Package · Wolfi

rancher-security-scan-0.9

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.5

CVE-2026-94439

HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the …

Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 8, 2026
High 8.8

CVE-2026-27140

Code execution vulnerability in SWIG code generation in cmd/go

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

Go toolchain cmd/go golang go Debian Ubuntu Azure Linux Alpine Wolfi Go

Apr 8, 2026