5.0.1-6.el10	5.0.1-7.el10_1	https://access.redhat.com/errata/RHSA-2026:4898 https://access.redhat.com/security/cve/CVE-2025-68114 https://bugzilla.redhat.com/2423416 https://bugzilla.redhat.com/2423419 https://bugzilla.redhat.com/show_bug.cgi?id=2423416 https://bugzilla.redhat.com/show_bug.cgi?id=2423419 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67873 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68114 https://errata.almalinux.org/9/ALSA-2026-4898.html https://errata.rockylinux.org/RLSA-2026:4898 https://github.com/capstone-engine/capstone/commit/2c7797182a1618be12017d7d41e0b6581d5d529e https://github.com/capstone-engine/capstone/security/advisories/GHSA-85f5-6xr3-q76r https://linux.oracle.com/cve/CVE-2025-68114.html https://linux.oracle.com/errata/ELSA-2026-6817.html https://nvd.nist.gov/vuln/detail/CVE-2025-68114 https://www.cve.org/CVERecord?id=CVE-2025-68114
kernel-headers	CVE-2025-38109	MEDIUM	6.12.0-124.47.1.el10_1	6.12.0-124.49.1.el10_1	https://access.redhat.com/errata/RHSA-2026:6570 https://access.redhat.com/security/cve/CVE-2025-38109 https://bugzilla.redhat.com/2376101 https://bugzilla.redhat.com/2439687 https://bugzilla.redhat.com/2439895 https://bugzilla.redhat.com/2444376 https://bugzilla.redhat.com/show_bug.cgi?id=2376101 https://bugzilla.redhat.com/show_bug.cgi?id=2439687 https://bugzilla.redhat.com/show_bug.cgi?id=2439895 https://bugzilla.redhat.com/show_bug.cgi?id=2444376 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38109 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23210 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23231 https://errata.almalinux.org/9/ALSA-2026-6570.html https://errata.rockylinux.org/RLSA-2026:6570 https://git.kernel.org/linus/687560d8a9a2d654829ad0da1ec24242f1de711d (6.16-rc2) https://git.kernel.org/stable/c/24db585d369f949f698e03d7d8017e5ae19d0497 https://git.kernel.org/stable/c/5953ae44dfe5dbad374318875be834c3b7b71ee6 https://git.kernel.org/stable/c/687560d8a9a2d654829ad0da1ec24242f1de711d https://git.kernel.org/stable/c/da15ca0553325acf68039015f2f4db750c8e2b96 https://linux.oracle.com/cve/CVE-2025-38109.html https://linux.oracle.com/errata/ELSA-2026-6632.html https://lore.kernel.org/linux-cve-announce/2025070323-CVE-2025-38109-f925@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2025-38109 https://ubuntu.com/security/notices/USN-7769-1 https://ubuntu.com/security/notices/USN-7769-2 https://ubuntu.com/security/notices/USN-7769-3 https://ubuntu.com/security/notices/USN-7770-1 https://ubuntu.com/security/notices/USN-7771-1 https://ubuntu.com/security/notices/USN-7789-1 https://ubuntu.com/security/notices/USN-7789-2 https://ubuntu.com/security/notices/USN-8028-1 https://ubuntu.com/security/notices/USN-8028-2 https://ubuntu.com/security/notices/USN-8028-3 https://ubuntu.com/security/notices/USN-8028-4 https://ubuntu.com/security/notices/USN-8028-5 https://ubuntu.com/security/notices/USN-8028-6 https://ubuntu.com/security/notices/USN-8028-7 https://ubuntu.com/security/notices/USN-8028-8 https://ubuntu.com/security/notices/USN-8031-1 https://ubuntu.com/security/notices/USN-8031-2 https://ubuntu.com/security/notices/USN-8031-3 https://ubuntu.com/security/notices/USN-8052-1 https://ubuntu.com/security/notices/USN-8052-2 https://ubuntu.com/security/notices/USN-8074-1 https://ubuntu.com/security/notices/USN-8074-2 https://ubuntu.com/security/notices/USN-8126-1 https://www.cve.org/CVERecord?id=CVE-2025-38109
kernel-headers	CVE-2026-23144	MEDIUM	6.12.0-124.47.1.el10_1	6.12.0-124.49.1.el10_1	https://access.redhat.com/errata/RHSA-2026:6153 https://access.redhat.com/security/cve/CVE-2026-23144 https://bugzilla.redhat.com/2376376 https://bugzilla.redhat.com/2407333 https://bugzilla.redhat.com/2439872 https://bugzilla.redhat.com/2439886 https://bugzilla.redhat.com/2439887 https://bugzilla.redhat.com/2439900 https://bugzilla.redhat.com/2439931 https://bugzilla.redhat.com/2439947 https://bugzilla.redhat.com/show_bug.cgi?id=2376376 https://bugzilla.redhat.com/show_bug.cgi?id=2407333 https://bugzilla.redhat.com/show_bug.cgi?id=2439872 https://bugzilla.redhat.com/show_bug.cgi?id=2439886 https://bugzilla.redhat.com/show_bug.cgi?id=2439887 https://bugzilla.redhat.com/show_bug.cgi?id=2439900 https://bugzilla.redhat.com/show_bug.cgi?id=2439931 https://bugzilla.redhat.com/show_bug.cgi?id=2439947 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40096 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23144 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23171 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23191 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23193 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23204 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23209 https://errata.almalinux.org/9/ALSA-2026-6153.html https://errata.rockylinux.org/RLSA-2026:6153 https://git.kernel.org/linus/9814cc832b88bd040fc2a1817c2b5469d0f7e862 (6.19-rc6) https://git.kernel.org/stable/c/43964644348f6b1add3055c4a6cae8f77d892a6e https://git.kernel.org/stable/c/5651c0c391c0029541794f9c4c9597faecfd401f https://git.kernel.org/stable/c/78b4eb99751ebd37ceade78810bf94de80f7fb3a https://git.kernel.org/stable/c/9814cc832b88bd040fc2a1817c2b5469d0f7e862 https://git.kernel.org/stable/c/db7dfe78fc81bdd2b532d77f340fe453f2360426 https://linux.oracle.com/cve/CVE-2026-23144.html https://linux.oracle.com/errata/ELSA-2026-6632.html https://lore.kernel.org/linux-cve-announce/2026021417-CVE-2026-23144-297b@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-23144 https://www.cve.org/CVERecord?id=CVE-2026-23144
kernel-headers	CVE-2026-23171	MEDIUM	6.12.0-124.47.1.el10_1	6.12.0-124.49.1.el10_1	https://access.redhat.com/errata/RHSA-2026:6153 https://access.redhat.com/security/cve/CVE-2026-23171 https://bugzilla.redhat.com/2376376 https://bugzilla.redhat.com/2407333 https://bugzilla.redhat.com/2439872 https://bugzilla.redhat.com/2439886 https://bugzilla.redhat.com/2439887 https://bugzilla.redhat.com/2439900 https://bugzilla.redhat.com/2439931 https://bugzilla.redhat.com/2439947 https://bugzilla.redhat.com/show_bug.cgi?id=2376376 https://bugzilla.redhat.com/show_bug.cgi?id=2407333 https://bugzilla.redhat.com/show_bug.cgi?id=2439872 https://bugzilla.redhat.com/show_bug.cgi?id=2439886 https://bugzilla.redhat.com/show_bug.cgi?id=2439887 https://bugzilla.redhat.com/show_bug.cgi?id=2439900 https://bugzilla.redhat.com/show_bug.cgi?id=2439931 https://bugzilla.redhat.com/show_bug.cgi?id=2439947 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40096 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23144 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23171 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23191 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23193 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23204 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23209 https://errata.almalinux.org/9/ALSA-2026-6153.html https://errata.rockylinux.org/RLSA-2026:6153 https://git.kernel.org/linus/e9acda52fd2ee0cdca332f996da7a95c5fd25294 (6.19-rc8) https://git.kernel.org/stable/c/bd25b092a06a3e05f7e8bd6da6fa7318777d8c3d https://git.kernel.org/stable/c/e9acda52fd2ee0cdca332f996da7a95c5fd25294 https://linux.oracle.com/cve/CVE-2026-23171.html https://linux.oracle.com/errata/ELSA-2026-6632.html https://lore.kernel.org/linux-cve-announce/2026021421-CVE-2026-23171-5a73@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-23171 https://www.cve.org/CVERecord?id=CVE-2026-23171
kernel-headers	CVE-2026-23191	MEDIUM	6.12.0-124.47.1.el10_1	6.12.0-124.49.1.el10_1	https://access.redhat.com/errata/RHSA-2026:6153 https://access.redhat.com/security/cve/CVE-2026-23191 https://bugzilla.redhat.com/2376376 https://bugzilla.redhat.com/2407333 https://bugzilla.redhat.com/2439872 https://bugzilla.redhat.com/2439886 https://bugzilla.redhat.com/2439887 https://bugzilla.redhat.com/2439900 https://bugzilla.redhat.com/2439931 https://bugzilla.redhat.com/2439947 https://bugzilla.redhat.com/show_bug.cgi?id=2376376 https://bugzilla.redhat.com/show_bug.cgi?id=2407333 https://bugzilla.redhat.com/show_bug.cgi?id=2439872 https://bugzilla.redhat.com/show_bug.cgi?id=2439886 https://bugzilla.redhat.com/show_bug.cgi?id=2439887 https://bugzilla.redhat.com/show_bug.cgi?id=2439900 https://bugzilla.redhat.com/show_bug.cgi?id=2439931 https://bugzilla.redhat.com/show_bug.cgi?id=2439947 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40096 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23144 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23171 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23191 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23193 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23204 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23209 https://errata.almalinux.org/9/ALSA-2026-6153.html https://errata.rockylinux.org/RLSA-2026:6153 https://git.kernel.org/linus/826af7fa62e347464b1b4e0ba2fe19a92438084f (6.19) https://git.kernel.org/stable/c/5727ccf9d19ca414cb76d9b647883822e2789c2e https://git.kernel.org/stable/c/826af7fa62e347464b1b4e0ba2fe19a92438084f https://git.kernel.org/stable/c/bad15420050db1803767e58756114800cce91ea4 https://linux.oracle.com/cve/CVE-2026-23191.html https://linux.oracle.com/errata/ELSA-2026-9131.html https://lore.kernel.org/linux-cve-announce/2026021433-CVE-2026-23191-f990@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-23191 https://www.cve.org/CVERecord?id=CVE-2026-23191
kernel-headers	CVE-2026-23193	MEDIUM	6.12.0-124.47.1.el10_1	6.12.0-124.49.1.el10_1	https://access.redhat.com/errata/RHSA-2026:6153 https://access.redhat.com/security/cve/CVE-2026-23193 https://bugzilla.redhat.com/2376376 https://bugzilla.redhat.com/2407333 https://bugzilla.redhat.com/2439872 https://bugzilla.redhat.com/2439886 https://bugzilla.redhat.com/2439887 https://bugzilla.redhat.com/2439900 https://bugzilla.redhat.com/2439931 https://bugzilla.redhat.com/2439947 https://bugzilla.redhat.com/show_bug.cgi?id=2376376 https://bugzilla.redhat.com/show_bug.cgi?id=2407333 https://bugzilla.redhat.com/show_bug.cgi?id=2439872 https://bugzilla.redhat.com/show_bug.cgi?id=2439886 https://bugzilla.redhat.com/show_bug.cgi?id=2439887 https://bugzilla.redhat.com/show_bug.cgi?id=2439900 https://bugzilla.redhat.com/show_bug.cgi?id=2439931 https://bugzilla.redhat.com/show_bug.cgi?id=2439947 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40096 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23144 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23171 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23191 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23193 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23204 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23209 https://errata.almalinux.org/9/ALSA-2026-6153.html https://errata.rockylinux.org/RLSA-2026:6153 https://git.kernel.org/linus/84dc6037390b8607c5551047d3970336cb51ba9a (6.19-rc7) https://git.kernel.org/stable/c/11ebafffce31efc6abeb28c509017976fc49f1ca https://git.kernel.org/stable/c/2b64015550a13bcc72910be0565548d9a754d46d https://git.kernel.org/stable/c/41b86a9ec037bd3435d68dd3692f0891a207e7e7 https://git.kernel.org/stable/c/4530f4e4d0e6a207110b0ffed0c911bca43531a4 https://git.kernel.org/stable/c/84dc6037390b8607c5551047d3970336cb51ba9a https://git.kernel.org/stable/c/d8dbdc146e9e9a976931b78715be2e91299049f9 https://git.kernel.org/stable/c/fd8b0900173307039d3a84644c2fee041a7ed4fb https://linux.oracle.com/cve/CVE-2026-23193.html https://linux.oracle.com/errata/ELSA-2026-6632.html https://lore.kernel.org/linux-cve-announce/2026021434-CVE-2026-23193-2c6c@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-23193 https://www.cve.org/CVERecord?id=CVE-2026-23193
kernel-headers	CVE-2026-23204	MEDIUM	6.12.0-124.47.1.el10_1	6.12.0-124.49.1.el10_1	https://access.redhat.com/errata/RHSA-2026:6153 https://access.redhat.com/security/cve/CVE-2026-23204 https://bugzilla.redhat.com/2376376 https://bugzilla.redhat.com/2407333 https://bugzilla.redhat.com/2439872 https://bugzilla.redhat.com/2439886 https://bugzilla.redhat.com/2439887 https://bugzilla.redhat.com/2439900 https://bugzilla.redhat.com/2439931 https://bugzilla.redhat.com/2439947 https://bugzilla.redhat.com/show_bug.cgi?id=2376376 https://bugzilla.redhat.com/show_bug.cgi?id=2407333 https://bugzilla.redhat.com/show_bug.cgi?id=2439872 https://bugzilla.redhat.com/show_bug.cgi?id=2439886 https://bugzilla.redhat.com/show_bug.cgi?id=2439887 https://bugzilla.redhat.com/show_bug.cgi?id=2439900 https://bugzilla.redhat.com/show_bug.cgi?id=2439931 https://bugzilla.redhat.com/show_bug.cgi?id=2439947 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40096 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23144 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23171 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23191 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23193 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23204 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23209 https://errata.almalinux.org/9/ALSA-2026-6153.html https://errata.rockylinux.org/RLSA-2026:6153 https://git.kernel.org/linus/cabd1a976375780dabab888784e356f574bbaed8 (6.19) https://git.kernel.org/stable/c/13336a6239b9d7c6e61483017bb8bdfe3ceb10a5 https://git.kernel.org/stable/c/8a672f177ebe19c93d795fbe967846084fbc7943 https://git.kernel.org/stable/c/cabd1a976375780dabab888784e356f574bbaed8 https://git.kernel.org/stable/c/cfa745830e45ecb75c061aa34330ee0cac941cc7 https://git.kernel.org/stable/c/e41a23e61259f5526af875c3b86b3d42a9bae0e5 https://linux.oracle.com/cve/CVE-2026-23204.html https://linux.oracle.com/errata/ELSA-2026-6632.html https://lore.kernel.org/linux-cve-announce/2026021437-CVE-2026-23204-be85@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-23204 https://www.cve.org/CVERecord?id=CVE-2026-23204
kernel-headers	CVE-2026-23209	MEDIUM	6.12.0-124.47.1.el10_1	6.12.0-124.49.1.el10_1	https://access.redhat.com/errata/RHSA-2026:6153 https://access.redhat.com/security/cve/CVE-2026-23209 https://bugzilla.redhat.com/2376376 https://bugzilla.redhat.com/2407333 https://bugzilla.redhat.com/2439872 https://bugzilla.redhat.com/2439886 https://bugzilla.redhat.com/2439887 https://bugzilla.redhat.com/2439900 https://bugzilla.redhat.com/2439931 https://bugzilla.redhat.com/2439947 https://bugzilla.redhat.com/show_bug.cgi?id=2376376 https://bugzilla.redhat.com/show_bug.cgi?id=2407333 https://bugzilla.redhat.com/show_bug.cgi?id=2439872 https://bugzilla.redhat.com/show_bug.cgi?id=2439886 https://bugzilla.redhat.com/show_bug.cgi?id=2439887 https://bugzilla.redhat.com/show_bug.cgi?id=2439900 https://bugzilla.redhat.com/show_bug.cgi?id=2439931 https://bugzilla.redhat.com/show_bug.cgi?id=2439947 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40096 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23144 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23171 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23191 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23193 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23204 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23209 https://errata.almalinux.org/9/ALSA-2026-6153.html https://errata.rockylinux.org/RLSA-2026:6153 https://git.kernel.org/linus/f8db6475a83649689c087a8f52486fcc53e627e9 (6.19) https://git.kernel.org/stable/c/11ba9f0dc865136174cb98834280fb21bbc950c7 https://git.kernel.org/stable/c/5dae6b36a7cb7a4fcf4121b95e9ca7f96f816c8a https://git.kernel.org/stable/c/986967a162142710076782d5b93daab93a892980 https://git.kernel.org/stable/c/c43d0e787cbba569ec9d11579ed370b50fab6c9c https://git.kernel.org/stable/c/cdedcd5aa3f3cb8b7ae0f87ab3a936d0bd583d66 https://git.kernel.org/stable/c/da5c6b8ae47e414be47e5e04def15b25d5c962dc https://git.kernel.org/stable/c/f8db6475a83649689c087a8f52486fcc53e627e9 https://linux.oracle.com/cve/CVE-2026-23209.html https://linux.oracle.com/errata/ELSA-2026-6632.html https://lore.kernel.org/linux-cve-announce/2026021439-CVE-2026-23209-9ad6@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-23209 https://ubuntu.com/security/notices/USN-8162-1 https://ubuntu.com/security/notices/USN-8177-1 https://ubuntu.com/security/notices/USN-8177-2 https://ubuntu.com/security/notices/USN-8179-1 https://ubuntu.com/security/notices/USN-8179-2 https://ubuntu.com/security/notices/USN-8179-3 https://ubuntu.com/security/notices/USN-8180-1 https://ubuntu.com/security/notices/USN-8180-2 https://ubuntu.com/security/notices/USN-8180-3 https://ubuntu.com/security/notices/USN-8180-4 https://ubuntu.com/security/notices/USN-8183-1 https://ubuntu.com/security/notices/USN-8183-2 https://ubuntu.com/security/notices/USN-8184-1 https://ubuntu.com/security/notices/USN-8185-1 https://ubuntu.com/security/notices/USN-8186-1 https://ubuntu.com/security/notices/USN-8187-1 https://ubuntu.com/security/notices/USN-8188-1 https://ubuntu.com/security/notices/USN-8203-1 https://ubuntu.com/security/notices/USN-8204-1 https://www.cve.org/CVERecord?id=CVE-2026-23209
libarchive	CVE-2026-4424	HIGH	3.7.7-5.el10_1	3.7.7-8.el10_1	https://access.redhat.com/errata/RHSA-2026:10065 https://access.redhat.com/errata/RHSA-2026:8492 https://access.redhat.com/errata/RHSA-2026:8510 https://access.redhat.com/errata/RHSA-2026:8517 https://access.redhat.com/errata/RHSA-2026:8521 https://access.redhat.com/errata/RHSA-2026:8534 https://access.redhat.com/errata/RHSA-2026:8864 https://access.redhat.com/errata/RHSA-2026:8865 https://access.redhat.com/errata/RHSA-2026:8866 https://access.redhat.com/errata/RHSA-2026:8867 https://access.redhat.com/errata/RHSA-2026:8873 https://access.redhat.com/errata/RHSA-2026:8908 https://access.redhat.com/errata/RHSA-2026:8944 https://access.redhat.com/errata/RHSA-2026:9026 https://access.redhat.com/errata/RHSA-2026:9592 https://access.redhat.com/errata/RHSA-2026:9832 https://access.redhat.com/security/cve/CVE-2026-4424 https://bugzilla.redhat.com/2449006 https://bugzilla.redhat.com/2452945 https://bugzilla.redhat.com/show_bug.cgi?id=2449006 https://bugzilla.redhat.com/show_bug.cgi?id=2452945 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4424 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5121 https://errata.almalinux.org/9/ALSA-2026-8510.html https://errata.rockylinux.org/RLSA-2026:8510 https://github.com/libarchive/libarchive/pull/2898 https://linux.oracle.com/cve/CVE-2026-4424.html https://linux.oracle.com/errata/ELSA-2026-8534.html https://nvd.nist.gov/vuln/detail/CVE-2026-4424 https://www.cve.org/CVERecord?id=CVE-2026-4424
libnghttp2	CVE-2026-27135	HIGH	1.64.0-2.el10	1.64.0-2.el10_1.1	http://www.openwall.com/lists/oss-security/2026/03/20/3 https://access.redhat.com/errata/RHSA-2026:7896 https://access.redhat.com/security/cve/CVE-2026-27135 https://bugzilla.redhat.com/2441268 https://bugzilla.redhat.com/2442922 https://bugzilla.redhat.com/2448754 https://bugzilla.redhat.com/2453151 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135 https://errata.almalinux.org/9/ALSA-2026-7896.html https://errata.rockylinux.org/RLSA-2026:7668 https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 https://linux.oracle.com/cve/CVE-2026-27135.html https://linux.oracle.com/errata/ELSA-2026-8339.html https://nvd.nist.gov/vuln/detail/CVE-2026-27135 https://www.cve.org/CVERecord?id=CVE-2026-27135
nginx-filesystem	CVE-2026-27651	HIGH	2:1.26.3-2.el10_1	2:1.26.3-2.el10_1.1	https://access.redhat.com/errata/RHSA-2026:7343 https://access.redhat.com/security/cve/CVE-2026-27651 https://bugzilla.redhat.com/2449598 https://bugzilla.redhat.com/2450776 https://bugzilla.redhat.com/2450785 https://bugzilla.redhat.com/2450791 https://bugzilla.redhat.com/show_bug.cgi?id=2449598 https://bugzilla.redhat.com/show_bug.cgi?id=2450776 https://bugzilla.redhat.com/show_bug.cgi?id=2450785 https://bugzilla.redhat.com/show_bug.cgi?id=2450791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27651 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27654 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27784 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32647 https://errata.almalinux.org/9/ALSA-2026-7343.html https://errata.rockylinux.org/RLSA-2026:7343 https://linux.oracle.com/cve/CVE-2026-27651.html https://linux.oracle.com/errata/ELSA-2026-7343.html https://my.f5.com/manage/s/article/K000160383 https://nvd.nist.gov/vuln/detail/CVE-2026-27651 https://www.cve.org/CVERecord?id=CVE-2026-27651
nginx-filesystem	CVE-2026-27654	HIGH	2:1.26.3-2.el10_1	2:1.26.3-2.el10_1.1	https://access.redhat.com/errata/RHSA-2026:7343 https://access.redhat.com/security/cve/CVE-2026-27654 https://bugzilla.redhat.com/2449598 https://bugzilla.redhat.com/2450776 https://bugzilla.redhat.com/2450785 https://bugzilla.redhat.com/2450791 https://bugzilla.redhat.com/show_bug.cgi?id=2449598 https://bugzilla.redhat.com/show_bug.cgi?id=2450776 https://bugzilla.redhat.com/show_bug.cgi?id=2450785 https://bugzilla.redhat.com/show_bug.cgi?id=2450791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27651 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27654 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27784 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32647 https://errata.almalinux.org/9/ALSA-2026-7343.html https://errata.rockylinux.org/RLSA-2026:7343 https://linux.oracle.com/cve/CVE-2026-27654.html https://linux.oracle.com/errata/ELSA-2026-7343.html https://my.f5.com/manage/s/article/K000160382 https://nvd.nist.gov/vuln/detail/CVE-2026-27654 https://www.cve.org/CVERecord?id=CVE-2026-27654
nginx-filesystem	CVE-2026-27784	HIGH	2:1.26.3-2.el10_1	2:1.26.3-2.el10_1.1	https://access.redhat.com/errata/RHSA-2026:7343 https://access.redhat.com/security/cve/CVE-2026-27784 https://bugzilla.redhat.com/2449598 https://bugzilla.redhat.com/2450776 https://bugzilla.redhat.com/2450785 https://bugzilla.redhat.com/2450791 https://bugzilla.redhat.com/show_bug.cgi?id=2449598 https://bugzilla.redhat.com/show_bug.cgi?id=2450776 https://bugzilla.redhat.com/show_bug.cgi?id=2450785 https://bugzilla.redhat.com/show_bug.cgi?id=2450791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27651 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27654 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27784 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32647 https://errata.almalinux.org/9/ALSA-2026-7343.html https://errata.rockylinux.org/RLSA-2026:7343 https://linux.oracle.com/cve/CVE-2026-27784.html https://linux.oracle.com/errata/ELSA-2026-7343.html https://my.f5.com/manage/s/article/K000160364 https://nvd.nist.gov/vuln/detail/CVE-2026-27784 https://www.cve.org/CVERecord?id=CVE-2026-27784
nginx-filesystem	CVE-2026-32647	HIGH	2:1.26.3-2.el10_1	2:1.26.3-2.el10_1.1	https://access.redhat.com/errata/RHSA-2026:7343 https://access.redhat.com/security/cve/CVE-2026-32647 https://bugzilla.redhat.com/2449598 https://bugzilla.redhat.com/2450776 https://bugzilla.redhat.com/2450785 https://bugzilla.redhat.com/2450791 https://bugzilla.redhat.com/show_bug.cgi?id=2449598 https://bugzilla.redhat.com/show_bug.cgi?id=2450776 https://bugzilla.redhat.com/show_bug.cgi?id=2450785 https://bugzilla.redhat.com/show_bug.cgi?id=2450791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27651 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27654 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27784 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32647 https://errata.almalinux.org/9/ALSA-2026-7343.html https://errata.rockylinux.org/RLSA-2026:7343 https://linux.oracle.com/cve/CVE-2026-32647.html https://linux.oracle.com/errata/ELSA-2026-7343.html https://my.f5.com/manage/s/article/K000160366 https://nvd.nist.gov/vuln/detail/CVE-2026-32647 https://www.cve.org/CVERecord?id=CVE-2026-32647
No Misconfigurations found

Java (jar)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	MEDIUM	2.15.1	2.21.1, 2.18.6	https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf https://github.com/FasterXML/jackson-core/pull/1555 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-72hv-8253-57qq
commons-io:commons-io	CVE-2024-47554	HIGH	2.8.0	2.14.0	http://www.openwall.com/lists/oss-security/2024/10/03/2 https://access.redhat.com/security/cve/CVE-2024-47554 https://github.com/apache/commons-io https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1 https://nvd.nist.gov/vuln/detail/CVE-2024-47554 https://security.netapp.com/advisory/ntap-20250131-0010 https://security.netapp.com/advisory/ntap-20250131-0010/ https://ubuntu.com/security/notices/USN-8191-1 https://www.cve.org/CVERecord?id=CVE-2024-47554
commons-lang:commons-lang	CVE-2025-48924	MEDIUM	2.6	no fix available	http://www.openwall.com/lists/oss-security/2025/07/11/1 https://access.redhat.com/security/cve/CVE-2025-48924 https://github.com/apache/commons-lang https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53 https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1 https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html https://nvd.nist.gov/vuln/detail/CVE-2025-48924 https://www.cve.org/CVERecord?id=CVE-2025-48924 https://www.openwall.com/lists/oss-security/2025/07/11/1
org.apache.commons:commons-lang3	CVE-2025-48924	MEDIUM	3.12.0	3.18.0	http://www.openwall.com/lists/oss-security/2025/07/11/1 https://access.redhat.com/security/cve/CVE-2025-48924 https://github.com/apache/commons-lang https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53 https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1 https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html https://nvd.nist.gov/vuln/detail/CVE-2025-48924 https://www.cve.org/CVERecord?id=CVE-2025-48924 https://www.openwall.com/lists/oss-security/2025/07/11/1
org.bouncycastle:bcpg-jdk18on	CVE-2026-3505	HIGH	1.81	1.84	https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/dc7530939ffb6cdb57636f3609d98e23b94e71c1 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505 https://nvd.nist.gov/vuln/detail/CVE-2026-3505
org.bouncycastle:bcprov-jdk18on	CVE-2026-0636	MEDIUM	1.81	1.84	https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636 https://nvd.nist.gov/vuln/detail/CVE-2026-0636
org.codehaus.plexus:plexus-utils	CVE-2025-67030	HIGH	3.3.1	4.0.3, 3.6.1	https://access.redhat.com/security/cve/CVE-2025-67030 https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec https://github.com/codehaus-plexus/plexus-utils https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642 https://github.com/codehaus-plexus/plexus-utils/issues/294 https://github.com/codehaus-plexus/plexus-utils/pull/295 https://github.com/codehaus-plexus/plexus-utils/pull/296 https://github.com/codehaus-plexus/plexus-utils/releases/tag/plexus-utils-4.0.3 https://nvd.nist.gov/vuln/detail/CVE-2025-67030 https://www.cve.org/CVERecord?id=CVE-2025-67030
org.codehaus.plexus:plexus-utils	CVE-2025-67030	HIGH	3.4.1	4.0.3, 3.6.1	https://access.redhat.com/security/cve/CVE-2025-67030 https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec https://github.com/codehaus-plexus/plexus-utils https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642 https://github.com/codehaus-plexus/plexus-utils/issues/294 https://github.com/codehaus-plexus/plexus-utils/pull/295 https://github.com/codehaus-plexus/plexus-utils/pull/296 https://github.com/codehaus-plexus/plexus-utils/releases/tag/plexus-utils-4.0.3 https://nvd.nist.gov/vuln/detail/CVE-2025-67030 https://www.cve.org/CVERecord?id=CVE-2025-67030
org.codehaus.plexus:plexus-utils	CVE-2025-67030	HIGH	3.5.1	4.0.3, 3.6.1	https://access.redhat.com/security/cve/CVE-2025-67030 https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec https://github.com/codehaus-plexus/plexus-utils https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642 https://github.com/codehaus-plexus/plexus-utils/issues/294 https://github.com/codehaus-plexus/plexus-utils/pull/295 https://github.com/codehaus-plexus/plexus-utils/pull/296 https://github.com/codehaus-plexus/plexus-utils/releases/tag/plexus-utils-4.0.3 https://nvd.nist.gov/vuln/detail/CVE-2025-67030 https://www.cve.org/CVERecord?id=CVE-2025-67030
org.codehaus.plexus:plexus-utils	CVE-2025-67030	HIGH	3.6.0	4.0.3, 3.6.1	https://access.redhat.com/security/cve/CVE-2025-67030 https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec https://github.com/codehaus-plexus/plexus-utils https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642 https://github.com/codehaus-plexus/plexus-utils/issues/294 https://github.com/codehaus-plexus/plexus-utils/pull/295 https://github.com/codehaus-plexus/plexus-utils/pull/296 https://github.com/codehaus-plexus/plexus-utils/releases/tag/plexus-utils-4.0.3 https://nvd.nist.gov/vuln/detail/CVE-2025-67030 https://www.cve.org/CVERecord?id=CVE-2025-67030
org.eclipse.jetty:jetty-http	CVE-2026-2332	HIGH	9.4.58.v20250814	12.1.7, 12.0.33, 11.0.28, 10.0.28, 9.4.60	https://access.redhat.com/security/cve/CVE-2026-2332 https://github.com/jetty/jetty.project https://github.com/jetty/jetty.project/security/advisories/GHSA-355h-qmc2-wpwf https://gitlab.eclipse.org/security/cve-assignment/-/issues/89 https://nvd.nist.gov/vuln/detail/CVE-2026-2332 https://w4ke.info/2025/06/18/funky-chunks.html https://www.cve.org/CVERecord?id=CVE-2026-2332
org.eclipse.jetty:jetty-http	CVE-2024-6763	MEDIUM	9.4.58.v20250814	12.0.12	https://access.redhat.com/security/cve/CVE-2024-6763 https://github.com/jetty/jetty.project https://github.com/jetty/jetty.project/pull/12012 https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh https://gitlab.eclipse.org/security/cve-assignement/-/issues/25 https://nvd.nist.gov/vuln/detail/CVE-2024-6763 https://security.netapp.com/advisory/ntap-20250306-0005 https://security.netapp.com/advisory/ntap-20250306-0005/ https://www.cve.org/CVERecord?id=CVE-2024-6763
org.msgpack:msgpack-core	CVE-2026-21452	HIGH	0.9.10	0.9.11	https://github.com/msgpack/msgpack-java https://github.com/msgpack/msgpack-java/commit/daa2ea6b2f11f500e22c70a22f689f7a9debdeae https://github.com/msgpack/msgpack-java/releases/tag/v0.9.11 https://github.com/msgpack/msgpack-java/security/advisories/GHSA-cw39-r4h6-8j3x https://nvd.nist.gov/vuln/detail/CVE-2026-21452
No Misconfigurations found

Node.js (node-pkg)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
brace-expansion	CVE-2026-33750	MEDIUM	5.0.3	5.0.5, 3.0.2, 2.0.3, 1.1.13	https://access.redhat.com/security/cve/CVE-2026-33750 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113 https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184 https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5 https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2 https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a https://github.com/juliangruber/brace-expansion/issues/98 https://github.com/juliangruber/brace-expansion/pull/95 https://github.com/juliangruber/brace-expansion/pull/96 https://github.com/juliangruber/brace-expansion/pull/97 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v https://nvd.nist.gov/vuln/detail/CVE-2026-33750 https://www.cve.org/CVERecord?id=CVE-2026-33750
fast-xml-parser	CVE-2026-41650	MEDIUM	5.5.11	5.7.0	https://github.com/NaturalIntelligence/fast-xml-parser https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-gh4j-gqv2-49f6
lodash	CVE-2026-4800	HIGH	4.17.23	4.18.0	https://access.redhat.com/security/cve/CVE-2026-4800 https://cna.openjsf.org/security-advisories.html https://github.com/advisories/GHSA-35jh-r3h4-6jhm https://github.com/lodash/lodash https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc https://nvd.nist.gov/vuln/detail/CVE-2026-4800 https://www.cve.org/CVERecord?id=CVE-2026-4800
lodash	CVE-2026-2950	MEDIUM	4.17.23	4.18.0	https://access.redhat.com/security/cve/CVE-2026-2950 https://github.com/lodash/lodash https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg https://nvd.nist.gov/vuln/detail/CVE-2026-2950 https://www.cve.org/CVERecord?id=CVE-2026-2950
minimatch	CVE-2026-27903	HIGH	10.2.2	10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3	https://access.redhat.com/security/cve/CVE-2026-27903 https://github.com/isaacs/minimatch https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748 https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj https://nvd.nist.gov/vuln/detail/CVE-2026-27903 https://www.cve.org/CVERecord?id=CVE-2026-27903
minimatch	CVE-2026-27904	HIGH	10.2.2	10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4	https://access.redhat.com/errata/RHSA-2026:7896 https://access.redhat.com/security/cve/CVE-2026-27904 https://bugzilla.redhat.com/2441268 https://bugzilla.redhat.com/2442922 https://bugzilla.redhat.com/2448754 https://bugzilla.redhat.com/2453151 https://bugzilla.redhat.com/show_bug.cgi?id=2441268 https://bugzilla.redhat.com/show_bug.cgi?id=2442922 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://bugzilla.redhat.com/show_bug.cgi?id=2453151 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21710 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27904 https://errata.almalinux.org/9/ALSA-2026-7896.html https://errata.rockylinux.org/RLSA-2026:7896 https://github.com/isaacs/minimatch https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74 https://linux.oracle.com/cve/CVE-2026-27904.html https://linux.oracle.com/errata/ELSA-2026-8339.html https://nvd.nist.gov/vuln/detail/CVE-2026-27904 https://www.cve.org/CVERecord?id=CVE-2026-27904
picomatch	CVE-2026-33671	HIGH	4.0.3	4.0.4, 3.0.2, 2.3.2	https://access.redhat.com/security/cve/CVE-2026-33671 https://github.com/micromatch/picomatch https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj https://nvd.nist.gov/vuln/detail/CVE-2026-33671 https://www.cve.org/CVERecord?id=CVE-2026-33671
picomatch	CVE-2026-33672	MEDIUM	4.0.3	4.0.4, 3.0.2, 2.3.2	https://access.redhat.com/security/cve/CVE-2026-33672 https://github.com/micromatch/picomatch https://github.com/micromatch/picomatch/commit/4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903 https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p https://nvd.nist.gov/vuln/detail/CVE-2026-33672 https://www.cve.org/CVERecord?id=CVE-2026-33672
tar	CVE-2026-29786	HIGH	7.5.9	7.5.10	https://access.redhat.com/security/cve/CVE-2026-29786 https://github.com/isaacs/node-tar https://github.com/isaacs/node-tar/commit/7bc755dd85e623c0279e08eb3784909e6d7e4b9f https://github.com/isaacs/node-tar/security/advisories/GHSA-qffp-2rhf-9h96 https://nvd.nist.gov/vuln/detail/CVE-2026-29786 https://www.cve.org/CVERecord?id=CVE-2026-29786
tar	CVE-2026-31802	HIGH	7.5.9	7.5.11	https://access.redhat.com/security/cve/CVE-2026-31802 https://github.com/isaacs/node-tar https://github.com/isaacs/node-tar/commit/f48b5fa3b7985ddab96dc0f2125a4ffc9911b6ad https://github.com/isaacs/node-tar/security/advisories/GHSA-9ppj-qmqm-q256 https://nvd.nist.gov/vuln/detail/CVE-2026-31802 https://www.cve.org/CVERecord?id=CVE-2026-31802
uuid	GHSA-w5hq-g745-h8pq	MEDIUM	13.0.0	14.0.0	https://github.com/uuidjs/uuid https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34 https://github.com/uuidjs/uuid/releases/tag/v14.0.0 https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq
uuid	GHSA-w5hq-g745-h8pq	MEDIUM	8.3.2	14.0.0	https://github.com/uuidjs/uuid https://github.com/uuidjs/uuid/commit/3d2c5b0342f0fcb52a5ac681c3d47c13e7444b34 https://github.com/uuidjs/uuid/releases/tag/v14.0.0 https://github.com/uuidjs/uuid/security/advisories/GHSA-w5hq-g745-h8pq
yaml	CVE-2026-33532	MEDIUM	2.4.1	2.8.3, 1.10.3	https://access.redhat.com/security/cve/CVE-2026-33532 https://github.com/eemeli/yaml https://github.com/eemeli/yaml/commit/1e84ebbea7ec35011a4c61bbb820a529ee4f359b https://github.com/eemeli/yaml/releases/tag/v1.10.3 https://github.com/eemeli/yaml/releases/tag/v2.8.3 https://github.com/eemeli/yaml/security/advisories/GHSA-48c2-rrv3-qjmp https://nvd.nist.gov/vuln/detail/CVE-2026-33532 https://www.cve.org/CVERecord?id=CVE-2026-33532
No Misconfigurations found

Python (python-pkg)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
poetry	CVE-2026-41140	LOW	2.3.3	2.3.4	https://github.com/python-poetry/poetry https://github.com/python-poetry/poetry/releases/tag/2.3.4 https://github.com/python-poetry/poetry/security/advisories/GHSA-73h3-mf4w-8647
uv	GHSA-pjjw-68hj-v9mw	LOW	0.11.5	0.11.6	https://github.com/astral-sh/uv https://github.com/astral-sh/uv/commit/7983c7a5bef236fd8a04580fcedae7bd5bde4cdb https://github.com/astral-sh/uv/commit/a0e461ac44851f9a0f6e8974733e77d46f7a9ea9 https://github.com/astral-sh/uv/pull/18942 https://github.com/astral-sh/uv/pull/18943 https://github.com/astral-sh/uv/releases/tag/0.11.6 https://github.com/astral-sh/uv/security/advisories/GHSA-pjjw-68hj-v9mw
No Misconfigurations found

Ruby (gemspec)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
json	CVE-2026-33210	CRITICAL	2.18.0	~> 2.15.2.1, ~> 2.17.1.2, >= 2.19.2	https://access.redhat.com/security/cve/CVE-2026-33210 https://github.com/advisories/GHSA-3m6g-2423-7cp3 https://github.com/ruby/json https://github.com/ruby/json/security/advisories/GHSA-3m6g-2423-7cp3 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json/CVE-2026-33210.yml https://nvd.nist.gov/vuln/detail/CVE-2026-33210 https://www.cve.org/CVERecord?id=CVE-2026-33210
zlib	CVE-2026-27820	MEDIUM	3.2.2	~> 3.0.1, ~> 3.1.2, >= 3.2.3	https://access.redhat.com/security/cve/CVE-2026-27820 https://github.com/ruby/zlib https://github.com/ruby/zlib/security/advisories/GHSA-g857-hhfv-j68w https://github.com/rubysec/ruby-advisory-db/blob/master/gems/zlib/CVE-2026-27820.yml https://hackerone.com/reports/3467067 https://nvd.nist.gov/vuln/detail/CVE-2026-27820 https://rubygems.org/gems/zlib/versions/3.0.1 https://rubygems.org/gems/zlib/versions/3.1.2 https://rubygems.org/gems/zlib/versions/3.2.3 https://www.cve.org/CVERecord?id=CVE-2026-27820 https://www.ruby-lang.org/en/news/2026/03/05/buffer-overflow-zlib-cve-2026-27820
No Misconfigurations found

opt/cdxgen/node_modules/.pnpm/@appthreat+atom-parsetools@1.1.3/node_modules/@appthreat/atom-parsetools/plugins/composer/installed.json (composer-vendor)

No Vulnerabilities found
No Misconfigurations found

opt/cdxgen/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.0.3/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/sourcekitten/sbom-trivy-postbuild.cdx.json (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	GHSA-xmrv-pmrh-hhx2	MEDIUM	v1.7.3	1.7.8	https://github.com/aws/aws-sdk-go-v2 https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23 https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2
github.com/aws/aws-sdk-go-v2/service/s3	GHSA-xmrv-pmrh-hhx2	MEDIUM	v1.92.0	1.97.3	https://github.com/aws/aws-sdk-go-v2 https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23 https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2
github.com/cloudflare/circl	CVE-2026-1229	LOW	v1.6.1	1.6.3	https://github.com/cloudflare/circl https://github.com/cloudflare/circl/pull/583 https://github.com/cloudflare/circl/releases/tag/v1.6.3 https://github.com/cloudflare/circl/security/advisories/GHSA-q9hv-hpm4-hj6x https://nvd.nist.gov/vuln/detail/CVE-2026-1229
github.com/docker/cli	CVE-2025-15558	HIGH	v29.0.3+incompatible	29.2.0	https://access.redhat.com/security/cve/CVE-2025-15558 https://docs.docker.com/desktop/release-notes https://docs.docker.com/desktop/release-notes/ https://github.com/docker/cli https://github.com/docker/cli/commit/13759330b1f7e7cb0d67047ea42c5482548ba7fa https://github.com/docker/cli/pull/6713 https://github.com/docker/cli/security/advisories/GHSA-p436-gjf2-799p https://github.com/docker/compose/pull/12300 https://nvd.nist.gov/vuln/detail/CVE-2025-15558 https://www.cve.org/CVERecord?id=CVE-2025-15558 https://www.zerodayinitiative.com/advisories/ZDI-CAN-28304 https://www.zerodayinitiative.com/advisories/ZDI-CAN-28304/
github.com/docker/docker	CVE-2026-34040	HIGH	v28.5.2+incompatible	29.3.1	https://access.redhat.com/security/cve/CVE-2026-34040 https://docs.docker.com/engine/extend/plugins_authorization https://github.com/moby/moby https://github.com/moby/moby/commit/e89edb19ad7de0407a5d31e3111cb01aa10b5a38 https://github.com/moby/moby/releases/tag/docker-v29.3.1 https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2 https://nvd.nist.gov/vuln/detail/CVE-2026-34040 https://www.cve.org/CVERecord?id=CVE-2026-34040
github.com/docker/docker	CVE-2026-33997	MEDIUM	v28.5.2+incompatible	29.3.1	https://access.redhat.com/security/cve/CVE-2026-33997 https://docs.docker.com/engine/extend/legacy_plugins https://github.com/moby/moby https://github.com/moby/moby/commit/f4d6f25bf0c3fa12d4968320a45685947756a22a https://github.com/moby/moby/releases/tag/docker-v29.3.1 https://github.com/moby/moby/security/advisories/GHSA-pxq6-2prw-chj9 https://nvd.nist.gov/vuln/detail/CVE-2026-33997 https://www.cve.org/CVERecord?id=CVE-2026-33997
github.com/go-git/go-git/v5	CVE-2026-25934	MEDIUM	v5.16.3	5.16.5	https://access.redhat.com/security/cve/CVE-2026-25934 https://github.com/go-git/go-git https://github.com/go-git/go-git/releases/tag/v5.16.5 https://github.com/go-git/go-git/security/advisories/GHSA-37cx-329c-33x3 https://nvd.nist.gov/vuln/detail/CVE-2026-25934 https://ubuntu.com/security/notices/USN-8088-1 https://www.cve.org/CVERecord?id=CVE-2026-25934
github.com/go-git/go-git/v5	CVE-2026-34165	MEDIUM	v5.16.3	5.17.1	https://access.redhat.com/security/cve/CVE-2026-34165 https://github.com/go-git/go-git https://github.com/go-git/go-git/releases/tag/v5.17.1 https://github.com/go-git/go-git/security/advisories/GHSA-jhf3-xxhw-2wpp https://nvd.nist.gov/vuln/detail/CVE-2026-34165 https://www.cve.org/CVERecord?id=CVE-2026-34165
github.com/go-git/go-git/v5	GHSA-3xc5-wrhm-f963	MEDIUM	v5.16.3	5.18.0	https://github.com/go-git/go-git https://github.com/go-git/go-git/security/advisories/GHSA-3xc5-wrhm-f963
github.com/go-git/go-git/v5	CVE-2026-33762	LOW	v5.16.3	5.17.1	https://access.redhat.com/security/cve/CVE-2026-33762 https://github.com/go-git/go-git https://github.com/go-git/go-git/releases/tag/v5.17.1 https://github.com/go-git/go-git/security/advisories/GHSA-gm2x-2g9h-ccm8 https://nvd.nist.gov/vuln/detail/CVE-2026-33762 https://www.cve.org/CVERecord?id=CVE-2026-33762
github.com/go-jose/go-jose/v4	CVE-2026-34986	HIGH	v4.1.2	4.1.4	https://access.redhat.com/security/cve/CVE-2026-34986 https://github.com/go-jose/go-jose https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8 https://nvd.nist.gov/vuln/detail/CVE-2026-34986 https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants https://www.cve.org/CVERecord?id=CVE-2026-34986
github.com/hashicorp/go-getter	CVE-2026-4660	HIGH	v1.8.3	1.8.6	https://access.redhat.com/security/cve/CVE-2026-4660 https://discuss.hashicorp.com/t/hcsec-2026-04-go-getter-may-allow-to-arbitrary-filesystem-reads-through-git-operations/77311 https://github.com/hashicorp/go-getter https://nvd.nist.gov/vuln/detail/CVE-2026-4660 https://www.cve.org/CVERecord?id=CVE-2026-4660
github.com/moby/buildkit	CVE-2026-33747	HIGH	v0.26.2	0.28.1	https://access.redhat.com/security/cve/CVE-2026-33747 https://github.com/moby/buildkit https://github.com/moby/buildkit/releases/tag/v0.28.1 https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj https://nvd.nist.gov/vuln/detail/CVE-2026-33747 https://www.cve.org/CVERecord?id=CVE-2026-33747
github.com/moby/buildkit	CVE-2026-33748	HIGH	v0.26.2	0.28.1	https://access.redhat.com/security/cve/CVE-2026-33748 https://docs.docker.com/build/concepts/context/#url-fragments https://github.com/moby/buildkit https://github.com/moby/buildkit/releases/tag/v0.28.1 https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg https://nvd.nist.gov/vuln/detail/CVE-2026-33748 https://www.cve.org/CVERecord?id=CVE-2026-33748
github.com/moby/spdystream	CVE-2026-35469	HIGH	v0.5.0	0.5.1	https://access.redhat.com/security/cve/CVE-2026-35469 https://github.com/moby/spdystream https://github.com/moby/spdystream/releases/tag/v0.5.1 https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2 https://nvd.nist.gov/vuln/detail/CVE-2026-35469 https://www.cve.org/CVERecord?id=CVE-2026-35469
github.com/sigstore/cosign/v2	CVE-2026-22703	MEDIUM	v2.2.4	2.6.2	https://access.redhat.com/security/cve/CVE-2026-22703 https://github.com/sigstore/cosign https://github.com/sigstore/cosign/commit/6832fba4928c1ad69400235bbc41212de5006176 https://github.com/sigstore/cosign/pull/4623 https://github.com/sigstore/cosign/security/advisories/GHSA-whqx-f9j3-ch6m https://nvd.nist.gov/vuln/detail/CVE-2026-22703 https://www.cve.org/CVERecord?id=CVE-2026-22703
github.com/sigstore/rekor	CVE-2026-23831	MEDIUM	v1.4.3	1.5.0	https://access.redhat.com/security/cve/CVE-2026-23831 https://github.com/sigstore/rekor https://github.com/sigstore/rekor/commit/39bae3d192bce48ef4ef2cbd1788fb5770fee8cd https://github.com/sigstore/rekor/releases/tag/v1.5.0 https://github.com/sigstore/rekor/security/advisories/GHSA-273p-m2cw-6833 https://nvd.nist.gov/vuln/detail/CVE-2026-23831 https://www.cve.org/CVERecord?id=CVE-2026-23831
github.com/sigstore/rekor	CVE-2026-24117	MEDIUM	v1.4.3	1.5.0	https://access.redhat.com/security/cve/CVE-2026-24117 https://github.com/sigstore/rekor https://github.com/sigstore/rekor/commit/60ef2bceba192c5bf9327d003bceea8bf1f8275f https://github.com/sigstore/rekor/releases/tag/v1.5.0 https://github.com/sigstore/rekor/security/advisories/GHSA-4c4x-jm2x-pf9j https://nvd.nist.gov/vuln/detail/CVE-2026-24117 https://www.cve.org/CVERecord?id=CVE-2026-24117
github.com/sigstore/sigstore	CVE-2026-24137	MEDIUM	v1.9.5	1.10.4	https://access.redhat.com/security/cve/CVE-2026-24137 https://github.com/sigstore/sigstore https://github.com/sigstore/sigstore/commit/8ec410a2993ea78083aecf0e473a85453039496e https://github.com/sigstore/sigstore/releases/tag/v1.10.4 https://github.com/sigstore/sigstore/security/advisories/GHSA-fcv2-xgw5-pqxf https://nvd.nist.gov/vuln/detail/CVE-2026-24137 https://pkg.go.dev/vuln/GO-2026-4358 https://www.cve.org/CVERecord?id=CVE-2026-24137
github.com/sigstore/timestamp-authority	CVE-2025-66564	HIGH	v1.2.2	2.0.3	https://access.redhat.com/security/cve/CVE-2025-66564 https://github.com/sigstore/timestamp-authority https://github.com/sigstore/timestamp-authority/commit/0cae34e197d685a14904e0bad135b89d13b69421 https://github.com/sigstore/timestamp-authority/security/advisories/GHSA-4qg8-fj49-pxjh https://nvd.nist.gov/vuln/detail/CVE-2025-66564 https://www.cve.org/CVERecord?id=CVE-2025-66564
go.opentelemetry.io/otel/sdk	CVE-2026-24051	HIGH	v1.38.0	1.40.0	https://github.com/open-telemetry/opentelemetry-go https://github.com/open-telemetry/opentelemetry-go/commit/d45961bcda453fcbdb6469c22d6e88a1f9970a53 https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-9h8m-3fm2-qjrq https://nvd.nist.gov/vuln/detail/CVE-2026-24051 https://pkg.go.dev/vuln/GO-2026-4394
go.opentelemetry.io/otel/sdk	CVE-2026-39883	HIGH	v1.38.0	1.43.0	http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0 https://github.com/open-telemetry/opentelemetry-go https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx https://nvd.nist.gov/vuln/detail/CVE-2026-39883
google.golang.org/grpc	CVE-2026-33186	CRITICAL	v1.76.0	1.79.3	https://access.redhat.com/security/cve/CVE-2026-33186 https://github.com/grpc/grpc-go https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3 https://nvd.nist.gov/vuln/detail/CVE-2026-33186 https://www.cve.org/CVERecord?id=CVE-2026-33186
helm.sh/helm/v3	CVE-2026-35206	MEDIUM	v3.19.2	3.20.2	https://access.redhat.com/security/cve/CVE-2026-35206 https://github.com/helm/helm https://github.com/helm/helm/commit/4e7994d4467182f535b6797c94b5b0e994a91436 https://github.com/helm/helm/releases/tag/v4.1.4 https://github.com/helm/helm/security/advisories/GHSA-hr2v-4r36-88hr https://nvd.nist.gov/vuln/detail/CVE-2026-35206 https://www.cve.org/CVERecord?id=CVE-2026-35206
No Misconfigurations found

opt/pypi/bin/uv (rustbinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
rand	GHSA-cq8v-f236-94qc	LOW	0.8.5	0.9.3, 0.10.1, 0.8.6	https://github.com/rust-random/rand https://github.com/rust-random/rand/pull/1763 https://rustsec.org/advisories/RUSTSEC-2026-0097.html
rand	GHSA-cq8v-f236-94qc	LOW	0.9.2	0.9.3, 0.10.1, 0.8.6	https://github.com/rust-random/rand https://github.com/rust-random/rand/pull/1763 https://rustsec.org/advisories/RUSTSEC-2026-0097.html
rustls-webpki	GHSA-965h-392x-2mh5	LOW	0.103.10	0.103.12, 0.104.0-alpha.6	https://github.com/rustls/webpki https://github.com/rustls/webpki/security/advisories/GHSA-965h-392x-2mh5 https://rustsec.org/advisories/RUSTSEC-2026-0098.html
rustls-webpki	GHSA-xgp8-3hg3-c2mh	LOW	0.103.10	0.103.12, 0.104.0-alpha.6	https://github.com/rustls/webpki https://github.com/rustls/webpki/security/advisories/GHSA-xgp8-3hg3-c2mh https://rustsec.org/advisories/RUSTSEC-2026-0099.html
No Misconfigurations found

opt/pypi/bin/uvx (rustbinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
rand	GHSA-cq8v-f236-94qc	LOW	0.8.5	0.9.3, 0.10.1, 0.8.6	https://github.com/rust-random/rand https://github.com/rust-random/rand/pull/1763 https://rustsec.org/advisories/RUSTSEC-2026-0097.html
rand	GHSA-cq8v-f236-94qc	LOW	0.9.2	0.9.3, 0.10.1, 0.8.6	https://github.com/rust-random/rand https://github.com/rust-random/rand/pull/1763 https://rustsec.org/advisories/RUSTSEC-2026-0097.html
rustls-webpki	GHSA-965h-392x-2mh5	LOW	0.103.10	0.103.12, 0.104.0-alpha.6	https://github.com/rustls/webpki https://github.com/rustls/webpki/security/advisories/GHSA-965h-392x-2mh5 https://rustsec.org/advisories/RUSTSEC-2026-0098.html
rustls-webpki	GHSA-xgp8-3hg3-c2mh	LOW	0.103.10	0.103.12, 0.104.0-alpha.6	https://github.com/rustls/webpki https://github.com/rustls/webpki/security/advisories/GHSA-xgp8-3hg3-c2mh https://rustsec.org/advisories/RUSTSEC-2026-0099.html
No Misconfigurations found

usr/local/bin/bazel (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2025-68121	CRITICAL	v1.24.0	1.24.13, 1.25.7, 1.26.0-rc.3	https://access.redhat.com/errata/RHSA-2026:4177 https://access.redhat.com/security/cve/CVE-2025-68121 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-4177.html https://errata.rockylinux.org/RLSA-2026:4177 https://go.dev/cl/737700 https://go.dev/issue/77217 https://groups.google.com/g/golang-announce/c/K09ubi9FQFk https://linux.oracle.com/cve/CVE-2025-68121.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-68121 https://pkg.go.dev/vuln/GO-2026-4337 https://www.cve.org/CVERecord?id=CVE-2025-68121
stdlib	CVE-2025-22874	HIGH	v1.24.0	1.24.4	https://access.redhat.com/security/cve/CVE-2025-22874 https://go.dev/cl/670375 https://go.dev/issue/73612 https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A https://nvd.nist.gov/vuln/detail/CVE-2025-22874 https://pkg.go.dev/vuln/GO-2025-3749 https://www.cve.org/CVERecord?id=CVE-2025-22874
stdlib	CVE-2025-47907	HIGH	v1.24.0	1.23.12, 1.24.6	http://www.openwall.com/lists/oss-security/2025/08/06/1 https://access.redhat.com/errata/RHSA-2025:20909 https://access.redhat.com/security/cve/CVE-2025-47907 https://bugzilla.redhat.com/2387083 https://bugzilla.redhat.com/2393152 https://errata.almalinux.org/9/ALSA-2025-20909.html https://go.dev/cl/693735 https://go.dev/issue/74831 https://groups.google.com/g/golang-announce/c/x5MKroML2yM https://linux.oracle.com/cve/CVE-2025-47907.html https://linux.oracle.com/errata/ELSA-2025-20983.html https://nvd.nist.gov/vuln/detail/CVE-2025-47907 https://pkg.go.dev/vuln/GO-2025-3849 https://www.cve.org/CVERecord?id=CVE-2025-47907
stdlib	CVE-2025-58183	HIGH	v1.24.0	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/errata/RHSA-2026:1381 https://access.redhat.com/security/cve/CVE-2025-58183 https://bugzilla.redhat.com/2407258 https://bugzilla.redhat.com/show_bug.cgi?id=2407258 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58183 https://errata.almalinux.org/9/ALSA-2026-1381.html https://errata.rockylinux.org/RLSA-2025:23326 https://go.dev/cl/709861 https://go.dev/issue/75677 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://linux.oracle.com/cve/CVE-2025-58183.html https://linux.oracle.com/errata/ELSA-2026-50076.html https://nvd.nist.gov/vuln/detail/CVE-2025-58183 https://pkg.go.dev/vuln/GO-2025-4014 https://www.cve.org/CVERecord?id=CVE-2025-58183
stdlib	CVE-2025-61726	HIGH	v1.24.0	1.24.12, 1.25.6	https://access.redhat.com/errata/RHSA-2026:4177 https://access.redhat.com/security/cve/CVE-2025-61726 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-4177.html https://errata.rockylinux.org/RLSA-2026:4177 https://go.dev/cl/736712 https://go.dev/issue/77101 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://linux.oracle.com/cve/CVE-2025-61726.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-61726 https://pkg.go.dev/vuln/GO-2026-4341 https://www.cve.org/CVERecord?id=CVE-2025-61726
stdlib	CVE-2025-61728	HIGH	v1.24.0	1.24.12, 1.25.6	http://www.openwall.com/lists/oss-security/2026/01/15/4 https://access.redhat.com/errata/RHSA-2026:3753 https://access.redhat.com/security/cve/CVE-2025-61728 https://bugzilla.redhat.com/2418462 https://bugzilla.redhat.com/2434431 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2418462 https://bugzilla.redhat.com/show_bug.cgi?id=2434431 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61728 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-3753.html https://errata.rockylinux.org/RLSA-2026:3337 https://go.dev/cl/736713 https://go.dev/issue/77102 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://linux.oracle.com/cve/CVE-2025-61728.html https://linux.oracle.com/errata/ELSA-2026-4672.html https://nvd.nist.gov/vuln/detail/CVE-2025-61728 https://pkg.go.dev/vuln/GO-2026-4342 https://www.cve.org/CVERecord?id=CVE-2025-61728
stdlib	CVE-2025-61729	HIGH	v1.24.0	1.24.11, 1.25.5	https://access.redhat.com/errata/RHSA-2026:3928 https://access.redhat.com/security/cve/CVE-2025-61729 https://bugzilla.redhat.com/2418462 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2418462 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-3928.html https://errata.rockylinux.org/RLSA-2026:3928 https://go.dev/cl/725920 https://go.dev/issue/76445 https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 https://linux.oracle.com/cve/CVE-2025-61729.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-61729 https://pkg.go.dev/vuln/GO-2025-4155 https://www.cve.org/CVERecord?id=CVE-2025-61729
stdlib	CVE-2026-25679	HIGH	v1.24.0	1.25.8, 1.26.1	https://access.redhat.com/errata/RHSA-2026:9044 https://access.redhat.com/security/cve/CVE-2026-25679 https://bugzilla.redhat.com/2445356 https://bugzilla.redhat.com/show_bug.cgi?id=2445356 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679 https://errata.almalinux.org/9/ALSA-2026-9044.html https://errata.rockylinux.org/RLSA-2026:7259 https://go.dev/cl/752180 https://go.dev/issue/77578 https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk https://linux.oracle.com/cve/CVE-2026-25679.html https://linux.oracle.com/errata/ELSA-2026-9044.html https://nvd.nist.gov/vuln/detail/CVE-2026-25679 https://pkg.go.dev/vuln/GO-2026-4601 https://www.cve.org/CVERecord?id=CVE-2026-25679
stdlib	CVE-2026-32280	HIGH	v1.24.0	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.24.0	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.24.0	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2025-0913	MEDIUM	v1.24.0	1.23.10, 1.24.4	https://go.dev/cl/672396 https://go.dev/issue/73702 https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A https://nvd.nist.gov/vuln/detail/CVE-2025-0913 https://pkg.go.dev/vuln/GO-2025-3750
stdlib	CVE-2025-22870	MEDIUM	v1.24.0	1.23.7, 1.24.1	http://www.openwall.com/lists/oss-security/2025/03/07/2 https://access.redhat.com/security/cve/CVE-2025-22870 https://github.com/golang/go/issues/71984 https://go-review.googlesource.com/q/project:net https://go.dev/cl/654697 https://go.dev/issue/71984 https://groups.google.com/g/golang-announce/c/4t3lzH3I0eI/m/b42ImqrBAQAJ https://nvd.nist.gov/vuln/detail/CVE-2025-22870 https://pkg.go.dev/vuln/GO-2025-3503 https://security.netapp.com/advisory/ntap-20250509-0007 https://security.netapp.com/advisory/ntap-20250509-0007/ https://ubuntu.com/security/notices/USN-7574-1 https://www.cve.org/CVERecord?id=CVE-2025-22870
stdlib	CVE-2025-22871	MEDIUM	v1.24.0	1.23.8, 1.24.2	http://www.openwall.com/lists/oss-security/2025/04/04/4 https://access.redhat.com/errata/RHSA-2025:9635 https://access.redhat.com/security/cve/CVE-2025-22871 https://bugzilla.redhat.com/2358493 https://bugzilla.redhat.com/show_bug.cgi?id=2358493 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22871 https://errata.almalinux.org/9/ALSA-2025-9635.html https://errata.rockylinux.org/RLSA-2025:9635 https://github.com/roadrunner-server/roadrunner https://github.com/roadrunner-server/roadrunner/commit/f269279ee87d0b88127741cad1042389af7605fa https://github.com/roadrunner-server/roadrunner/issues/2166 https://github.com/roadrunner-server/roadrunner/releases/tag/v2025.1.0 https://go.dev/cl/652998 https://go.dev/issue/71988 https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk https://linux.oracle.com/cve/CVE-2025-22871.html https://linux.oracle.com/errata/ELSA-2025-9845.html https://nvd.nist.gov/vuln/detail/CVE-2025-22871 https://pkg.go.dev/vuln/GO-2025-3563 https://www.cve.org/CVERecord?id=CVE-2025-22871
stdlib	CVE-2025-22873	MEDIUM	v1.24.0	1.23.9, 1.24.3	http://www.openwall.com/lists/oss-security/2025/05/06/2 https://access.redhat.com/security/cve/CVE-2025-22873 https://go.dev/cl/670036 https://go.dev/issue/73555 https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ https://nvd.nist.gov/vuln/detail/CVE-2025-22873 https://pkg.go.dev/vuln/GO-2026-4403 https://www.cve.org/CVERecord?id=CVE-2025-22873
stdlib	CVE-2025-4673	MEDIUM	v1.24.0	1.23.10, 1.24.4	https://access.redhat.com/errata/RHSA-2025:15887 https://access.redhat.com/security/cve/CVE-2025-4673 https://bugzilla.redhat.com/2373305 https://bugzilla.redhat.com/show_bug.cgi?id=2373305 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4673 https://errata.almalinux.org/9/ALSA-2025-15887.html https://errata.rockylinux.org/RLSA-2025:15887 https://go.dev/cl/679257 https://go.dev/issue/73816 https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A https://linux.oracle.com/cve/CVE-2025-4673.html https://linux.oracle.com/errata/ELSA-2025-10677.html https://nvd.nist.gov/vuln/detail/CVE-2025-4673 https://pkg.go.dev/vuln/GO-2025-3751 https://ubuntu.com/security/notices/USN-7574-1 https://www.cve.org/CVERecord?id=CVE-2025-4673
stdlib	CVE-2025-47906	MEDIUM	v1.24.0	1.23.12, 1.24.6	http://www.openwall.com/lists/oss-security/2025/08/06/1 https://access.redhat.com/errata/RHSA-2025:22005 https://access.redhat.com/security/cve/CVE-2025-47906 https://bugzilla.redhat.com/2396546 https://bugzilla.redhat.com/show_bug.cgi?id=2396546 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47906 https://errata.almalinux.org/9/ALSA-2025-22005.html https://errata.rockylinux.org/RLSA-2025:22005 https://go.dev/cl/691775 https://go.dev/issue/74466 https://groups.google.com/g/golang-announce/c/x5MKroML2yM https://linux.oracle.com/cve/CVE-2025-47906.html https://linux.oracle.com/errata/ELSA-2025-22668.html https://nvd.nist.gov/vuln/detail/CVE-2025-47906 https://pkg.go.dev/vuln/GO-2025-3956 https://www.cve.org/CVERecord?id=CVE-2025-47906
stdlib	CVE-2025-47912	MEDIUM	v1.24.0	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-47912 https://go.dev/cl/709857 https://go.dev/issue/75678 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-47912 https://pkg.go.dev/vuln/GO-2025-4010 https://www.cve.org/CVERecord?id=CVE-2025-47912
stdlib	CVE-2025-58185	MEDIUM	v1.24.0	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58185 https://github.com/golang/go/commit/8709a41d5ef7321f486a1857f189c3fee20e8edd https://go.dev/cl/709856 https://go.dev/issue/75671 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58185 https://pkg.go.dev/vuln/GO-2025-4011 https://www.cve.org/CVERecord?id=CVE-2025-58185
stdlib	CVE-2025-58186	MEDIUM	v1.24.0	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58186 https://go.dev/cl/709855 https://go.dev/issue/75672 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58186 https://pkg.go.dev/vuln/GO-2025-4012 https://www.cve.org/CVERecord?id=CVE-2025-58186
stdlib	CVE-2025-58187	MEDIUM	v1.24.0	1.24.9, 1.25.3	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58187 https://github.com/golang/go/commit/3fc4c79fdbb17b9b29ea9f8c29dd780df075d4c4 https://go.dev/cl/709854 https://go.dev/issue/75681 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58187 https://pkg.go.dev/vuln/GO-2025-4007 https://www.cve.org/CVERecord?id=CVE-2025-58187
stdlib	CVE-2025-58188	MEDIUM	v1.24.0	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58188 https://github.com/golang/go/commit/6e4007e8cffbb870e6b606307ab7308236ecefb9 https://go.dev/cl/709853 https://go.dev/issue/75675 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58188 https://pkg.go.dev/vuln/GO-2025-4013 https://www.cve.org/CVERecord?id=CVE-2025-58188
stdlib	CVE-2025-58189	MEDIUM	v1.24.0	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58189 https://go.dev/cl/707776 https://go.dev/issue/75652 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58189 https://pkg.go.dev/vuln/GO-2025-4008 https://www.cve.org/CVERecord?id=CVE-2025-58189
stdlib	CVE-2025-61723	MEDIUM	v1.24.0	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-61723 https://github.com/golang/go/commit/5ce8cd16f3859ec5ac4106ad8ec15d6236f4501b https://go.dev/cl/709858 https://go.dev/issue/75676 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-61723 https://pkg.go.dev/vuln/GO-2025-4009 https://www.cve.org/CVERecord?id=CVE-2025-61723
stdlib	CVE-2025-61724	MEDIUM	v1.24.0	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-61724 https://go.dev/cl/709859 https://go.dev/issue/75716 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-61724 https://pkg.go.dev/vuln/GO-2025-4015 https://www.cve.org/CVERecord?id=CVE-2025-61724
stdlib	CVE-2025-61725	MEDIUM	v1.24.0	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-61725 https://go.dev/cl/709860 https://go.dev/issue/75680 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-61725 https://pkg.go.dev/vuln/GO-2025-4006 https://www.cve.org/CVERecord?id=CVE-2025-61725
stdlib	CVE-2025-61727	MEDIUM	v1.24.0	1.24.11, 1.25.5	https://access.redhat.com/security/cve/CVE-2025-61727 https://go.dev/cl/723900 https://go.dev/issue/76442 https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 https://nvd.nist.gov/vuln/detail/CVE-2025-61727 https://pkg.go.dev/vuln/GO-2025-4175 https://www.cve.org/CVERecord?id=CVE-2025-61727
stdlib	CVE-2025-61730	MEDIUM	v1.24.0	1.24.12, 1.25.6	https://go.dev/cl/724120 https://go.dev/issue/76443 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://nvd.nist.gov/vuln/detail/CVE-2025-61730 https://pkg.go.dev/vuln/GO-2026-4340
stdlib	CVE-2026-27142	MEDIUM	v1.24.0	1.25.8, 1.26.1	https://access.redhat.com/security/cve/CVE-2026-27142 https://go.dev/cl/752081 https://go.dev/issue/77954 https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk https://nvd.nist.gov/vuln/detail/CVE-2026-27142 https://pkg.go.dev/vuln/GO-2026-4603 https://www.cve.org/CVERecord?id=CVE-2026-27142
stdlib	CVE-2026-32282	MEDIUM	v1.24.0	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.24.0	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.24.0	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
stdlib	CVE-2026-27139	LOW	v1.24.0	1.25.8, 1.26.1	https://access.redhat.com/security/cve/CVE-2026-27139 https://go.dev/cl/749480 https://go.dev/issue/77827 https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk https://nvd.nist.gov/vuln/detail/CVE-2026-27139 https://pkg.go.dev/vuln/GO-2026-4602 https://www.cve.org/CVERecord?id=CVE-2026-27139
No Misconfigurations found

usr/local/go/bin/go (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found

usr/local/go/bin/gofmt (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found

usr/local/go/pkg/tool/linux_amd64/asm (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found

usr/local/go/pkg/tool/linux_amd64/cgo (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found

usr/local/go/pkg/tool/linux_amd64/compile (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found

usr/local/go/pkg/tool/linux_amd64/cover (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found

usr/local/go/pkg/tool/linux_amd64/fix (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found

usr/local/go/pkg/tool/linux_amd64/link (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found

usr/local/go/pkg/tool/linux_amd64/preprofile (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found

usr/local/go/pkg/tool/linux_amd64/vet (gobinary)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2026-32280	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32280 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32281 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.26.1	1.25.9, 1.26.2	https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870
stdlib	CVE-2026-33810	HIGH	v1.26.1	1.26.2	http://www.openwall.com/lists/oss-security/2026/04/19/4 http://www.openwall.com/lists/oss-security/2026/04/20/1 https://access.redhat.com/security/cve/CVE-2026-33810 https://go.dev/cl/763763 https://go.dev/issue/78332 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-33810 https://pkg.go.dev/vuln/GO-2026-4866 https://www.cve.org/CVERecord?id=CVE-2026-33810
stdlib	CVE-2026-32282	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32282 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.26.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
No Misconfigurations found