Skip to content
OpenAdvisories
Unscored CVE-2026-97054 EUVD-2026-123113GHSA-rg98-f588-44xgGO-2026-6859

HTTP/1 server crash due to MaxBytesReader header race in net/http

Published Nov 11, 2026 · Assigned by Go

Vendor: Go standard library Product: net/http Package: addon-resizer Package: amazon-cloudwatch-agent Package: argo-cd-3.3 Package: argo-cd-3.3-compat Package: argo-events Package: argo-workflow-controller-4.0 Package: argo-workflow-executor-4.0 Package: argo-workflows-4.0 Package: atlantis Package: aws-eks-pod-identity-agent Package: aws-flb-cloudwatch Package: aws-flb-firehose Package: aws-otel-collector Package: aws-otel-collector-healthcheck Package: aws-privateca-issuer Package: aws-sigv4-proxy Package: azure-ipam Package: azure-ipam-dropgz Package: azure-service-operator Package: blobfuse2 Package: buf Package: cass-operator Package: cert-manager-1.20 Package: cert-manager-cmctl Package: cert-manager-csi-driver Package: cert-manager-webhook-1.20 Package: certificate-transparency-trillian-ctserver Package: chart-testing Package: chartmuseum Package: chisel Package: cilium-certgen-0.4 Package: cis-operator-1.4 Package: cloud-provider-aws-1.35-cloud-controller-manager Package: cloud-provider-aws-1.35-ecr-credential-provider Package: cloud-provider-aws-1.36-cloud-controller-manager Package: cloud-provider-aws-1.36-ecr-credential-provider Package: cloud-provider-gcp-cloud-controller-manager Package: cloud-sql-proxy-2.22 Package: cloud-sql-proxy-2.24 Package: cloud-sql-proxy-2.26 Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cluster-api-provider-vsphere Package: cluster-autoscaler-1.35 Package: configmap-reload Package: confluent-cp-docker-utils Package: consul-k8s-1.9 Package: consul-k8s-1.9-cli Package: containerd-shim-runc-v2-1 Package: containerd-stress-1 Package: continuity Package: controller-gen Package: cortex Package: cri-tools Package: crictl Package: crictl-static Package: critest Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-s3 Package: crossplane-provider-family-aws Package: ctr-1 Package: ctr-2.4 Package: dapr-daprd-1.17 Package: dapr-injector-1.17 Package: dapr-operator-1.17 Package: dapr-placement-1.17 Package: dapr-scheduler-1.17 Package: dapr-sentry-1.17 Package: datadog-agent-7.80 Package: datadog-agent-7.80-full Package: datadog-agent-7.81-full Package: datadog-cluster-agent-7.81 Package: db-operator Package: dbmate Package: delve Package: dex Package: dfc Package: dfc-mcp-server Package: dive Package: docker-cli Package: docker-cli-buildx Package: docker-credential-ecr-login Package: dockerize Package: dynamic-localpv-provisioner Package: etcd-3.6 Package: external-secrets-operator-2.4 Package: external-secrets-operator-2.5 Package: external-secrets-operator-2.6 Package: falcoctl Package: falcosidekick Package: flannel Package: flux-image-automation-controller Package: flux-notification-controller Package: flux-source-controller Package: frp Package: fscrypt Package: fulcio Package: gatekeeper-3.22 Package: gatekeeper-3.22-gator Package: gcp-compute-persistent-disk-csi-driver-1.25 Package: git-credential-oauth Package: git-lfs Package: github-mcp-server Package: gitleaks Package: gitness Package: go-1.25 Package: go-discover Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golang-1.23 Package: golang-1.24 Package: golang-1.24 Package: golang-1.25 Package: golang-1.26 Package: golang-1.26 Package: golang-1.27 Package: golang-1.27 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: gomplate-5 Package: gostatsd Package: govulncheck Package: grafana-operator Package: guaccsub Package: guacgql Package: haproxy-ingress-0.16 Package: harbor-registry Package: hcloud Package: health-checker-1.35 Package: health-checker-1.36 Package: helm-4 Package: helm-docs Package: helm-mapkubeapis Package: helm-operator Package: hey Package: http-echo Package: hubble Package: hugo-extended Package: ipfs-cluster Package: istio-cni-1.29 Package: istio-install-cni-1.29 Package: istio-pilot-agent-1.29 Package: istio-pilot-discovery-1.29 Package: istioctl-1.29 Package: juicefs-1.3 Package: juicefs-csi-driver Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s-1.35 Package: k3s-1.36 Package: k3s-multicall-1.35 Package: k3s-multicall-1.36 Package: k3s-static-1.35 Package: k3s-static-1.36 Package: k8s_gateway Package: k8sgpt Package: k8sgpt-operator Package: k8ssandra-operator Package: kapp-controller Package: kargo-1.10 Package: karma Package: kind Package: knative-client Package: kpt Package: kratos Package: kratos-protoc-gen Package: ksops Package: kube-arangodb-1.4 Package: kube-logging-operator Package: kube-logging-operator-config-reloader Package: kube-logging-operator-custom-runner Package: kube-metrics-adapter Package: kube-rbac-proxy Package: kube-vip-cloud-provider Package: kuberlr Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-external-snapshot-controller-8.6 Package: kubernetes-csi-external-snapshotter-8.6 Package: kubernetes-csi-livenessprobe Package: kubernetes-ingress-defaultbackend Package: kyverno-policy-reporter Package: litefs Package: log-counter-1.35 Package: log-counter-1.36 Package: logstash-exporter Package: mariadb-operator Package: maru Package: mattermost-11.5 Package: mattermost-11.6 Package: mattermost-11.7 Package: mc Package: metallb Package: metallb-controller Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: migrate Package: minio-object-browser Package: mongo-tools Package: mongodb-kubernetes-operator-version-upgrade-post-start-hook Package: mountpoint-s3-csi-driver-2.6 Package: multus-cni Package: nerdctl Package: newrelic-infra-operator Package: newrelic-nri-statsd Package: node-feature-discovery-0.18 Package: node-problem-detector-1.35 Package: node-problem-detector-1.36 Package: nri-cassandra Package: nri-cassandra-jdk11 Package: nri-f5 Package: nri-prometheus Package: nsc Package: nuclei Package: omnibump Package: op-geth Package: op-geth-abigen Package: op-geth-clef Package: op-geth-devp2p Package: op-geth-evm Package: openfga Package: opentofu-1.11 Package: oras Package: paranoia Package: prometheus-3.11 Package: pulumi Package: pulumi-language-dotnet Package: rabbitmq-cluster-operator Package: rancher-agent-2.13 Package: rancher-system-upgrade-controller Package: rancher-webhook-0.10 Package: restic Package: rke2-cloud-provider Package: runc Package: sbomqs Package: sealed-secrets Package: sealed-secrets-kubeseal Package: seaweedfs Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-gcp Package: sftpgo-plugin-auth Package: sigstore-scaffolding-ctlog-createctconfig Package: sigstore-scaffolding-fulcio-createcerts Package: sigstore-scaffolding-getoidctoken Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-trillian-createdb Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-createsecret Package: sigstore-scaffolding-tuf-server Package: smokescreen Package: snyk-cli Package: sonobuoy Package: spegel Package: sql_exporter Package: src-fingerprint Package: stdlib Package: step-ca Package: step-kms-plugin Package: swagger Package: task Package: tempo-2.10 Package: tempo-2.10-cli Package: tempo-2.10-query Package: temporal Package: terraform-docs Package: terraform-provider-acme Package: terraform-provider-grafana Package: terraform-provider-kubernetes Package: terraform-provider-time Package: thanos Package: timestamp-authority-cli Package: timestamp-authority-server Package: typescript Package: vault-benchmark Package: vault-k8s Package: vendir Package: verticadb-operator Package: vexctl Package: vitess-23 Package: vitess-23-binaries Package: vitess-24 Package: vitess-24-binaries Package: vt-cli Package: wal-g-pg Package: wgcf Package: whereabouts Package: witness Package: yunikorn-k8shim Package: yunikorn-web Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes MaxBytesReader or MaxBytesHandler can crash due to runtime panic if its handler reads the request body concurrently with writing the response header.

Affected products

VendorProductAffectedFixed
Go standard library net/http 1.27.0-0 <1.27.4 —
Go standard library net/http 0 <1.26.11 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-1.26 1.26.11-1 —
Debian 14 golang-1.27 1.27.4-1 —
Debian 13 golang-1.24 No fix yet —
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-1.26 +1 No fix yet —
Ubuntu 26.04 LTS golang-1.23 +3 No fix yet —
Ubuntu 24.04 LTS golang-1.21 +5 No fix yet —
Ubuntu 22.04 LTS golang-1.17 +8 No fix yet —
Ubuntu 20.04 LTS golang-1.13 +5 No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.26 1.26.11-1.1 openSUSE-SU-2026:12529-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling addon-resizer 1.8.24-r10 —
Wolfi rolling argo-cd-3.3 +1 3.3.19-r1 —
Wolfi rolling argo-events 1.9.11-r22 —
Wolfi rolling argo-workflows-4.0 +2 4.0.15-r6 —
Wolfi rolling atlantis 0.49.0-r2 —
Wolfi rolling aws-eks-pod-identity-agent 0.2.7-r2 —
Wolfi rolling aws-flb-cloudwatch 1.9.5-r13 —
Wolfi rolling aws-flb-firehose 1.7.3-r16 —
Wolfi rolling aws-otel-collector +1 0.51.0-r3 —
Wolfi rolling aws-privateca-issuer 1.12.0-r1 —
Wolfi rolling aws-sigv4-proxy 1.13.1-r4 —
Wolfi rolling azure-ipam +2 0.4.0-r37 —
Wolfi rolling blobfuse2 2.4.2-r30 —
Wolfi rolling buf 1.75.0-r1 —
Wolfi rolling cass-operator 1.33.1-r1 —
Wolfi rolling cert-manager-1.20 1.20.5-r2 —
Wolfi rolling cert-manager-cmctl 2.6.2-r1 —
Wolfi rolling cert-manager-csi-driver 0.16.1-r2 —
Wolfi rolling certificate-transparency-trillian-ctserver 1.4.0-r6 —
Wolfi rolling chart-testing 3.15.0-r7 —
Wolfi rolling chartmuseum 0.16.6-r15 —
Wolfi rolling chisel 1.12.0-r8 —
Wolfi rolling cilium-certgen-0.4 0.4.13-r1 —
Wolfi rolling cis-operator-1.4 1.4.11-r2 —
Wolfi rolling cloud-provider-aws-1.35-ecr-credential-provider +1 1.35.2-r23 —
Wolfi rolling cloud-provider-aws-1.36-ecr-credential-provider +1 1.36.1-r16 —
Wolfi rolling cloud-provider-gcp-cloud-controller-manager 35.0.5-r28 —
Wolfi rolling cloud-sql-proxy-2.24 2.24.1-r15 —
Wolfi rolling cloud-sql-proxy-2.26 2.26.3-r2 —
Wolfi rolling cloudnative-pg +1 1.30.1-r6 —
Wolfi rolling cloudprober 0.14.7-r3 —
Wolfi rolling cluster-api-provider-vsphere 1.17.0-r9 —
Wolfi rolling cluster-autoscaler-1.35 1.35.3-r2 —
Wolfi rolling configmap-reload 0.15.0-r23 —
Wolfi rolling confluent-cp-docker-utils 1.0.19-r2 —
Wolfi rolling consul-k8s-1.9 +1 1.9.12-r7 —
Wolfi rolling continuity 0.11.0-r9 —
Wolfi rolling controller-gen 0.23.0-r2 —
Wolfi rolling cortex 1.21.1-r24 —
Wolfi rolling crictl +3 1.37.0-r7 —
Wolfi rolling crossplane-provider-aws-eks +2 2.9.0-r8 —
Wolfi rolling crossplane-provider-aws-s3 +1 2.9.0-r7 —
Wolfi rolling crossplane-provider-family-aws 2.9.0-r10 —
Wolfi rolling ctr-1 +2 1.7.36-r11 —
Wolfi rolling ctr-2.4 2.4.2-r7 —
Wolfi rolling dapr-daprd-1.17 +5 1.17.19-r4 —
Wolfi rolling datadog-agent-7.80 +1 7.80.4-r31 —
Wolfi rolling datadog-agent-7.81-full 7.81.3-r19 —
Wolfi rolling db-operator 2.45.1-r1 —
Wolfi rolling dbmate 2.38.1-r1 —
Wolfi rolling delve 1.27.2-r4 —
Wolfi rolling dex 2.46.1-r5 —
Wolfi rolling dfc +1 0.10.0-r19 —
Wolfi rolling dive 0.13.1-r32 —
Wolfi rolling docker-cli 29.9.3-r1 —
Wolfi rolling docker-cli-buildx 0.39.0-r0 —
Wolfi rolling docker-credential-ecr-login 0.12.0-r18 —
Wolfi rolling dockerize 0.16.0-r2 —
Wolfi rolling dynamic-localpv-provisioner 4.6.0-r11 —
Wolfi rolling etcd-3.6 3.6.16-r3 —
Wolfi rolling external-secrets-operator-2.4 2.4.1-r29 —
Wolfi rolling external-secrets-operator-2.5 2.5.0-r24 —
Wolfi rolling external-secrets-operator-2.6 2.6.0-r21 —
Wolfi rolling falcoctl 0.14.3-r3 —
Wolfi rolling falcosidekick 2.35.1-r5 —
Wolfi rolling flannel 0.28.10-r4 —
Wolfi rolling flux-image-automation-controller 1.3.0-r3 —
Wolfi rolling flux-notification-controller 1.10.0-r2 —
Wolfi rolling flux-source-controller 1.10.1-r2 —
Wolfi rolling frp 0.72.0-r1 —
Wolfi rolling fscrypt 0.3.7-r9 —
Wolfi rolling fulcio +1 1.10.0-r1 —
Wolfi rolling gatekeeper-3.22 +1 3.22.2-r25 —
Wolfi rolling gcp-compute-persistent-disk-csi-driver-1.25 1.25.3-r5 —
Wolfi rolling git-credential-oauth 0.18.0-r2 —
Wolfi rolling git-lfs 3.8.1-r3 —
Wolfi rolling github-mcp-server 2.1.0-r1 —
Wolfi rolling gitleaks 8.30.1-r32 —
Wolfi rolling gitness 3.3.0-r50 —
Wolfi rolling gomplate-5 5.3.1-r3 —
Wolfi rolling gostatsd 28.3.0-r41 —
Wolfi rolling govulncheck 1.9.0-r3 —
Wolfi rolling guacgql +1 1.1.0-r43 —
Wolfi rolling haproxy-ingress-0.16 0.16.3-r3 —
Wolfi rolling harbor-registry 3.1.2-r11 —
Wolfi rolling hcloud 1.70.2-r1 —
Wolfi rolling helm-4 +15 No fix yet —
Wolfi rolling helm-docs 1.14.2-r36 —
Wolfi rolling helm-operator 1.42.3-r27 —
Wolfi rolling hey 0.1.5-r17 —
Wolfi rolling http-echo 1.0.0-r39 —
Wolfi rolling hubble 1.20.4-r1 —
Wolfi rolling hugo-extended 0.169.0-r2 —
Wolfi rolling istioctl-1.29 +4 1.29.10-r4 —
Wolfi rolling juicefs-1.3 1.3.4-r4 —
Wolfi rolling juicefs-csi-driver 0.33.3-r1 —
Wolfi rolling k3d +2 5.9.0-r21 —
Wolfi rolling k3s-1.35 +2 1.35.9.1-r10 —
Wolfi rolling k3s-1.36 +2 1.36.6.1-r2 —
Wolfi rolling k8s_gateway 1.8.2-r18 —
Wolfi rolling k8sgpt-operator 0.2.29-r12 —
Wolfi rolling k8ssandra-operator 1.34.0-r1 —
Wolfi rolling kapp-controller 0.60.10-r1 —
Wolfi rolling kargo-1.10 1.10.16-r2 —
Wolfi rolling karma 0.134-r2 —
Wolfi rolling kind 0.33.0-r5 —
Wolfi rolling knative-client 1.24.0-r2 —
Wolfi rolling kpt 1.0.1-r6 —
Wolfi rolling kratos +1 3.0.0-r12 —
Wolfi rolling ksops 4.5.1-r24 —
Wolfi rolling kube-arangodb-1.4 1.4.7-r2 —
Wolfi rolling kube-logging-operator +1 6.9.0-r11 —
Wolfi rolling kube-logging-operator-custom-runner 1.0.0-r7 —
Wolfi rolling kube-metrics-adapter 0.2.9-r33 —
Wolfi rolling kube-rbac-proxy 0.23.1-r1 —
Wolfi rolling kube-vip-cloud-provider 0.0.13-r6 —
Wolfi rolling kuberlr 0.9.0-r1 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.19.0-r3 —
Wolfi rolling kubernetes-csi-external-snapshotter-8.6 +1 8.6.0-r22 —
Wolfi rolling kubernetes-csi-livenessprobe 2.20.0-r5 —
Wolfi rolling kubernetes-ingress-defaultbackend 1.43.3-r1 —
Wolfi rolling kyverno-policy-reporter 3.11.2-r1 —
Wolfi rolling litefs 0.5.14-r22 —
Wolfi rolling log-counter-1.35 +2 1.35.4-r6 —
Wolfi rolling log-counter-1.36 +2 1.36.1-r3 —
Wolfi rolling logstash-exporter 1.9.2-r3 —
Wolfi rolling mariadb-operator 26.10.2-r3 —
Wolfi rolling maru 0.7.0-r1 —
Wolfi rolling mattermost-11.5 11.5.7-r21 —
Wolfi rolling mattermost-11.6 11.6.6-r23 —
Wolfi rolling mattermost-11.7 11.7.15-r3 —
Wolfi rolling mc 0.20250813.083541-r29 —
Wolfi rolling metallb +4 0.16.2-r1 —
Wolfi rolling migrate 4.20.1-r10 —
Wolfi rolling minio-object-browser 2.0.5-r3 —
Wolfi rolling mongo-tools 100.20.1-r1 —
Wolfi rolling mongodb-kubernetes-operator-version-upgrade-post-start-hook 1.0.10-r32 —
Wolfi rolling mountpoint-s3-csi-driver-2.6 2.6.0-r17 —
Wolfi rolling multus-cni 4.3.2-r1 —
Wolfi rolling nerdctl 2.4.2-r1 —
Wolfi rolling newrelic-infra-operator 1.3.0-r1 —
Wolfi rolling node-feature-discovery-0.18 0.18.3-r36 —
Wolfi rolling nri-cassandra +1 2.26.1-r1 —
Wolfi rolling nri-f5 2.11.8-r1 —
Wolfi rolling nri-prometheus 2.31.0-r1 —
Wolfi rolling nsc 2.15.0-r11 —
Wolfi rolling nuclei 3.11.1-r20 —
Wolfi rolling omnibump 0.23.6-r1 —
Wolfi rolling op-geth +4 1.101702.3-r10 —
Wolfi rolling openfga 1.22.1-r1 —
Wolfi rolling opentofu-1.11 1.11.14-r15 —
Wolfi rolling oras 1.3.6-r1 —
Wolfi rolling paranoia 0.5.0-r25 —
Wolfi rolling prometheus-3.11 3.11.3-r26 —
Wolfi rolling pulumi 3.274.1-r2 —
Wolfi rolling pulumi-language-dotnet 3.118.0-r1 —
Wolfi rolling rabbitmq-cluster-operator 2.23.2-r3 —
Wolfi rolling rancher-agent-2.13 2.13.11-r2 —
Wolfi rolling rancher-system-upgrade-controller 0.21.0-r1 —
Wolfi rolling rancher-webhook-0.10 0.10.13-r2 —
Wolfi rolling rke2-cloud-provider 1.36.5-r5 —
Wolfi rolling runc 1.5.2-r9 —
Wolfi rolling sbomqs 2.1.3-r4 —
Wolfi rolling sealed-secrets +1 0.41.2-r1 —
Wolfi rolling seaweedfs 4.53-r1 —
Wolfi rolling secrets-store-csi-driver 1.6.2-r1 —
Wolfi rolling secrets-store-csi-driver-provider-aws 3.1.4-r7 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.19.0-r2 —
Wolfi rolling sftpgo-plugin-auth 1.0.18-r1 —
Wolfi rolling sigstore-scaffolding-tuf-server +9 0.7.41-r1 —
Wolfi rolling smokescreen 0_git20261107-r1 —
Wolfi rolling snyk-cli 1.1308.4-r2 —
Wolfi rolling sonobuoy 0.57.5-r12 —
Wolfi rolling spegel 0.8.1-r3 —
Wolfi rolling sql_exporter 0.24.13-r4 —
Wolfi rolling src-fingerprint 0.19.0-r64 —
Wolfi rolling step-ca 0.30.2-r34 —
Wolfi rolling step-kms-plugin 0.17.0-r24 —
Wolfi rolling swagger 0.36.7-r1 —
Wolfi rolling task 3.54.0-r9 —
Wolfi rolling tempo-2.10 +2 2.10.10-r4 —
Wolfi rolling terraform-docs 0.24.0-r16 —
Wolfi rolling terraform-provider-acme 3.3.0-r1 —
Wolfi rolling terraform-provider-grafana 4.54.0-r1 —
Wolfi rolling terraform-provider-kubernetes 3.5.0-r1 —
Wolfi rolling terraform-provider-time 0.14.2-r4 —
Wolfi rolling thanos 0.42.5-r3 —
Wolfi rolling timestamp-authority-cli +1 2.2.0-r4 —
Wolfi rolling typescript 7.0.2-r6 —
Wolfi rolling vault-k8s 1.7.7-r1 —
Wolfi rolling vendir 0.46.3-r3 —
Wolfi rolling verticadb-operator 25.4.0.0-r36 —
Wolfi rolling vexctl 0.4.4-r17 —
Wolfi rolling vitess-23 +1 23.0.8-r8 —
Wolfi rolling vitess-24 +1 24.0.5-r12 —
Wolfi rolling vt-cli 1.3.1-r15 —
Wolfi rolling wal-g-pg 3.0.9-r15 —
Wolfi rolling wgcf 2.3.1-r5 —
Wolfi rolling whereabouts 0.9.4-r15 —
Wolfi rolling witness 0.12.0-r21 —
Wolfi rolling yunikorn-k8shim 1.10.0-r7 —
Wolfi rolling yunikorn-web 1.10.0-r5 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.26.11 · >= 1.27.0-0, < 1.27.4 1.26.11, 1.27.4 GO-2026-6859

Advisories 2

References