Skip to content
OpenAdvisories
High · 8.8 CVE-2026-27140 BIT-golang-2026-27140EUVD-2026-20002GHSA-5w89-2c2x-6x66GO-2026-4871

Code execution vulnerability in SWIG code generation in cmd/go

Published Apr 8, 2026 · Updated Sep 10, 2026 · Assigned by Go

Vendor: Go toolchain Product: cmd/go Package: aactl Package: act Package: actions-runner-controller Package: addon-resizer Package: age Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard Package: amazon-cloudwatch-agent-config-downloader Package: amazon-cloudwatch-agent-config-translator Package: amazon-cloudwatch-agent-operator Package: amazon-cloudwatch-agent-start-amazon-cloudwatch-agent Package: amazon-k8s-cni Package: amazon-k8s-cni-compat Package: amazon-k8s-cni-init Package: amazon-k8s-cni-init-compat Package: apache-exporter Package: apisix-ingress-controller Package: apko Package: argo-cd-3.3 Package: argo-cd-3.3-compat Package: argo-events Package: argo-rollouts Package: argo-workflow-executor-3.7 Package: argo-workflows-3.7 Package: argocd-image-updater Package: atlantis Package: authservice Package: aws-application-networking-k8s Package: aws-efs-csi-driver Package: aws-eks-pod-identity-agent Package: aws-flb-cloudwatch Package: aws-flb-firehose Package: aws-flb-kinesis Package: aws-load-balancer-controller Package: aws-network-policy-agent Package: aws-node-termination-handler Package: aws-nuke Package: aws-privateca-issuer Package: aws-s3-controller Package: aws-signer-notation-plugin Package: aws-sigv4-proxy Package: azure-ipam Package: azure-ipam-dropgz Package: azure-service-operator Package: azure-workload-identity-webhook Package: bank-vaults Package: bank-vaults-template Package: bazelisk Package: bento Package: blobfuse2 Package: blobfuse2-health-monitor Package: bom Package: boring-registry Package: buf Package: buildah Package: caddy Package: cadvisor Package: calico-apiserver-3.31 Package: calico-app-policy-3.31 Package: calico-cni-3.31 Package: calico-felix-3.31 Package: calico-goldmane-3.31 Package: calico-key-cert-provisioner-3.31 Package: calico-kube-controllers-3.31 Package: calico-node-3.31 Package: calico-pod2daemon-3.31 Package: calico-typha-client-3.31 Package: calico-typhad-3.31 Package: calico-whisker-backend-3.31 Package: calicoctl-3.31 Package: capslock Package: cargobump Package: cerbos Package: cerbosctl Package: cert-exporter Package: cert-manager-1.20 Package: cert-manager-acmesolver-1.20 Package: cert-manager-cainjector-1.20 Package: cert-manager-cmctl Package: cert-manager-controller-1.20 Package: cert-manager-csi-driver Package: cert-manager-startupapicheck-1.20 Package: cert-manager-webhook-1.20 Package: certificate-transparency-trillian-ctserver Package: cfssl Package: cfssl-bundle Package: cfssl-certinfo Package: cfssl-json Package: cfssl-mkbundle Package: cfssl-multirootca Package: cfssl-newkey Package: chart-testing Package: chartmuseum Package: checksec Package: chelm Package: chezmoi Package: chisel Package: cilium-1.19 Package: cilium-1.19-clustermesh-apiserver Package: cilium-1.19-hubble-relay Package: cilium-1.19-operator-aws Package: cilium-1.19-operator-generic Package: cilium-cli Package: cis-operator-1.4 Package: clickhouse-operator Package: clickhouse-operator-metrics-exporter Package: cloud-provider-aws-1.31-cloud-controller-manager Package: cloud-provider-aws-1.31-ecr-credential-provider Package: cloud-provider-azure-cloud-controller-manager-1.35 Package: cloud-provider-azure-cloud-node-manager-1.35 Package: cloud-provider-vsphere Package: cloud-sql-proxy-2.16 Package: cloud-sql-proxy-2.21 Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cluster-api-ipam-provider-in-cluster Package: cluster-api-provider-vsphere Package: cluster-autoscaler-1.35 Package: cluster-proportional-autoscaler Package: cni-plugins Package: cni-plugins-aws-k8s-compat Package: cni-plugins-bandwidth Package: cni-plugins-bridge Package: cni-plugins-dhcp Package: cni-plugins-dummy Package: cni-plugins-firewall Package: cni-plugins-host-device Package: cni-plugins-host-local Package: cni-plugins-ipam Package: cni-plugins-ipvlan Package: cni-plugins-loopback Package: cni-plugins-macvlan Package: cni-plugins-main Package: cni-plugins-meta Package: cni-plugins-portmap Package: cni-plugins-ptp Package: cni-plugins-sbr Package: cni-plugins-static Package: cni-plugins-tap Package: cni-plugins-tuning Package: cni-plugins-vlan Package: cni-plugins-vrf Package: configmap-reload Package: conjur-cli Package: consul-k8s-1.9 Package: consul-k8s-1.9-cli Package: container-object-storage-interface-controller Package: container-object-storage-interface-sidecar Package: controller-gen Package: coredns-1.13 Package: coredns-1.14 Package: cortex Package: cosign Package: crane Package: crane-cov Package: cri-tools Package: crictl Package: critest Package: croc Package: crossplane-2.2 Package: crossplane-2.2-crank Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-storage Package: crossplane-provider-family-azure Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctop Package: cue Package: custom-pod-autoscaler Package: custom-pod-autoscaler-operator Package: dapr-daprd-1.17 Package: dapr-injector-1.17 Package: dapr-operator-1.17 Package: dapr-placement-1.17 Package: dapr-scheduler-1.17 Package: dapr-sentry-1.17 Package: dask-gateway-server Package: datadog-agent-7.72 Package: datadog-agent-7.72-fakeintake Package: datadog-agent-7.73 Package: datadog-agent-7.73-fakeintake Package: datadog-cluster-agent-7.72 Package: datadog-cluster-agent-7.73 Package: dataplaneapi Package: db-operator Package: dbmate Package: delve Package: descheduler Package: dex Package: dfc Package: dfc-mcp-server Package: dgraph Package: direnv Package: dive Package: dkron Package: dkron-executor-gcppubsub Package: dkron-executor-grpc Package: dkron-executor-kafka Package: dkron-executor-nats Package: dkron-executor-rabbitmq Package: dkron-processor-files Package: dkron-processor-fluent Package: dkron-processor-log Package: dkron-processor-syslog Package: docker-cli Package: docker-cli-buildx Package: docker-credential-acr-env Package: docker-credential-ecr-login Package: docker-credential-gcr Package: docker-machine-driver-harvester Package: docker-machine-driver-linode Package: dockerize Package: dogstatsd-7.72 Package: dogstatsd-7.73 Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: elvish Package: emissary Package: emissary-apiext Package: envconsul Package: envoy-gateway Package: envoy-gateway-egctl Package: envoy-ratelimit Package: esbuild Package: etcd-3.6 Package: external-secrets-operator-1.1 Package: extism Package: falco-exporter Package: falco-no-driver Package: falcoctl Package: filebrowser Package: fixuid Package: flannel Package: flannel-cni-plugin Package: flux-2.8 Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: flux-notification-controller Package: flux-source-controller Package: fluxcd-kustomize-mutating-webhook Package: fq Package: frp Package: fscrypt Package: fuse-overlayfs-snapshotter Package: fzf Package: gatus Package: gcsfuse Package: gh Package: ghaudit Package: git-credential-oauth Package: git-lfs Package: git-sync Package: gitaly-18.10 Package: gitaly-18.6 Package: gitaly-18.7 Package: gitaly-18.8 Package: gitaly-18.9 Package: gitaly-backup-18.10 Package: gitaly-backup-18.6 Package: gitaly-backup-18.7 Package: gitaly-backup-18.8 Package: gitaly-backup-18.9 Package: gitaly-init-cgroups-18.10 Package: gitaly-init-cgroups-18.6 Package: gitaly-init-cgroups-18.7 Package: gitaly-init-cgroups-18.8 Package: gitaly-init-cgroups-18.9 Package: gitea Package: gitea-compat Package: github-mcp-server Package: gitlab-agent-18.10 Package: gitlab-agent-18.6 Package: gitlab-agent-18.7 Package: gitlab-agent-18.8 Package: gitlab-agent-18.9 Package: gitlab-kas-18.10 Package: gitlab-kas-18.6 Package: gitlab-kas-18.7 Package: gitlab-kas-18.8 Package: gitlab-kas-18.9 Package: gitlab-pages-18.10 Package: gitlab-pages-18.6 Package: gitlab-pages-18.7 Package: gitlab-pages-18.8 Package: gitlab-pages-18.9 Package: gitleaks Package: gitness Package: gitsign Package: gitsign-credential-cache Package: gke-gcloud-auth-plugin Package: go Package: go-1.24 Package: go-1.24-asm Package: go-1.24-covdata Package: go-1.24-cover Package: go-1.24-nm Package: go-1.24-objdump Package: go-1.24-test2json Package: go-1.26 Package: go-bindata Package: go-discover Package: go-jsonnet Package: go-licenses Package: go-md2man Package: gobump Package: gobuster Package: gofumpt Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golang-1.23 Package: golang-1.24 Package: golang-1.24 Package: golang-1.25 Package: golang-1.26 Package: golangci-lint Package: gops Package: goreleaser Package: gostatsd Package: gosu Package: gotestsum Package: govulncheck Package: gpu-feature-discovery Package: grafana-12.4 Package: grafana-agent-operator Package: grafana-mimir-3.0 Package: grafana-mimir-3.0-metaconvert-3.0 Package: grafana-mimir-3.0-mimirtool-3.0 Package: grafana-mimir-3.0-query-tee-3.0 Package: grafana-operator Package: grafana-rollout-operator Package: grpc-health-probe Package: grpcurl Package: haproxy-ingress-0.16 Package: harbor-2.14 Package: harbor-2.14-exporter Package: harbor-2.14-jobservice Package: harbor-2.14-registryctl Package: harbor-cli Package: harbor-scanner-trivy Package: hcloud Package: health-checker-1.35 Package: hello-world-golang Package: helm-3 Package: helm-4 Package: helm-docs Package: helm-mapkubeapis Package: helm-push Package: helm-set-status Package: hey Package: hivemind Package: howdy-go Package: http-echo Package: hubble Package: hubble-ui-backend Package: hugo Package: hugo-extended Package: incert Package: infinispan-operator Package: influx Package: ingress-nginx-controller-1.12 Package: ingress-nginx-controller-1.15 Package: ingress-nginx-custom-error-pages-1.15 Package: ini-file Package: ip-masq-agent Package: ipfs-cluster Package: iptables-wrappers Package: jitsucom-bulker-bulker Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-syncctl Package: juicefs-csi-driver Package: k3d Package: k3d-proxy Package: k3d-tools Package: k8sgpt-operator Package: k8ssandra-client Package: k8ssandra-operator Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kapp Package: kargo Package: karpenter-1.11 Package: katib-controller Package: katib-suggestion-goptuna Package: kbld Package: keda-2.19 Package: keda-2.19-admission-webhooks Package: keda-2.19-metrics-apiserver Package: kind Package: kine Package: knative-client Package: knative-eventing-1.21-channel-controller Package: knative-eventing-1.21-channel-dispatcher Package: knative-eventing-1.21-controller Package: knative-eventing-1.21-filter Package: knative-eventing-1.21-ingress Package: knative-eventing-1.21-jobsink Package: knative-eventing-1.21-mtchannel-broker Package: knative-eventing-1.21-webhook Package: knative-operator-1.21 Package: knative-operator-1.21-webhook Package: knative-serving-1.21-activator Package: knative-serving-1.21-autoscaler Package: knative-serving-1.21-autoscaler-hpa Package: knative-serving-1.21-cleanup Package: knative-serving-1.21-controller Package: knative-serving-1.21-queue Package: knative-serving-1.21-webhook Package: ko Package: kor Package: kots Package: kpt Package: krane Package: kratos Package: kratos-protoc-gen Package: kserve-modelmesh-serving Package: kserve-rest-proxy Package: kube-apiserver-1.34 Package: kube-apiserver-1.35 Package: kube-arangodb-1.4 Package: kube-bench Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.35 Package: kube-fluentd-operator Package: kube-logging-operator-custom-runner Package: kube-proxy-1.34 Package: kube-proxy-1.35 Package: kube-scheduler-1.34 Package: kube-scheduler-1.35 Package: kube-state-metrics Package: kube-vip Package: kube-webhook-certgen-1.15 Package: kubeadm-1.34 Package: kubeadm-1.35 Package: kubebuilder Package: kubecolor Package: kubectl-1.31 Package: kubectl-1.32 Package: kubectl-1.34 Package: kubectl-1.35 Package: kubectl-argo-rollouts Package: kubeflow-access-management Package: kubeflow-admission-webhook Package: kubeflow-notebook-controller Package: kubeflow-profile-controller Package: kubeflow-pvcviewer-controller Package: kubeflow-tensorboard-controller Package: kubelet-1.34 Package: kubelet-1.35 Package: kuberay-operator Package: kuberlr Package: kubernetes-1.34 Package: kubernetes-1.35 Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-health-monitor Package: kubernetes-csi-external-resizer Package: kubernetes-csi-livenessprobe Package: kubernetes-csi-node-driver-registrar-2.16 Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-web Package: kubernetes-event-exporter Package: kubernetes-ingress-defaultbackend Package: kubernetes-release-go-runner Package: kubernetes-replicator Package: kubescape Package: kubescape-operator Package: kubewatch Package: kuma-coredns-1.13 Package: kuma-coredns-1.14 Package: kustomize Package: kwok Package: kwokctl Package: kyverno-1.17 Package: kyverno-background-controller-1.17 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cli-1.17 Package: kyverno-init-container-1.17 Package: kyverno-notation-aws Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-ui Package: kyverno-readiness-checker-1.17 Package: kyverno-reports-controller-1.17 Package: lazydocker Package: lazygit Package: libnvidia-container Package: licenseclassifier Package: linkerd2-cli Package: linkerd2-controller Package: linkerd2-metrics-api Package: linkerd2-proxy-identity Package: linkerd2-proxy-init Package: linkerd2-tap Package: linkerd2-web Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: local-volume-node-cleanup Package: log-counter-1.35 Package: logstash-exporter Package: lvm-driver Package: mage Package: mailpit Package: malcontent Package: manifest-tool Package: mariadb-operator Package: maru Package: mattermost-11.1 Package: mattermost-11.5 Package: mc Package: mcp-grafana Package: memcached-exporter Package: mesosphere-vsphere-csi-driver Package: mesosphere-vsphere-csi-syncer Package: metacontroller Package: metallb Package: metallb-controller Package: metallb-cp-tool Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metrics-agent Package: migrate Package: minify Package: minio-object-browser Package: minio-operator Package: minio-operator-sidecar Package: mkcert Package: mockery Package: mockgen Package: mods Package: mongo-tools Package: mongodb-kubernetes-operator Package: mongodb-kubernetes-operator-readinessprobe Package: mongodb-kubernetes-operator-version-upgrade-post-start-hook Package: mountpoint-s3-csi-driver-2.5 Package: mps-control-daemon Package: multus-cni Package: nats Package: nats-server Package: nats-server-config-reloader Package: nats-top Package: nerdctl Package: net-kourier-1.21 Package: neuvector-dbgen Package: neuvector-scanner Package: neuvector-scanner-task Package: newrelic-fluent-bit-output Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-k8s-metadata-injection Package: newrelic-nri-statsd Package: nfpm Package: nfs-subdir-external-provisioner Package: nginx-prometheus-exporter Package: no-docs-check Package: node-problem-detector-1.35 Package: nodetaint Package: nova Package: nri-apache Package: nri-cassandra Package: nri-cassandra-jdk11 Package: nri-consul Package: nri-couchbase Package: nri-discovery-kubernetes Package: nri-elasticsearch Package: nri-f5 Package: nri-haproxy Package: nri-kafka Package: nri-kafka-jdk11 Package: nri-memcached Package: nri-mongodb Package: nri-mssql Package: nri-mysql Package: nri-nagios Package: nri-nginx Package: nri-postgresql Package: nri-prometheus Package: nri-rabbitmq Package: nri-redis Package: nsc Package: nuclei Package: nvidia-container-toolkit-nvidia-cdi-hook Package: nvidia-container-toolkit-nvidia-container-runtime Package: nvidia-container-toolkit-nvidia-container-runtime-cdi Package: nvidia-container-toolkit-nvidia-container-runtime-hook Package: nvidia-container-toolkit-nvidia-container-runtime-legacy Package: nvidia-container-toolkit-nvidia-ctk Package: nvidia-container-toolkit-nvidia-ctk-installer Package: nvidia-device-plugin Package: oauth2-proxy Package: omnibump Package: opa-envoy Package: openbao Package: openbao-k8s Package: opencost Package: opensearch-k8s-operator Package: opentelemetry-collector Package: opentelemetry-collector-ocb Package: opentelemetry-operator Package: opentelemetry-operator-otel-allocator Package: opentofu-1.9 Package: oras Package: osv-scanner Package: otel-cli Package: overmind Package: package-type-check Package: paranoia Package: pdfcpu Package: percona-server-mongodb-operator Package: percona-server-mongodb-operator-mongodb-healthcheck Package: petname Package: pg_timetable Package: pg_user Package: pgpool2_exporter Package: php-fpm_exporter Package: pluto Package: podman Package: polaris Package: policy-controller Package: policy-controller-tester Package: pombump Package: portieris Package: postgres-operator Package: prometheus-3.10 Package: prometheus-3.8 Package: prometheus-3.9 Package: prometheus-adapter Package: prometheus-admission-webhook Package: prometheus-config-reloader Package: prometheus-operator Package: prometheus-pushgateway Package: promxy Package: protoc-gen-connect-go Package: protoc-gen-go Package: protoc-gen-go-grpc Package: pulumi Package: pulumi-language-go Package: pulumi-language-java Package: pulumi-language-nodejs Package: pulumi-language-python Package: pulumi-language-yaml Package: pvc-autoresizer Package: q Package: rabbitmq-default-user-credential-updater Package: rabbitmq-messaging-topology-operator Package: rancher-2.13 Package: rancher-agent-2.13 Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-helm-3 Package: rancher-loglevel Package: rancher-machine Package: rancher-security-scan-0.9 Package: rancher-system-upgrade-controller Package: rancher-telemetry Package: rancher-webhook-0.10 Package: rclone Package: rclone Package: redis-operator Package: redka Package: regclient-regbot Package: regclient-regctl Package: regclient-regsync Package: render-template Package: renovate Package: rook Package: rpk-26.1.2 Package: rqlite Package: runc Package: s5cmd Package: sbom-convert Package: sbom-scorecard Package: sbomqs Package: scorecard Package: seaweedfs Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-geoipfilter Package: sftpgo-plugin-pubsub Package: shfmt Package: sigstore-scaffolding-cloudsqlproxy Package: sigstore-scaffolding-ctlog-createctconfig Package: sigstore-scaffolding-ctlog-managectroots Package: sigstore-scaffolding-ctlog-verifyfulcio Package: sigstore-scaffolding-fulcio-createcerts Package: sigstore-scaffolding-getoidctoken Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-trillian-createdb Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-createsecret Package: sigstore-scaffolding-tuf-server Package: slsa-verifier Package: smarter-device-manager Package: smokescreen Package: snyk-cli Package: sonobuoy Package: spark-operator Package: speedtest-go Package: spegel Package: spicedb-operator Package: spiffe-helper Package: spire-agent Package: spire-controller-manager Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: spqr Package: sriov-network-device-plugin Package: stakater-reloader Package: step Package: step-ca Package: step-issuer Package: step-kms-plugin Package: stern Package: supercronic Package: swagger Package: syft Package: symlink-check Package: tailscale Package: task Package: temporal Package: temporal-ui-server Package: terraform Package: terraform-docs Package: terraform-mcp-server Package: terraform-provider-aws Package: terraform-provider-azapi Package: terraform-provider-azuread Package: terraform-provider-kubernetes Package: terraform-provider-pagerduty Package: terraform-provider-random Package: terraform-provider-sendgrid Package: terraform-provider-time Package: terraform-provider-tls Package: tetra Package: tetragon Package: tetragon-operator Package: thanos-operator Package: timescaledb-parallel-copy Package: timescaledb-tune Package: timestamp-authority-cli Package: timestamp-authority-server Package: timoni Package: tkn Package: tofu-controller Package: tofu-controller-runner Package: toolchain Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trivy-operator Package: trust-manager Package: trust-package Package: tw Package: twt Package: usrmerge-tool Package: vale Package: vault-benchmark Package: vault-env Package: vault-k8s Package: vault-secrets-webhook Package: velero-plugin-for-aws Package: velero-plugin-for-aws-compat Package: velero-plugin-for-csi Package: velero-plugin-for-csi-compat Package: velero-plugin-for-microsoft-azure Package: vendir Package: verticadb-operator Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-recommender Package: vertical-pod-autoscaler-updater Package: vexctl Package: victoriametrics Package: victoriametrics-operator-config-reloader Package: victoriametrics-vmagent Package: victoriametrics-vmagent-cluster Package: victoriametrics-vmalert Package: victoriametrics-vmalert-cluster Package: victoriametrics-vmauth Package: victoriametrics-vminsert-cluster Package: victoriametrics-vmselect-cluster Package: victoriametrics-vmstorage-cluster Package: volume-modifier-for-k8s Package: vt-cli Package: wait-for-port Package: wal-g-pg Package: wave Package: wazero Package: weaviate Package: wgcf Package: whereabouts Package: wire-go Package: wireguard-go Package: witness Package: wuzz Package: x509-certificate-exporter Package: xcaddy Package: xcover Package: xeol Package: yace Package: yam Package: yq Package: ytt Package: yunikorn-k8shim Package: yunikorn-web Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

Affected products

VendorProductAffectedFixed
Go toolchain cmd/go < 1.25.9, 1.26.0-0 – < 1.26.2 1.25.9

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-1.26 1.26.2-1 —
Debian 13 golang-1.24 No fix yet —
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS golang-1.23 +1 No fix yet —
Ubuntu 25.10 golang-1.23 +2 No fix yet —
Ubuntu 24.04 LTS golang-1.21 +3 No fix yet —
Ubuntu 22.04 LTS golang-1.17 +7 No fix yet —
Ubuntu 20.04 LTS golang-1.13 +5 No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS golang-1.10 No fix yet —
Ubuntu 16.04 LTS golang-1.10 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 golang +7 1.25.9-3.el10_1 RHSA-2026:10217
RHEL 9 golang +7 1.25.9-1.el9_7 RHSA-2026:10219
RHEL 8 delve 1.25.2-1.module+el8.10.0+23746+9db33b5e RHSA-2026:10704
RHEL 8 golang +7 1.25.9-1.module+el8.10.0+24226+c418b32c RHSA-2026:10704
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS golang +7 1.25.9-1.el10_0 RHSA-2026:16024
RHEL 9.6 EUS golang +7 1.25.9-1.el9_6 RHSA-2026:16021
RHEL 9.4 EUS golang +6 1.21.13-16.el9_4 RHSA-2026:16497
RHEL 9.2 E4S golang +6 1.19.13-25.el9_2 RHSA-2026:16498
RHEL 9.0 E4S golang +6 1.17.13-12.el9_0 RHSA-2026:16494
RHEL 8.8 TUS delve 1.9.1-1.module+el8.8.0+16778+5fbb74f5 RHSA-2026:16694
RHEL 8.8 TUS go-toolset 1.19.13-4.module+el8.8.0+23976+18ba1869 RHSA-2026:16694
RHEL 8.8 TUS golang +6 1.19.13-24.module+el8.8.0+24268+9f9e0e19 RHSA-2026:16694
RHEL 8.8 E4S delve 1.9.1-1.module+el8.8.0+16778+5fbb74f5 RHSA-2026:16694
RHEL 8.8 E4S go-toolset 1.19.13-4.module+el8.8.0+23976+18ba1869 RHSA-2026:16694
RHEL 8.8 E4S golang +6 1.19.13-24.module+el8.8.0+24268+9f9e0e19 RHSA-2026:16694
RHEL 8.6 TUS delve 1.7.2-1.module+el8.6.0+12972+ebab5911 RHSA-2026:16697
RHEL 8.6 TUS go-toolset 1.17.13-2.module+el8.6.0+22782+bd95fb4c RHSA-2026:16697
RHEL 8.6 TUS golang +6 1.17.13-16.module+el8.6.0+24266+ace38400 RHSA-2026:16697
RHEL 8.6 E4S delve 1.7.2-1.module+el8.6.0+12972+ebab5911 RHSA-2026:16697
RHEL 8.6 E4S go-toolset 1.17.13-2.module+el8.6.0+22782+bd95fb4c RHSA-2026:16697
RHEL 8.6 E4S golang +6 1.17.13-16.module+el8.6.0+24266+ace38400 RHSA-2026:16697
RHEL 8.6 AUS delve 1.7.2-1.module+el8.6.0+12972+ebab5911 RHSA-2026:16697
RHEL 8.6 AUS go-toolset 1.17.13-2.module+el8.6.0+22782+bd95fb4c RHSA-2026:16697
RHEL 8.6 AUS golang +6 1.17.13-16.module+el8.6.0+24266+ace38400 RHSA-2026:16697
RHEL 8.4 EUS Long Life delve 1.5.0-2.module+el8.4.0+8864+58b0fcdb RHSA-2026:16698
RHEL 8.4 EUS Long Life go-toolset 1.15.14-3.module+el8.4.0+22765+91da4d3f RHSA-2026:16698
RHEL 8.4 EUS Long Life golang +6 1.15.14-22.module+el8.4.0+24267+d2faeddf RHSA-2026:16698
RHEL 8.4 AUS delve 1.5.0-2.module+el8.4.0+8864+58b0fcdb RHSA-2026:16698
RHEL 8.4 AUS go-toolset 1.15.14-3.module+el8.4.0+22765+91da4d3f RHSA-2026:16698
RHEL 8.4 AUS golang +6 1.15.14-22.module+el8.4.0+24267+d2faeddf RHSA-2026:16698

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 delve 1.25.2-1.module_el8.10.0+4074+24330916 ALSA-2026:10704
AlmaLinux 8 golang +7 1.25.9-1.module_el8.10.0+4167+2e2e20dd ALSA-2026:10704

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 golang 1.25.9-3.el10_1 RLSA-2026:10217
Rocky Linux 9 golang 1.25.9-1.el9_7 RLSA-2026:10219
Rocky Linux 8 delve 1.25.2-1.module+el8.10.0+40035+ee0a7047 RLSA-2026:10704
Rocky Linux 8 golang 1.25.9-1.module+el8.10.0+40168+6cb0ea60 RLSA-2026:10704

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES 15 SP7 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES 15 SP6 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES 15 SP6 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES 15 SP5 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES 15 SP5 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLES 15 SP5 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES 15 SP5 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
SLES 15 SP4 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES 15 SP4 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLES 15 SP4 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES 15 SP4 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 go1.25-openssl 1.25.12-160000.1.1 SUSE-SU-2026:22638-1
SLES for SAP 16.0 go1.26-openssl 1.26.4-160000.1.1 SUSE-SU-2026:22572-1
SLES for SAP 15 SP6 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES for SAP 15 SP6 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES for SAP 15 SP5 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES for SAP 15 SP5 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLES for SAP 15 SP5 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES for SAP 15 SP5 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
SLES for SAP 15 SP4 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLES for SAP 15 SP4 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLES for SAP 15 SP4 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLES for SAP 15 SP4 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
SLES 16.0 go1.25-openssl 1.25.12-160000.1.1 SUSE-SU-2026:22638-1
SLES 16.0 go1.26-openssl 1.26.4-160000.1.1 SUSE-SU-2026:22572-1
SLE HPC 15 SP5 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLE HPC 15 SP5 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLE HPC 15 SP5 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLE HPC 15 SP5 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1
SLE HPC 15 SP4 go1.25 1.25.9-150000.1.35.1 SUSE-SU-2026:1321-1
SLE HPC 15 SP4 go1.25-openssl 1.25.9-150000.1.21.1 SUSE-SU-2026:1581-1
SLE HPC 15 SP4 go1.26 1.26.2-150000.1.9.1 SUSE-SU-2026:1320-1
SLE HPC 15 SP4 go1.26-openssl 1.26.2-150000.1.6.1 SUSE-SU-2026:1580-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed coredns 1.14.3-1.1 openSUSE-SU-2026:10673-1
openSUSE Tumbleweed go1.25 1.25.9-1.1 openSUSE-SU-2026:10514-1
openSUSE Tumbleweed go1.26 1.26.2-1.1 openSUSE-SU-2026:10525-1
openSUSE Leap 16.0 go1.25 1.25.9-160000.1.1 openSUSE-SU-2026:20570-1
openSUSE Leap 16.0 go1.25-openssl 1.25.12-160000.1.1 openSUSE-SU-2026:21319-1
openSUSE Leap 16.0 go1.26 1.26.2-160000.1.1 openSUSE-SU-2026:20571-1
openSUSE Leap 16.0 go1.26-openssl 1.26.4-160000.1.1 openSUSE-SU-2026:21254-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.26.2-r0 —
Alpine v3.24 rclone 1.73.5-r0 —
Alpine v3.23 go 1.25.9-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 golang +6 1.25.9-1.amzn2023.0.1 ALAS2023-2026-1593
Amazon Linux 2 golang +6 1.25.9-1.amzn2.0.1 ALAS2-2026-3259

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 golang +7 1.25.9-3.el10_1 ELSA-2026-10217
Oracle Linux 9 golang +7 1.25.9-1.el9_7 ELSA-2026-10219
Oracle Linux 8 delve 1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd ELSA-2026-10704
Oracle Linux 8 golang +7 1.25.9-1.module+el8.10.0+90881+305b00ae ELSA-2026-10704

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r53 —
Wolfi rolling act 0.2.87-r2 —
Wolfi rolling actions-runner-controller 0.14.1-r0 —
Wolfi rolling addon-resizer 1.8.23-r17 —
Wolfi rolling age 1.3.1-r5 —
Wolfi rolling amass 5.1.1-r0 —
Wolfi rolling amazon-cloudwatch-agent +4 1.300066.1-r2 —
Wolfi rolling amazon-cloudwatch-agent-operator 3.4.2-r3 —
Wolfi rolling amazon-k8s-cni +3 1.21.1-r5 —
Wolfi rolling apache-exporter 1.0.12-r6 —
Wolfi rolling apisix-ingress-controller 2.0.1-r10 —
Wolfi rolling apko 1.2.15-r0 —
Wolfi rolling argo-cd-3.3 3.3.6-r4 —
Wolfi rolling argo-cd-3.3-compat 3.3.7-r0 —
Wolfi rolling argo-events 1.9.10-r24 —
Wolfi rolling argo-rollouts +1 1.9.0-r7 —
Wolfi rolling argo-workflows-3.7 +1 3.7.13-r1 —
Wolfi rolling argocd-image-updater 1.1.1-r8 —
Wolfi rolling atlantis 0.42.0-r0 —
Wolfi rolling authservice 1.1.5-r7 —
Wolfi rolling aws-application-networking-k8s 2.0.2-r8 —
Wolfi rolling aws-efs-csi-driver 3.2.0-r1 —
Wolfi rolling aws-eks-pod-identity-agent 0.1.37-r0 —
Wolfi rolling aws-flb-cloudwatch 1.9.5-r2 —
Wolfi rolling aws-flb-firehose 1.7.2-r26 —
Wolfi rolling aws-flb-kinesis 1.10.4-r2 —
Wolfi rolling aws-load-balancer-controller 3.2.1-r0 —
Wolfi rolling aws-network-policy-agent 1.3.2-r2 —
Wolfi rolling aws-node-termination-handler 1.25.6-r9 —
Wolfi rolling aws-nuke 3.65.0-r0 —
Wolfi rolling aws-privateca-issuer 1.8.1-r7 —
Wolfi rolling aws-s3-controller 1.3.2-r5 —
Wolfi rolling aws-signer-notation-plugin 1.0.2292-r15 —
Wolfi rolling aws-sigv4-proxy 1.11.1-r9 —
Wolfi rolling azure-ipam +1 0.4.0-r23 —
Wolfi rolling azure-service-operator 2.18.0-r6 —
Wolfi rolling azure-workload-identity-webhook 1.5.1-r20 —
Wolfi rolling bank-vaults +1 1.32.1-r19 —
Wolfi rolling bazelisk 1.29.0-r2 —
Wolfi rolling bento 1.17.0-r1 —
Wolfi rolling blobfuse2 +1 2.4.2-r13 —
Wolfi rolling bom 0.7.1-r21 —
Wolfi rolling boring-registry 0.17.0-r4 —
Wolfi rolling buf 1.68.3-r0 —
Wolfi rolling buildah 1.44.0-r0 —
Wolfi rolling caddy 2.11.2-r11 —
Wolfi rolling cadvisor 0.56.2-r15 —
Wolfi rolling calicoctl-3.31 +12 3.31.5-r2 —
Wolfi rolling capslock 0.3.1-r5 —
Wolfi rolling cargobump 0.1.1-r3 —
Wolfi rolling cerbos +1 0.53.0-r6 —
Wolfi rolling cert-exporter +1 2.18.0-r5 —
Wolfi rolling cert-manager-1.20 +5 1.20.2-r0 —
Wolfi rolling cert-manager-cmctl 2.4.1-r5 —
Wolfi rolling cert-manager-csi-driver +1 0.15.0-r1 —
Wolfi rolling certificate-transparency-trillian-ctserver 1.3.3-r10 —
Wolfi rolling cfssl +6 1.6.5-r35 —
Wolfi rolling chart-testing 3.14.0-r16 —
Wolfi rolling chartmuseum 0.16.5-r10 —
Wolfi rolling checksec 3.1.0-r5 —
Wolfi rolling chezmoi 2.70.4-r2 —
Wolfi rolling chisel 1.11.5-r5 —
Wolfi rolling cilium-1.19 +1 1.19.4-r4 —
Wolfi rolling cilium-1.19-hubble-relay +2 1.19.3-r0 —
Wolfi rolling cilium-cli 0.19.4-r0 —
Wolfi rolling cis-operator-1.4 1.4.8-r7 —
Wolfi rolling clickhouse-operator +1 0.27.0-r2 —
Wolfi rolling cloud-provider-aws-1.31-ecr-credential-provider +1 1.31.9-r12 —
Wolfi rolling cloud-provider-azure-cloud-node-manager-1.35 +1 1.35.5-r2 —
Wolfi rolling cloud-provider-vsphere 1.35.1-r2 —
Wolfi rolling cloud-sql-proxy-2.16 2.16.0-r23 —
Wolfi rolling cloud-sql-proxy-2.21 2.21.3-r5 —
Wolfi rolling cloudnative-pg +1 1.29.1-r3 —
Wolfi rolling cluster-api-ipam-provider-in-cluster 1.1.0-r5 —
Wolfi rolling cluster-api-provider-vsphere 1.15.2-r10 —
Wolfi rolling cluster-autoscaler-1.35 1.35.0-r4 —
Wolfi rolling cluster-proportional-autoscaler 1.10.3-r4 —
Wolfi rolling cni-plugins +22 1.9.1-r3 —
Wolfi rolling configmap-reload 0.15.0-r14 —
Wolfi rolling conjur-cli 9.2.1-r0 —
Wolfi rolling consul-k8s-1.9 +1 1.9.8-r2 —
Wolfi rolling container-object-storage-interface-sidecar +1 0.2.2-r13 —
Wolfi rolling controller-gen 0.21.0-r1 —
Wolfi rolling coredns-1.13 +1 1.13.2-r4 —
Wolfi rolling coredns-1.14 +1 1.14.2-r6 —
Wolfi rolling cortex 1.21.0-r3 —
Wolfi rolling cosign 3.0.5-r9 —
Wolfi rolling crane +2 0.21.6-r2 —
Wolfi rolling crictl +2 1.35.0-r8 —
Wolfi rolling croc 10.4.2-r2 —
Wolfi rolling crossplane-2.2 +1 2.2.0-r8 —
Wolfi rolling crossplane-provider-azure-managedidentity 2.5.0-r12 —
Wolfi rolling crossplane-provider-azure-sql +1 2.5.0-r11 —
Wolfi rolling crossplane-provider-family-azure +1 2.5.0-r10 —
Wolfi rolling crossplane-provider-keycloak 2.19.0-r7 —
Wolfi rolling ctop 0.7.7-r35 —
Wolfi rolling cue 0.16.1-r4 —
Wolfi rolling custom-pod-autoscaler 2.12.2-r11 —
Wolfi rolling custom-pod-autoscaler-operator 1.4.2-r10 —
Wolfi rolling dapr-daprd-1.17 +5 1.17.5-r0 —
Wolfi rolling dask-gateway-server 2026.3.0-r1 —
Wolfi rolling dataplaneapi 3.3.2-r2 —
Wolfi rolling db-operator 2.16.0-r13 —
Wolfi rolling dbmate 2.33.0-r2 —
Wolfi rolling delve +1 1.26.2-r0 —
Wolfi rolling descheduler +1 0.36.0-r2 —
Wolfi rolling dex 2.45.1-r6 —
Wolfi rolling dfc +1 0.10.0-r8 —
Wolfi rolling dgraph 25.3.2-r0 —
Wolfi rolling direnv 2.37.1-r10 —
Wolfi rolling dive 0.13.1-r17 —
Wolfi rolling dkron +9 4.1.0-r2 —
Wolfi rolling docker-cli 29.4.1-r0 —
Wolfi rolling docker-cli-buildx 0.34.1-r3 —
Wolfi rolling docker-credential-acr-env 0.7.0-r31 —
Wolfi rolling docker-credential-ecr-login 0.12.0-r6 —
Wolfi rolling docker-credential-gcr 2.1.32-r4 —
Wolfi rolling docker-machine-driver-harvester 1.0.6-r11 —
Wolfi rolling docker-machine-driver-linode 0.1.16-r1 —
Wolfi rolling dockerize 0.12.0-r0 —
Wolfi rolling dogstatsd-7.72 +3 7.72.4-r17 —
Wolfi rolling dogstatsd-7.73 +3 7.73.3-r9 —
Wolfi rolling doppler-kubernetes-operator 1.7.1-r10 —
Wolfi rolling dynamic-localpv-provisioner 4.5.0-r1 —
Wolfi rolling eksctl 0.225.0-r4 —
Wolfi rolling elvish 0.21.0-r14 —
Wolfi rolling emissary +1 4.1.0-r1 —
Wolfi rolling envconsul 0.13.4-r14 —
Wolfi rolling envoy-gateway 1.7.1-r4 —
Wolfi rolling envoy-gateway-egctl 1.7.2-r0 —
Wolfi rolling envoy-ratelimit 0.0.0_git20260322-r3 —
Wolfi rolling esbuild 0.28.0-r4 —
Wolfi rolling etcd-3.6 3.6.10-r3 —
Wolfi rolling external-secrets-operator-1.1 1.1.1-r6 —
Wolfi rolling extism 1.6.3-r12 —
Wolfi rolling falco-exporter 0.8.7-r18 —
Wolfi rolling falco-no-driver 0.43.0-r7 —
Wolfi rolling falcoctl 0.12.2-r10 —
Wolfi rolling filebrowser 2.63.5-r2 —
Wolfi rolling fixuid 0.6.0-r14 —
Wolfi rolling flannel 0.28.4-r4 —
Wolfi rolling flannel-cni-plugin 1.9.1.1-r3 —
Wolfi rolling flux-2.8 2.8.8-r2 —
Wolfi rolling flux-helm-controller 1.5.5-r2 —
Wolfi rolling flux-image-automation-controller 1.1.1-r11 —
Wolfi rolling flux-image-reflector-controller 1.1.2-r2 —
Wolfi rolling flux-notification-controller 1.8.3-r3 —
Wolfi rolling flux-source-controller 1.8.2-r4 —
Wolfi rolling fluxcd-kustomize-mutating-webhook 0.11.0-r5 —
Wolfi rolling fq 0.17.0-r8 —
Wolfi rolling frp 0.69.1-r0 —
Wolfi rolling fscrypt 0.3.6-r9 —
Wolfi rolling fuse-overlayfs-snapshotter 2.1.7-r11 —
Wolfi rolling fzf 0.73.1-r1 —
Wolfi rolling gatus 5.35.0-r8 —
Wolfi rolling gcsfuse 2.12.2-r22 —
Wolfi rolling gh 2.90.0-r0 —
Wolfi rolling ghaudit 0.4.0-r22 —
Wolfi rolling git-credential-oauth 0.17.2-r4 —
Wolfi rolling git-lfs 3.7.1-r14 —
Wolfi rolling git-sync 4.7.0-r0 —
Wolfi rolling gitaly-18.10 +3 18.10.3-r1 —
Wolfi rolling gitaly-18.6 +2 18.6.6-r9 —
Wolfi rolling gitaly-18.7 +5 18.7.6-r1 —
Wolfi rolling gitaly-18.8 18.8.9-r2 —
Wolfi rolling gitaly-18.9 +4 18.9.8-r1 —
Wolfi rolling gitea +1 1.26.2-r3 —
Wolfi rolling github-mcp-server 1.1.2-r0 —
Wolfi rolling gitlab-agent-18.10 18.10.7-r0 —
Wolfi rolling gitlab-agent-18.9 18.9.5-r1 —
Wolfi rolling gitlab-kas-18.6 +1 18.6.6-r7 —
Wolfi rolling gitlab-kas-18.8 +4 18.8.10-r1 —
Wolfi rolling gitlab-pages-18.10 18.10.7-r1 —
Wolfi rolling gitlab-pages-18.6 18.6.6-r4 —
Wolfi rolling gitleaks 8.30.1-r13 —
Wolfi rolling gitness 3.3.0-r20 —
Wolfi rolling gitsign +1 0.16.0-r6 —
Wolfi rolling gke-gcloud-auth-plugin 0.1.0-r16 —
Wolfi rolling go-1.24 +7 No fix yet —
Wolfi rolling go-bindata 3.1.3-r38 —
Wolfi rolling go-discover 0_git20260413-r0 —
Wolfi rolling go-jsonnet 0.22.0-r4 —
Wolfi rolling go-licenses 2.0.1-r9 —
Wolfi rolling go-md2man 2.0.7-r12 —
Wolfi rolling gobump 0.9.4-r4 —
Wolfi rolling gobuster 3.8.2-r13 —
Wolfi rolling gofumpt 0.9.2-r7 —
Wolfi rolling golangci-lint 2.11.4-r3 —
Wolfi rolling gops 0.3.29-r9 —
Wolfi rolling goreleaser 2.15.3-r1 —
Wolfi rolling gostatsd 28.3.0-r30 —
Wolfi rolling gosu 1.19-r10 —
Wolfi rolling gotestsum 1.13.0-r9 —
Wolfi rolling govulncheck 1.3.0-r0 —
Wolfi rolling grafana-12.4 12.4.2-r5 —
Wolfi rolling grafana-agent-operator 0.44.8-r3 —
Wolfi rolling grafana-mimir-3.0 +3 3.0.5-r5 —
Wolfi rolling grafana-operator 5.22.2-r4 —
Wolfi rolling grafana-rollout-operator 0.37.0-r1 —
Wolfi rolling grpc-health-probe 0.4.48-r1 —
Wolfi rolling grpcurl 1.9.3-r22 —
Wolfi rolling haproxy-ingress-0.16 0.16.1-r0 —
Wolfi rolling harbor-2.14 +3 2.14.3-r5 —
Wolfi rolling harbor-cli 0.0.22-r0 —
Wolfi rolling hcloud 1.62.2-r0 —
Wolfi rolling health-checker-1.35 +1 1.35.2-r10 —
Wolfi rolling hello-world-golang 1.3-r26 —
Wolfi rolling helm-3 3.22.0-r0 —
Wolfi rolling helm-4 4.1.4-r1 —
Wolfi rolling helm-docs 1.14.2-r22 —
Wolfi rolling helm-mapkubeapis 0.6.1-r19 —
Wolfi rolling helm-push 0.11.1-r8 —
Wolfi rolling helm-set-status 0.3.0-r14 —
Wolfi rolling hey 0.1.5-r5 —
Wolfi rolling hivemind 1.1.0-r17 —
Wolfi rolling howdy-go 2.3-r1 —
Wolfi rolling http-echo 1.0.0-r24 —
Wolfi rolling hubble 1.18.6-r6 —
Wolfi rolling hubble-ui-backend 0.13.5-r4 —
Wolfi rolling hugo 0.162.1-r0 —
Wolfi rolling hugo-extended 0.160.1-r1 —
Wolfi rolling incert 0.5.0-r17 —
Wolfi rolling infinispan-operator 2.5.10-r1 —
Wolfi rolling influx 2.7.5-r16 —
Wolfi rolling ingress-nginx-controller-1.12 1.12.8-r8 —
Wolfi rolling ini-file 1.4.9-r13 —
Wolfi rolling ip-masq-agent 2.12.0-r27 —
Wolfi rolling ipfs-cluster 1.1.6-r2 —
Wolfi rolling iptables-wrappers 3-r0 —
Wolfi rolling jitsucom-bulker-bulker +4 2.11.913-r29 —
Wolfi rolling juicefs-csi-driver 0.31.4-r2 —
Wolfi rolling k3d +2 5.8.3-r31 —
Wolfi rolling k8sgpt-operator 0.2.27-r5 —
Wolfi rolling k8ssandra-client 0.8.11-r5 —
Wolfi rolling k8ssandra-operator 1.32.1-r1 —
Wolfi rolling kaf 0.2.14-r5 —
Wolfi rolling kafka-proxy 0.4.3-r16 —
Wolfi rolling kafka_exporter 1.9.0-r53 —
Wolfi rolling kapp 0.65.3-r2 —
Wolfi rolling kargo 1.10.5-r0 —
Wolfi rolling karpenter-1.11 1.11.1-r0 —
Wolfi rolling katib-controller +1 0.19.0-r17 —
Wolfi rolling kbld 0.48.1-r0 —
Wolfi rolling keda-2.19 +2 2.19.0-r11 —
Wolfi rolling kind 0.31.0-r11 —
Wolfi rolling kine 0.14.16-r1 —
Wolfi rolling knative-client 1.22.0-r3 —
Wolfi rolling knative-eventing-1.21-filter +7 1.21.2-r1 —
Wolfi rolling knative-operator-1.21 +8 1.21.2-r3 —
Wolfi rolling ko 0.18.1-r17 —
Wolfi rolling kor 0.6.7-r9 —
Wolfi rolling kots 1.130.0-r4 —
Wolfi rolling kpt 1.0.0_beta55-r24 —
Wolfi rolling kratos +1 2.9.2-r5 —
Wolfi rolling kserve-modelmesh-serving 0.12.0-r31 —
Wolfi rolling kserve-rest-proxy 0.12.0-r22 —
Wolfi rolling kube-arangodb-1.4 1.4.1-r14 —
Wolfi rolling kube-bench 0.15.0-r11 —
Wolfi rolling kube-fluentd-operator 1.18.2-r65 —
Wolfi rolling kube-logging-operator-custom-runner 0.16.0-r2 —
Wolfi rolling kube-state-metrics 2.19.0-r2 —
Wolfi rolling kube-vip 1.2.0-r0 —
Wolfi rolling kube-webhook-certgen-1.15 +2 1.15.6-r0 —
Wolfi rolling kubeadm-1.34 +7 1.34.7-r0 —
Wolfi rolling kubeadm-1.35 +7 1.35.4-r0 —
Wolfi rolling kubebuilder 4.13.1-r1 —
Wolfi rolling kubecolor 0.5.3-r7 —
Wolfi rolling kubectl-1.32 1.32.13-r1 —
Wolfi rolling kubeflow-access-management +5 1.10.0-r24 —
Wolfi rolling kuberay-operator +1 1.6.0-r2 —
Wolfi rolling kuberlr 0.6.1-r14 —
Wolfi rolling kubernetes-csi-driver-nfs 4.13.2-r6 —
Wolfi rolling kubernetes-csi-external-attacher 4.11.0-r9 —
Wolfi rolling kubernetes-csi-external-health-monitor 0.18.0-r0 —
Wolfi rolling kubernetes-csi-external-resizer 2.1.0-r8 —
Wolfi rolling kubernetes-csi-node-driver-registrar-2.16 2.16.0-r11 —
Wolfi rolling kubernetes-dashboard 7.14.0-r5 —
Wolfi rolling kubernetes-dashboard-api +1 1.14.0-r6 —
Wolfi rolling kubernetes-dashboard-auth 1.4.0-r12 —
Wolfi rolling kubernetes-dashboard-metrics-scraper 1.2.2-r20 —
Wolfi rolling kubernetes-dashboard-web 1.7.0-r23 —
Wolfi rolling kubernetes-event-exporter 1.7-r56 —
Wolfi rolling kubernetes-ingress-defaultbackend 1.38.6-r1 —
Wolfi rolling kubernetes-release-go-runner 0.21.1-r3 —
Wolfi rolling kubernetes-replicator 2.12.3-r3 —
Wolfi rolling kubescape 4.0.3-r3 —
Wolfi rolling kubescape-operator 0.2.139-r0 —
Wolfi rolling kubewatch +1 2.13.0-r2 —
Wolfi rolling kustomize 5.8.1-r3 —
Wolfi rolling kwok +1 0.7.0-r24 —
Wolfi rolling kyverno-1.17 +7 1.17.1-r15 —
Wolfi rolling kyverno-notation-aws 1.1-r56 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin 1.6.4-r28 —
Wolfi rolling kyverno-policy-reporter-ui 2.5.1-r9 —
Wolfi rolling lazydocker 0.25.2-r3 —
Wolfi rolling lazygit 0.61.1-r0 —
Wolfi rolling libnvidia-container 1.19.0-r0 —
Wolfi rolling licenseclassifier 2.0.0-r13 —
Wolfi rolling linkerd2-cli +5 26.4.3-r0 —
Wolfi rolling linkerd2-proxy-init 2.4.9-r0 —
Wolfi rolling litefs 0.5.14-r11 —
Wolfi rolling litestream 0.5.11-r6 —
Wolfi rolling local-path-provisioner 0.0.36-r1 —
Wolfi rolling local-static-provisioner +1 2.8.0-r20 —
Wolfi rolling log-counter-1.35 1.35.2-r14 —
Wolfi rolling logstash-exporter 1.9.1-r11 —
Wolfi rolling lvm-driver 1.8.1-r9 —
Wolfi rolling mage 1.17.2-r0 —
Wolfi rolling mailpit 1.30.1-r2 —
Wolfi rolling malcontent 1.22.0-r1 —
Wolfi rolling manifest-tool 2.2.2-r2 —
Wolfi rolling mariadb-operator 26.3.0-r7 —
Wolfi rolling maru 0.6.0-r15 —
Wolfi rolling mattermost-11.1 11.1.3-r3 —
Wolfi rolling mattermost-11.5 11.5.1-r6 —
Wolfi rolling mc 0.20250813.083541-r14 —
Wolfi rolling mcp-grafana 0.11.6-r0 —
Wolfi rolling memcached-exporter 0.16.0-r1 —
Wolfi rolling mesosphere-vsphere-csi-driver +1 3.5.0-r15 —
Wolfi rolling metacontroller 4.15.0-r4 —
Wolfi rolling metallb +5 0.15.3-r10 —
Wolfi rolling metrics-agent 2.14.14-r0 —
Wolfi rolling migrate 4.19.1-r16 —
Wolfi rolling minify 2.24.13-r3 —
Wolfi rolling minio-object-browser 2.0.4-r11 —
Wolfi rolling minio-operator +1 7.1.1-r22 —
Wolfi rolling mkcert 1.4.4-r31 —
Wolfi rolling mockery 3.7.0-r4 —
Wolfi rolling mockgen 0.6.0-r10 —
Wolfi rolling mods 1.8.1-r13 —
Wolfi rolling mongo-tools 100.16.0-r2 —
Wolfi rolling mongodb-kubernetes-operator +2 0.13.0-r13 —
Wolfi rolling mountpoint-s3-csi-driver-2.5 2.5.0-r7 —
Wolfi rolling mps-control-daemon +1 0.19.0-r3 —
Wolfi rolling multus-cni 4.2.4-r11 —
Wolfi rolling nats 0.3.2-r3 —
Wolfi rolling nats-server 2.14.1-r1 —
Wolfi rolling nats-server-config-reloader 0.23.0-r1 —
Wolfi rolling nats-top 0.6.4-r3 —
Wolfi rolling nerdctl 2.3.1-r3 —
Wolfi rolling net-kourier-1.21 1.21.0-r6 —
Wolfi rolling neuvector-dbgen 0_git20260529-r0 —
Wolfi rolling neuvector-scanner +1 4.179-r0 —
Wolfi rolling newrelic-fluent-bit-output 3.4.1-r3 —
Wolfi rolling newrelic-infra-operator 0.27.1-r0 —
Wolfi rolling newrelic-infrastructure-agent 1.76.1-r0 —
Wolfi rolling newrelic-k8s-metadata-injection 1.42.2-r1 —
Wolfi rolling nfpm 2.46.3-r6 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r41 —
Wolfi rolling nginx-prometheus-exporter 1.5.1-r8 —
Wolfi rolling nodetaint 0.0.5-r3 —
Wolfi rolling nova 3.11.14-r3 —
Wolfi rolling nri-apache 1.17.1-r1 —
Wolfi rolling nri-cassandra +1 2.20.0-r1 —
Wolfi rolling nri-consul 2.10.1-r0 —
Wolfi rolling nri-couchbase 2.11.0-r2 —
Wolfi rolling nri-discovery-kubernetes 1.14.3-r1 —
Wolfi rolling nri-elasticsearch 6.1.0-r2 —
Wolfi rolling nri-f5 +1 2.10.0-r2 —
Wolfi rolling nri-haproxy 3.3.0-r2 —
Wolfi rolling nri-kafka +1 3.19.0-r1 —
Wolfi rolling nri-memcached 2.9.1-r3 —
Wolfi rolling nri-mongodb 2.14.0-r2 —
Wolfi rolling nri-mssql +1 2.28.0-r2 —
Wolfi rolling nri-mysql 1.20.0-r4 —
Wolfi rolling nri-nagios 2.13.1-r1 —
Wolfi rolling nri-nginx 3.8.1-r3 —
Wolfi rolling nri-postgresql 2.28.0-r1 —
Wolfi rolling nri-rabbitmq 2.17.1-r1 —
Wolfi rolling nri-redis 1.13.0-r3 —
Wolfi rolling nsc 2.14.0-r1 —
Wolfi rolling nuclei 3.8.0-r9 —
Wolfi rolling nvidia-container-toolkit-nvidia-ctk +3 1.19.0-r3 —
Wolfi rolling nvidia-device-plugin 0.19.2-r0 —
Wolfi rolling oauth2-proxy 7.15.2-r0 —
Wolfi rolling omnibump 0.12.5-r0 —
Wolfi rolling opa-envoy 1.15.2-r2 —
Wolfi rolling openbao 2.5.2-r3 —
Wolfi rolling openbao-k8s 1.4.0-r52 —
Wolfi rolling opencost 1.120.0-r0 —
Wolfi rolling opensearch-k8s-operator 2.8.0-r15 —
Wolfi rolling opentelemetry-operator +1 0.148.0-r3 —
Wolfi rolling opentofu-1.9 1.9.4-r13 —
Wolfi rolling oras 1.3.2-r3 —
Wolfi rolling osv-scanner 2.3.5-r1 —
Wolfi rolling otel-cli 0.4.5-r23 —
Wolfi rolling overmind 2.5.1-r23 —
Wolfi rolling paranoia 0.5.0-r7 —
Wolfi rolling pdfcpu 0.12.1-r2 —
Wolfi rolling percona-server-mongodb-operator +1 1.22.0-r13 —
Wolfi rolling petname 2.12-r6 —
Wolfi rolling pg_timetable 6.3.0-r1 —
Wolfi rolling pg_user 1.1.1-r13 —
Wolfi rolling pgpool2_exporter 1.2.2-r22 —
Wolfi rolling php-fpm_exporter 2.2.0-r25 —
Wolfi rolling pluto 5.23.6-r3 —
Wolfi rolling podman 5.8.2-r0 —
Wolfi rolling polaris 10.1.7-r2 —
Wolfi rolling policy-controller +1 0.15.1-r4 —
Wolfi rolling pombump 0.0.16-r9 —
Wolfi rolling portieris +1 0.14.0-r1 —
Wolfi rolling postgres-operator 1.15.1-r12 —
Wolfi rolling prometheus-3.10 3.10.0-r5 —
Wolfi rolling prometheus-3.8 3.8.1-r4 —
Wolfi rolling prometheus-3.9 3.9.1-r6 —
Wolfi rolling prometheus-adapter 0.12.0-r25 —
Wolfi rolling prometheus-operator +2 0.90.1-r3 —
Wolfi rolling prometheus-pushgateway 1.11.3-r0 —
Wolfi rolling promxy 0.0.93-r18 —
Wolfi rolling protoc-gen-connect-go +3 1.19.1-r1 —
Wolfi rolling protoc-gen-go 1.36.11-r7 —
Wolfi rolling protoc-gen-go-grpc 1.6.1-r3 —
Wolfi rolling pulumi +3 3.229.0-r4 —
Wolfi rolling pulumi-language-java 1.22.0-r4 —
Wolfi rolling pulumi-language-yaml 1.35.0-r2 —
Wolfi rolling pvc-autoresizer 0.20.0-r3 —
Wolfi rolling q 0.19.12-r5 —
Wolfi rolling rabbitmq-default-user-credential-updater 1.0.14-r2 —
Wolfi rolling rabbitmq-messaging-topology-operator 1.19.2-r3 —
Wolfi rolling rancher-2.13 2.13.4-r4 —
Wolfi rolling rancher-agent-2.13 2.13.4-r3 —
Wolfi rolling rancher-fleet-cli +2 0.15.2-r1 —
Wolfi rolling rancher-helm-3 3.20.0-r13 —
Wolfi rolling rancher-loglevel 0.1.6-r15 —
Wolfi rolling rancher-machine 0.15.0.142-r3 —
Wolfi rolling rancher-security-scan-0.9 0.9.0-r5 —
Wolfi rolling rancher-system-upgrade-controller 0.19.0-r6 —
Wolfi rolling rancher-telemetry 0.6.2-r20 —
Wolfi rolling rancher-webhook-0.10 0.10.0-r1 —
Wolfi rolling rclone 1.74.2-r1 —
Wolfi rolling redis-operator 0.25.0-r2 —
Wolfi rolling redka 1.0.1-r1 —
Wolfi rolling regclient-regbot 0.11.2-r4 —
Wolfi rolling regclient-regctl +1 0.11.3-r0 —
Wolfi rolling render-template 1.0.9-r8 —
Wolfi rolling renovate 43.138.1-r0 —
Wolfi rolling rook 1.19.4-r0 —
Wolfi rolling rpk-26.1.2 26.1.2-r1 —
Wolfi rolling rqlite 10.2.0-r0 —
Wolfi rolling runc 1.4.2-r4 —
Wolfi rolling s5cmd 2.3.0-r18 —
Wolfi rolling sbom-convert 0.0.7-r14 —
Wolfi rolling sbom-scorecard 0.0.7-r36 —
Wolfi rolling sbomqs 2.0.6-r1 —
Wolfi rolling scorecard 5.4.0-r16 —
Wolfi rolling seaweedfs 4.20-r0 —
Wolfi rolling secrets-store-csi-driver-provider-aws 3.1.0-r2 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.7.2-r13 —
Wolfi rolling sftpgo 2.7.1-r7 —
Wolfi rolling sftpgo-plugin-auth 1.0.15-r0 —
Wolfi rolling sftpgo-plugin-eventsearch 1.0.22-r6 —
Wolfi rolling sftpgo-plugin-eventstore 1.0.23-r3 —
Wolfi rolling sftpgo-plugin-geoipfilter 1.0.13-r0 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.17-r0 —
Wolfi rolling shfmt 3.13.1-r1 —
Wolfi rolling sigstore-scaffolding-tuf-server +12 0.7.31-r11 —
Wolfi rolling slsa-verifier 2.7.1-r17 —
Wolfi rolling smarter-device-manager 1.20.11-r32 —
Wolfi rolling smokescreen 0_git20260409-r1 —
Wolfi rolling snyk-cli 1.1304.0-r0 —
Wolfi rolling sonobuoy 0.57.3-r22 —
Wolfi rolling spark-operator 2.5.0-r1 —
Wolfi rolling speedtest-go 1.7.10-r12 —
Wolfi rolling spegel 0.7.1-r2 —
Wolfi rolling spicedb-operator 1.23.0-r4 —
Wolfi rolling spiffe-helper 0.11.0-r19 —
Wolfi rolling spire-agent +2 1.14.5-r0 —
Wolfi rolling spire-controller-manager 0.6.4-r6 —
Wolfi rolling splunk-otel-collector +2 0.149.0-r1 —
Wolfi rolling spqr 2.9.9-r1 —
Wolfi rolling sriov-network-device-plugin 3.11.0-r12 —
Wolfi rolling stakater-reloader 1.4.17-r1 —
Wolfi rolling step 0.30.2-r10 —
Wolfi rolling step-ca 0.30.2-r9 —
Wolfi rolling step-issuer 0.10.2-r15 —
Wolfi rolling step-kms-plugin 0.17.0-r1 —
Wolfi rolling stern 1.34.0-r2 —
Wolfi rolling supercronic 0.2.44-r1 —
Wolfi rolling swagger 0.34.0-r0 —
Wolfi rolling syft 1.42.4-r2 —
Wolfi rolling tailscale 1.96.4-r1 —
Wolfi rolling task 3.50.0-r0 —
Wolfi rolling temporal 1.6.2-r3 —
Wolfi rolling temporal-ui-server 2.50.0-r1 —
Wolfi rolling terraform 1.5.7-r46 —
Wolfi rolling terraform-docs 0.24.0-r2 —
Wolfi rolling terraform-mcp-server 0.5.2-r4 —
Wolfi rolling terraform-provider-aws 6.47.0-r0 —
Wolfi rolling terraform-provider-azuread 3.8.0-r10 —
Wolfi rolling terraform-provider-kubernetes 3.1.0-r0 —
Wolfi rolling terraform-provider-pagerduty 3.32.4-r2 —
Wolfi rolling terraform-provider-random 3.9.0-r1 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r19 —
Wolfi rolling terraform-provider-tls 4.3.0-r2 —
Wolfi rolling tetra +2 1.6.0-r7 —
Wolfi rolling thanos-operator 0.3.7-r46 —
Wolfi rolling timescaledb-parallel-copy 0.13.0-r3 —
Wolfi rolling timescaledb-tune 0.19.0-r2 —
Wolfi rolling timestamp-authority-cli +1 2.1.0-r1 —
Wolfi rolling timoni 0.26.0-r12 —
Wolfi rolling tkn 0.44.1-r2 —
Wolfi rolling tofu-controller +1 0.16.2-r0 —
Wolfi rolling trillian-logserver +1 1.7.3-r7 —
Wolfi rolling trivy 0.70.0-r3 —
Wolfi rolling trivy-operator 0.30.1-r5 —
Wolfi rolling trust-manager +1 0.22.1-r2 —
Wolfi rolling tw +6 0.0.49-r0 —
Wolfi rolling vale 3.14.1-r1 —
Wolfi rolling vault-benchmark 0.4.0-r18 —
Wolfi rolling vault-env 1.22.1-r9 —
Wolfi rolling vault-k8s 1.7.3-r2 —
Wolfi rolling vault-secrets-webhook 1.22.2-r14 —
Wolfi rolling velero-plugin-for-aws +1 1.14.0-r4 —
Wolfi rolling velero-plugin-for-csi +1 0.7.1-r50 —
Wolfi rolling vendir 0.45.3-r4 —
Wolfi rolling verticadb-operator 25.4.0.0-r12 —
Wolfi rolling vertical-pod-autoscaler +2 1.6.0-r6 —
Wolfi rolling vexctl 0.4.1-r22 —
Wolfi rolling victoriametrics +8 1.140.0-r0 —
Wolfi rolling victoriametrics-operator-config-reloader 0.70.1-r1 —
Wolfi rolling volume-modifier-for-k8s 0.9.5-r0 —
Wolfi rolling vt-cli 1.3.0-r5 —
Wolfi rolling wait-for-port 1.0.10-r15 —
Wolfi rolling wal-g-pg 3.0.8-r16 —
Wolfi rolling wave 0.11.0-r11 —
Wolfi rolling wazero 1.12.0-r0 —
Wolfi rolling weaviate 1.37.7-r0 —
Wolfi rolling wgcf 2.2.31-r1 —
Wolfi rolling whereabouts 0.9.3-r12 —
Wolfi rolling wire-go 0.7.0-r10 —
Wolfi rolling wireguard-go 0.0.20250522-r14 —
Wolfi rolling witness 0.11.0-r6 —
Wolfi rolling wuzz 0.5.0-r21 —
Wolfi rolling x509-certificate-exporter 3.20.1-r2 —
Wolfi rolling xcaddy 0.4.6-r1 —
Wolfi rolling xcover 0.3.1-r4 —
Wolfi rolling xeol 0.10.8-r43 —
Wolfi rolling yace 0.64.0-r2 —
Wolfi rolling yam 0.2.62-r0 —
Wolfi rolling yq 4.52.5-r3 —
Wolfi rolling ytt 0.55.1-r0 —
Wolfi rolling yunikorn-k8shim 1.8.0-r17 —
Wolfi rolling yunikorn-web 1.8.0-r7 —
Wolfi rolling zot 2.1.15-r12 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go toolchain < 1.25.9 · >= 1.26.0-0, < 1.26.2 1.25.9, 1.26.2 GO-2026-4871

Advisories 36

References