https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 22:43:26 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-94447 <p>Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.</p> <p>Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-94447 https://vulnerability.circl.lu/vuln/ghsa-cgx4-3g64-rvr7 <p>Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.</p> <p>Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.</p> https://vulnerability.circl.lu/vuln/ghsa-cgx4-3g64-rvr7 https://vulnerability.circl.lu/vuln/opensuse-su-2026:12093-1 <p>go1.26-1.26.9-1.1 on GA media</p> <p>go1.26-1.26.9-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:12093-1 https://vulnerability.circl.lu/vuln/rhsa-2026:79715 <p>cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy cmd/go: golang: cmd/go: Toolchain checksum verification bypass via crafted project configuration</p> <p>cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy cmd/go: golang: cmd/go: Toolchain checksum verification bypass via crafted project configuration</p> https://vulnerability.circl.lu/vuln/rhsa-2026:79715 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-94447 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.8 and 24 more</p> <p>[Unknown description]</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.8 and 24 more</p> <p>[Unknown description]</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-94447