Skip to content
OpenAdvisories

Package · Go

github.com/google/go-eventlog

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GO-2026-6893

    Event type spoofing via UntrustedType in github.com/google/go-eventlog

    In github.com/google/go-eventlog/tcg, Event exposes UntrustedType, which returns the raw event type header from the TCG event log without verifying that the event data matches its digest. Callers that dispatch on Event.UntrustedType after ParseAndReplay can b…

    github.com/google/go-eventlog Go