CVE-2026-111943
Distrust compromised intermediate certificates in crypto/x509
6.8 MediumPublic exploitFix available
CVE-2026-111943 is a medium vulnerability (CVSS 6.8) in Go Standard Library Crypto/x509, published October 19, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in docker 29.9.2-r0.
- Severity
- 6.8 MediumCVSS 3.1, CVE List
- Exploit chance
- 0.40%EPSS, 34th percentile
- Exploitation
- None known6 public exploits
- Fixed in
29.9.2-r0docker +299 more
Description
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
0.40%Up 0.3 points since Oct 21, 2026
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dockerAlpine:v3.24 | before 29.9.2-r0 | 29.9.2-r0 |
docker-cli-buildxAlpine:v3.24 | before 0.38.1-r0 | 0.38.1-r0 |
docker-cli-composeAlpine:v3.24 | before 5.6.1-r0 | 5.6.1-r0 |
goAlpine:v3.24 | before 1.26.10-r0 | 1.26.10-r0 |
go-toolsetAlmaLinux:10 From an advisory covering 15 CVEs | before 1.26.10-1.el10_2.alma.1 | 1.26.10-1.el10_2.alma.1 |
golangAlmaLinux:10 From an advisory covering 15 CVEs | before 1.26.10-1.el10_2.alma.1 | 1.26.10-1.el10_2.alma.1 |
golang-binAlmaLinux:10 From an advisory covering 15 CVEs | before 1.26.10-1.el10_2.alma.1 | 1.26.10-1.el10_2.alma.1 |
golang-docsAlmaLinux:10 From an advisory covering 15 CVEs | before 1.26.10-1.el10_2.alma.1 | 1.26.10-1.el10_2.alma.1 |
golang-miscAlmaLinux:10 From an advisory covering 15 CVEs | before 1.26.10-1.el10_2.alma.1 | 1.26.10-1.el10_2.alma.1 |
golang-raceAlmaLinux:10 From an advisory covering 15 CVEs | before 1.26.10-1.el10_2.alma.1 | 1.26.10-1.el10_2.alma.1 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
golang-srcAlmaLinux:10 From an advisory covering 15 CVEs | before 1.26.10-1.el10_2.alma.1 | 1.26.10-1.el10_2.alma.1 |
golang-testsAlmaLinux:10 From an advisory covering 15 CVEs | before 1.26.10-1.el10_2.alma.1 | 1.26.10-1.el10_2.alma.1 |
go-toolsetAlmaLinux:9 From an advisory covering 15 CVEs | before 1.26.10-1.el9_8 | 1.26.10-1.el9_8 |
golangAlmaLinux:9 From an advisory covering 15 CVEs | before 1.26.10-1.el9_8 | 1.26.10-1.el9_8 |
golang-binAlmaLinux:9 From an advisory covering 15 CVEs | before 1.26.10-1.el9_8 | 1.26.10-1.el9_8 |
golang-docsAlmaLinux:9 From an advisory covering 15 CVEs | before 1.26.10-1.el9_8 | 1.26.10-1.el9_8 |
golang-miscAlmaLinux:9 From an advisory covering 15 CVEs | before 1.26.10-1.el9_8 | 1.26.10-1.el9_8 |
golang-raceAlmaLinux:9 From an advisory covering 15 CVEs | before 1.26.10-1.el9_8 | 1.26.10-1.el9_8 |
golang-srcAlmaLinux:9 From an advisory covering 15 CVEs | before 1.26.10-1.el9_8 | 1.26.10-1.el9_8 |
golang-testsAlmaLinux:9 From an advisory covering 15 CVEs | before 1.26.10-1.el9_8 | 1.26.10-1.el9_8 |
delveAlmaLinux:8 From an advisory covering 15 CVEs | before 1.26.1-1.module_el8.10.0+4307+6e4cbc60 | 1.26.1-1.module_el8.10.0+4307+6e4cbc60 |
go-toolsetAlmaLinux:8 From an advisory covering 15 CVEs | before 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 |
golangAlmaLinux:8 From an advisory covering 15 CVEs | before 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 |
golang-binAlmaLinux:8 From an advisory covering 15 CVEs | before 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 |
golang-docsAlmaLinux:8 From an advisory covering 15 CVEs | before 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 |
golang-miscAlmaLinux:8 From an advisory covering 15 CVEs | before 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 |
golang-raceAlmaLinux:8 From an advisory covering 15 CVEs | before 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 |
golang-srcAlmaLinux:8 From an advisory covering 15 CVEs | before 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 |
golang-testsAlmaLinux:8 From an advisory covering 15 CVEs | before 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 |
grafanaAlmaLinux:8 From an advisory covering 5 CVEs | before 9.2.10-36.el8_10 | 9.2.10-36.el8_10 |
grafana-selinuxAlmaLinux:8 From an advisory covering 5 CVEs | before 9.2.10-36.el8_10 | 9.2.10-36.el8_10 |
grafana-pcpAlmaLinux:8 From an advisory covering 4 CVEs | before 5.1.1-19.el8_10 | 5.1.1-19.el8_10 |
buildahAlmaLinux:10 From an advisory covering 4 CVEs | before 2:1.43.1-7.el10_2 | 2:1.43.1-7.el10_2 |
buildah-testsAlmaLinux:10 From an advisory covering 4 CVEs | before 2:1.43.1-7.el10_2 | 2:1.43.1-7.el10_2 |
ipp-usbAlmaLinux:10 From an advisory covering 4 CVEs | before 0.9.27-7.el10_2.4 | 0.9.27-7.el10_2.4 |
grafana-pcpAlmaLinux:10 From an advisory covering 3 CVEs | before 5.3.0-8.el10_2.2 | 5.3.0-8.el10_2.2 |
podmanAlmaLinux:10 From an advisory covering 3 CVEs | before 7:5.8.2-11.el10_2.alma.1 | 7:5.8.2-11.el10_2.alma.1 |
podman-dockerAlmaLinux:10 From an advisory covering 3 CVEs | before 7:5.8.2-11.el10_2.alma.1 | 7:5.8.2-11.el10_2.alma.1 |
podman-remoteAlmaLinux:10 From an advisory covering 3 CVEs | before 7:5.8.2-11.el10_2.alma.1 | 7:5.8.2-11.el10_2.alma.1 |
podman-testsAlmaLinux:10 From an advisory covering 3 CVEs | before 7:5.8.2-11.el10_2.alma.1 | 7:5.8.2-11.el10_2.alma.1 |
grafana-pcpAlmaLinux:9 From an advisory covering 3 CVEs | before 5.1.1-17.el9_8.2 | 5.1.1-17.el9_8.2 |
grafanaAlmaLinux:9 From an advisory covering 5 CVEs | before 10.2.6-23.el9_8.7 | 10.2.6-23.el9_8.7 |
grafana-selinuxAlmaLinux:9 From an advisory covering 5 CVEs | before 10.2.6-23.el9_8.7 | 10.2.6-23.el9_8.7 |
oci-seccomp-bpf-hookAlmaLinux:10 From an advisory covering 3 CVEs | before 1.2.11-3.el10_2 | 1.2.11-3.el10_2 |
aardvark-dnsAlmaLinux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module_el8.10.0+4023+db236c53 | 2:1.10.1-2.module_el8.10.0+4023+db236c53 |
aardvark-dnsAlmaLinux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module_el8.10.0+4047+545787c4 | 2:1.10.1-2.module_el8.10.0+4047+545787c4 |
aardvark-dnsAlmaLinux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 |
buildahAlmaLinux:8 From an advisory covering 2 CVEs | before 2:1.33.15-2.module_el8.10.0+4327+ab8e4068 | 2:1.33.15-2.module_el8.10.0+4327+ab8e4068 |
buildah-testsAlmaLinux:8 From an advisory covering 2 CVEs | before 2:1.33.15-2.module_el8.10.0+4327+ab8e4068 | 2:1.33.15-2.module_el8.10.0+4327+ab8e4068 |
cockpit-podmanAlmaLinux:8 From an advisory covering 2 CVEs | before 84.1-1.module_el8.10.0+4102+6c76e544 | 84.1-1.module_el8.10.0+4102+6c76e544 |
conmonAlmaLinux:8 From an advisory covering 2 CVEs | before 3:2.1.10-2.module_el8.10.0+4327+ab8e4068 | 3:2.1.10-2.module_el8.10.0+4327+ab8e4068 |
container-selinuxAlmaLinux:8 From an advisory covering 2 CVEs | before 2:2.229.0-3.module_el8.10.0+4213+0493256b | 2:2.229.0-3.module_el8.10.0+4213+0493256b |
containernetworking-pluginsAlmaLinux:8 From an advisory covering 2 CVEs | before 1:1.4.0-11.module_el8.10.0+4327+ab8e4068 | 1:1.4.0-11.module_el8.10.0+4327+ab8e4068 |
containers-commonAlmaLinux:8 From an advisory covering 2 CVEs | before 2:1-82.module_el8.10.0+4016+efd18bf8 | 2:1-82.module_el8.10.0+4016+efd18bf8 |
containers-commonAlmaLinux:8 From an advisory covering 2 CVEs | before 2:1-82.module_el8.10.0+3876+e55593a8 | 2:1-82.module_el8.10.0+3876+e55593a8 |
containers-commonAlmaLinux:8 From an advisory covering 2 CVEs | before 2:1-82.module_el8.10.0+4120+03ad4b47 | 2:1-82.module_el8.10.0+4120+03ad4b47 |
containers-commonAlmaLinux:8 From an advisory covering 2 CVEs | before 2:1-82.module_el8.10.0+4089+ce72bbbe | 2:1-82.module_el8.10.0+4089+ce72bbbe |
critAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+4047+545787c4 | 3.18-5.module_el8.10.0+4047+545787c4 |
critAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+3845+87b84552 | 3.18-5.module_el8.10.0+3845+87b84552 |
critAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+4120+03ad4b47 | 3.18-5.module_el8.10.0+4120+03ad4b47 |
criuAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+4120+03ad4b47 | 3.18-5.module_el8.10.0+4120+03ad4b47 |
criuAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+3876+e55593a8 | 3.18-5.module_el8.10.0+3876+e55593a8 |
criuAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+3845+87b84552 | 3.18-5.module_el8.10.0+3845+87b84552 |
criu-develAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+4016+efd18bf8 | 3.18-5.module_el8.10.0+4016+efd18bf8 |
criu-develAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+3845+87b84552 | 3.18-5.module_el8.10.0+3845+87b84552 |
criu-develAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+4089+ce72bbbe | 3.18-5.module_el8.10.0+4089+ce72bbbe |
criu-develAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+4068+0e21408f | 3.18-5.module_el8.10.0+4068+0e21408f |
criu-libsAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+3845+87b84552 | 3.18-5.module_el8.10.0+3845+87b84552 |
criu-libsAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+3970+8445edf6 | 3.18-5.module_el8.10.0+3970+8445edf6 |
criu-libsAlmaLinux:8 From an advisory covering 2 CVEs | before 3.18-5.module_el8.10.0+3909+6e1c1eb7 | 3.18-5.module_el8.10.0+3909+6e1c1eb7 |
gccAzure Linux:3 | through 13.2.0-7 | None known |
golangAzure Linux:3 | through 1.26.11-1 | None known |
golangAzure Linux:3 | 1.27.0 to 1.27.4-1 | None known |
python-tensorboardAzure Linux:3 | through 2.16.2-6 | None known |
tensorflowAzure Linux:3 | through 2.16.1-11 | None known |
goAlpaquita:23 | 1.19.7-r0 up to 1.26.10-r0 | 1.26.10-r0 |
goAlpaquita:25 | 1.24.3-r0 up to 1.26.10-r0 | 1.26.10-r0 |
dockerAlpaquita:stream | 24.0.2-r0 up to 29.9.2-r0 | 29.9.2-r0 |
goAlpaquita:stream | 1.20.5-r2 up to 1.27.3-r0 | 1.27.3-r0 |
goBellSoft Hardened Containers:23 | 1.19.7-r0 up to 1.26.10-r0 | 1.26.10-r0 |
goBellSoft Hardened Containers:25 | 1.24.3-r0 up to 1.26.10-r0 | 1.26.10-r0 |
goBellSoft Hardened Containers:stream | 1.20.5-r2 up to 1.27.3-r0 | 1.27.3-r0 |
golangBitnami | before 1.26.10, 1.27.0-0 up to 1.27.3 | 1.26.101.27.3 |
golang-1.19Debian:12 | All versions, plus listed versions 1.19.10-11.19.10-21.19.11-11.19.12-11.19.12-2 Show 7 moreShow less1.19.12-2~bpo11+11.19.12-2~bpo12+11.19.13-11.19.13-1~bpo11+11.19.13-1~bpo12+11.19.8-21.19.9-1 | None known |
golang-1.24Debian:13 | All versions, plus listed versions 1.24.12-11.24.13-11.24.13-21.24.4-11.24.4-2 Show 5 moreShow less1.24.4-31.24.4-41.24.7-11.24.8-11.24.9-1 | None known |
golang-1.26Debian:14 | before 1.26.10-1, plus listed versions 1.26.0-11.26.1-11.26.10-1~bpo13+11.26.2-11.26.2-2 Show 21 moreShow less1.26.2-31.26.3-11.26.3-1~bpo13+11.26.3-21.26.3-2~bpo13+11.26.4-11.26.4-1~bpo13+11.26.5-11.26.5-1~bpo13+11.26.6-11.26.6-21.26.7-11.26.7-1~bpo13+11.26.8-11.26.8-1~bpo13+11.26.8-21.26.9-11.26.9-1~bpo13+11.26~rc2-11.26~rc3-11.26~rc3-2 | 1.26.10-1 |
golang-1.27Debian:14 | before 1.27.3-1, plus listed versions 1.27.0-11.27.0-1~bpo13+11.27.1-11.27.1-21.27.1-2~bpo13+1 Show 7 moreShow less1.27.2-11.27.2-1~bpo13+11.27.2-1~bpo13+21.27.3-1~bpo13+11.27~rc1-11.27~rc2-11.27~rc3-1 | 1.27.3-1 |
stdlibGo | before 1.26.10, 1.27.0-0 up to 1.27.3 | 1.26.101.27.3 |
golangMageia:10 | before 1.26.10-1.mga10 | 1.26.10-1.mga10 |
golangopenEuler:24.03-LTS-SP3 From an advisory covering 4 CVEs | before 1.21.4-51.oe2403sp3 | 1.21.4-51.oe2403sp3 |
golangopenEuler:24.03-LTS-SP4 From an advisory covering 4 CVEs | before 1.21.4-53.oe2403sp4 | 1.21.4-53.oe2403sp4 |
golangopenEuler:24.03-LTS-SP1 From an advisory covering 4 CVEs | before 1.21.4-48.oe2403sp1 | 1.21.4-48.oe2403sp1 |
golangopenEuler:22.03-LTS-SP4 | before 1.17.3-52.oe2203sp4 | 1.17.3-52.oe2203sp4 |
openshiftRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 |
openshift-clientsRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.gef515cf.assembly.stream.el8 | 0:4.20.0-202610221619.p2.gef515cf.assembly.stream.el8 |
openshift-clients-redistributableRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.gef515cf.assembly.stream.el8 | 0:4.20.0-202610221619.p2.gef515cf.assembly.stream.el8 |
openshift-hyperkubeRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 |
openshift-kube-apiserverRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 |
openshift-kube-controller-managerRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 |
openshift-kube-schedulerRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 |
openshift-kubeletRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el8 |
ose-aws-ecr-image-credential-providerRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.gbb88da1.assembly.stream.el8 | 0:4.20.0-202610221619.p2.gbb88da1.assembly.stream.el8 |
ose-azure-acr-image-credential-providerRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.g5e41860.assembly.stream.el8 | 0:4.20.0-202610221619.p2.g5e41860.assembly.stream.el8 |
ose-gcp-gcr-image-credential-providerRed Hat:openshift:4.20::el8 | before 0:4.20.0-202610221619.p2.gd4bfe3c.assembly.stream.el8 | 0:4.20.0-202610221619.p2.gd4bfe3c.assembly.stream.el8 |
cri-oRed Hat:openshift:4.20::el9 | before 0:1.33.13-9.rhaos4.20.gitd6a41c4.el9 | 0:1.33.13-9.rhaos4.20.gitd6a41c4.el9 |
cri-o-debuginfoRed Hat:openshift:4.20::el9 | before 0:1.33.13-9.rhaos4.20.gitd6a41c4.el9 | 0:1.33.13-9.rhaos4.20.gitd6a41c4.el9 |
cri-o-debugsourceRed Hat:openshift:4.20::el9 | before 0:1.33.13-9.rhaos4.20.gitd6a41c4.el9 | 0:1.33.13-9.rhaos4.20.gitd6a41c4.el9 |
cri-toolsRed Hat:openshift:4.20::el9 | before 0:1.33.0-7.el9 | 0:1.33.0-7.el9 |
cri-tools-debuginfoRed Hat:openshift:4.20::el9 | before 0:1.33.0-7.el9 | 0:1.33.0-7.el9 |
cri-tools-debugsourceRed Hat:openshift:4.20::el9 | before 0:1.33.0-7.el9 | 0:1.33.0-7.el9 |
openshiftRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 |
openshift-clientsRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.gef515cf.assembly.stream.el9 | 0:4.20.0-202610221619.p2.gef515cf.assembly.stream.el9 |
openshift-clients-redistributableRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.gef515cf.assembly.stream.el9 | 0:4.20.0-202610221619.p2.gef515cf.assembly.stream.el9 |
openshift-hyperkubeRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 |
openshift-kube-apiserverRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 |
openshift-kube-controller-managerRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 |
openshift-kube-schedulerRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 |
openshift-kubeletRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 | 0:4.20.0-202610221619.p2.g8008e65.assembly.stream.el9 |
ose-aws-ecr-image-credential-providerRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.gbb88da1.assembly.stream.el9 | 0:4.20.0-202610221619.p2.gbb88da1.assembly.stream.el9 |
ose-azure-acr-image-credential-providerRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.g5e41860.assembly.stream.el9 | 0:4.20.0-202610221619.p2.g5e41860.assembly.stream.el9 |
ose-gcp-gcr-image-credential-providerRed Hat:openshift:4.20::el9 | before 0:4.20.0-202610221619.p2.gd4bfe3c.assembly.stream.el9 | 0:4.20.0-202610221619.p2.gd4bfe3c.assembly.stream.el9 |
openshift-clientsRed Hat:openshift:4.19::el8 | before 0:4.19.0-202610221807.p2.g2709219.assembly.stream.el8 | 0:4.19.0-202610221807.p2.g2709219.assembly.stream.el8 |
openshift-clients-redistributableRed Hat:openshift:4.19::el8 | before 0:4.19.0-202610221807.p2.g2709219.assembly.stream.el8 | 0:4.19.0-202610221807.p2.g2709219.assembly.stream.el8 |
cri-oRed Hat:openshift:4.19::el9 | before 0:1.32.13-16.rhaos4.19.git3c1400a.el9 | 0:1.32.13-16.rhaos4.19.git3c1400a.el9 |
cri-o-debuginfoRed Hat:openshift:4.19::el9 | before 0:1.32.13-16.rhaos4.19.git3c1400a.el9 | 0:1.32.13-16.rhaos4.19.git3c1400a.el9 |
cri-o-debugsourceRed Hat:openshift:4.19::el9 | before 0:1.32.13-16.rhaos4.19.git3c1400a.el9 | 0:1.32.13-16.rhaos4.19.git3c1400a.el9 |
cri-toolsRed Hat:openshift:4.19::el9 | before 0:1.32.0-9.el9 | 0:1.32.0-9.el9 |
cri-tools-debuginfoRed Hat:openshift:4.19::el9 | before 0:1.32.0-9.el9 | 0:1.32.0-9.el9 |
cri-tools-debugsourceRed Hat:openshift:4.19::el9 | before 0:1.32.0-9.el9 | 0:1.32.0-9.el9 |
openshiftRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 | 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 |
openshift-clientsRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.g2709219.assembly.stream.el9 | 0:4.19.0-202610221807.p2.g2709219.assembly.stream.el9 |
openshift-clients-redistributableRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.g2709219.assembly.stream.el9 | 0:4.19.0-202610221807.p2.g2709219.assembly.stream.el9 |
openshift-hyperkubeRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 | 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 |
openshift-kube-apiserverRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 | 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 |
openshift-kube-controller-managerRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 | 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 |
openshift-kube-schedulerRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 | 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 |
openshift-kubeletRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 | 0:4.19.0-202610221807.p2.g63adf01.assembly.stream.el9 |
ose-aws-ecr-image-credential-providerRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.g425c1c5.assembly.stream.el9 | 0:4.19.0-202610221807.p2.g425c1c5.assembly.stream.el9 |
ose-azure-acr-image-credential-providerRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.gb249afb.assembly.stream.el9 | 0:4.19.0-202610221807.p2.gb249afb.assembly.stream.el9 |
ose-gcp-gcr-image-credential-providerRed Hat:openshift:4.19::el9 | before 0:4.19.0-202610221807.p2.gd8d3aeb.assembly.stream.el9 | 0:4.19.0-202610221807.p2.gd8d3aeb.assembly.stream.el9 |
golang1.26Red Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.26.10-0.1.hum1 | 0:1.26.10-0.1.hum1 |
golang1.26-binRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.26.10-0.1.hum1 | 0:1.26.10-0.1.hum1 |
golang1.26-docsRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.26.10-0.1.hum1 | 0:1.26.10-0.1.hum1 |
golang1.26-miscRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.26.10-0.1.hum1 | 0:1.26.10-0.1.hum1 |
golang1.26-srcRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.26.10-0.1.hum1 | 0:1.26.10-0.1.hum1 |
golang1.26-testsRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.26.10-0.1.hum1 | 0:1.26.10-0.1.hum1 |
golang1.27Red Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.27.3-1.hum1 | 0:1.27.3-1.hum1 |
golang1.27-binRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.27.3-1.hum1 | 0:1.27.3-1.hum1 |
golang1.27-docsRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.27.3-1.hum1 | 0:1.27.3-1.hum1 |
golang1.27-miscRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.27.3-1.hum1 | 0:1.27.3-1.hum1 |
golang1.27-srcRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.27.3-1.hum1 | 0:1.27.3-1.hum1 |
golang1.27-testsRed Hat:hummingbird:1 From an advisory covering 3 CVEs | before 0:1.27.3-1.hum1 | 0:1.27.3-1.hum1 |
go-toolsetRed Hat:enterprise_linux:10.2 From an advisory covering 15 CVEs | before 0:1.26.10-1.el10_2 | 0:1.26.10-1.el10_2 |
golangRed Hat:enterprise_linux:10.2 From an advisory covering 15 CVEs | before 0:1.26.10-1.el10_2 | 0:1.26.10-1.el10_2 |
golang-binRed Hat:enterprise_linux:10.2 From an advisory covering 15 CVEs | before 0:1.26.10-1.el10_2 | 0:1.26.10-1.el10_2 |
golang-docsRed Hat:enterprise_linux:10.2 From an advisory covering 15 CVEs | before 0:1.26.10-1.el10_2 | 0:1.26.10-1.el10_2 |
golang-miscRed Hat:enterprise_linux:10.2 From an advisory covering 15 CVEs | before 0:1.26.10-1.el10_2 | 0:1.26.10-1.el10_2 |
golang-raceRed Hat:enterprise_linux:10.2 From an advisory covering 15 CVEs | before 0:1.26.10-1.el10_2 | 0:1.26.10-1.el10_2 |
golangRocky Linux:10 From an advisory covering 4 CVEs | before 0:1.26.10-1.el10_2 | 0:1.26.10-1.el10_2 |
golangRocky Linux:9 From an advisory covering 4 CVEs | before 0:1.26.10-1.el9_8 | 0:1.26.10-1.el9_8 |
delveRocky Linux:8 From an advisory covering 4 CVEs | before 0:1.26.1-1.module+el8.10.0+40244+e7cb3ff8 | 0:1.26.1-1.module+el8.10.0+40244+e7cb3ff8 |
grafanaRocky Linux:8 From an advisory covering 4 CVEs | before 0:9.2.10-36.el8_10 | 0:9.2.10-36.el8_10 |
grafana-pcpRocky Linux:8 From an advisory covering 3 CVEs | before 0:5.1.1-19.el8_10 | 0:5.1.1-19.el8_10 |
buildahRocky Linux:10 From an advisory covering 4 CVEs | before 2:1.43.1-7.el10_2 | 2:1.43.1-7.el10_2 |
golang-github-openprinting-ipp-usbRocky Linux:10 From an advisory covering 4 CVEs | before 0:0.9.27-7.el10_2.4 | 0:0.9.27-7.el10_2.4 |
grafana-pcpRocky Linux:10 From an advisory covering 3 CVEs | before 0:5.3.0-8.el10_2.2 | 0:5.3.0-8.el10_2.2 |
podmanRocky Linux:10 From an advisory covering 3 CVEs | before 7:5.8.2-11.el10_2 | 7:5.8.2-11.el10_2 |
grafana-pcpRocky Linux:9 From an advisory covering 3 CVEs | before 0:5.1.1-17.el9_8.2 | 0:5.1.1-17.el9_8.2 |
grafanaRocky Linux:9 From an advisory covering 5 CVEs | before 0:10.2.6-23.el9_8.7 | 0:10.2.6-23.el9_8.7 |
oci-seccomp-bpf-hookRocky Linux:10 From an advisory covering 3 CVEs | before 0:1.2.11-3.el10_2 | 0:1.2.11-3.el10_2 |
aardvark-dnsRocky Linux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module+el8.10.0+40133+32c21f88 | 2:1.10.1-2.module+el8.10.0+40133+32c21f88 |
aardvark-dnsRocky Linux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module+el8.10.0+1874+ce489889 | 2:1.10.1-2.module+el8.10.0+1874+ce489889 |
aardvark-dnsRocky Linux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module+el8.10.0+1880+8e896d1b | 2:1.10.1-2.module+el8.10.0+1880+8e896d1b |
aardvark-dnsRocky Linux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module+el8.10.0+1896+b18fa106 | 2:1.10.1-2.module+el8.10.0+1896+b18fa106 |
aardvark-dnsRocky Linux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9 | 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9 |
aardvark-dnsRocky Linux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module+el8.10.0+2001+6a33db9f | 2:1.10.1-2.module+el8.10.0+2001+6a33db9f |
aardvark-dnsRocky Linux:8 From an advisory covering 2 CVEs | before 2:1.10.1-2.module+el8.10.0+40047+0c0a73f4 | 2:1.10.1-2.module+el8.10.0+40047+0c0a73f4 |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+1948+4b5cd4a9 | 0:84.1-1.module+el8.10.0+1948+4b5cd4a9 |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+2001+6a33db9f | 0:84.1-1.module+el8.10.0+2001+6a33db9f |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+40047+0c0a73f4 | 0:84.1-1.module+el8.10.0+40047+0c0a73f4 |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+40133+32c21f88 | 0:84.1-1.module+el8.10.0+40133+32c21f88 |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+1815+5fe7415e | 0:84.1-1.module+el8.10.0+1815+5fe7415e |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+1825+623b0c20 | 0:84.1-1.module+el8.10.0+1825+623b0c20 |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+1843+6892ab28 | 0:84.1-1.module+el8.10.0+1843+6892ab28 |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+1872+2e18eb19 | 0:84.1-1.module+el8.10.0+1872+2e18eb19 |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+1874+ce489889 | 0:84.1-1.module+el8.10.0+1874+ce489889 |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+1880+8e896d1b | 0:84.1-1.module+el8.10.0+1880+8e896d1b |
cockpit-podmanRocky Linux:8 From an advisory covering 2 CVEs | before 0:84.1-1.module+el8.10.0+1896+b18fa106 | 0:84.1-1.module+el8.10.0+1896+b18fa106 |
containers-commonRocky Linux:8 From an advisory covering 2 CVEs | before 2:1-82.module+el8.10.0+2001+6a33db9f | 2:1-82.module+el8.10.0+2001+6a33db9f |
containers-commonRocky Linux:8 From an advisory covering 2 CVEs | before 2:1-82.module+el8.10.0+40047+0c0a73f4 | 2:1-82.module+el8.10.0+40047+0c0a73f4 |
containers-commonRocky Linux:8 From an advisory covering 2 CVEs | before 2:1-82.module+el8.10.0+40133+32c21f88 | 2:1-82.module+el8.10.0+40133+32c21f88 |
containers-commonRocky Linux:8 From an advisory covering 2 CVEs | before 2:1-82.module+el8.10.0+1843+6892ab28 | 2:1-82.module+el8.10.0+1843+6892ab28 |
containers-commonRocky Linux:8 From an advisory covering 2 CVEs | before 2:1-82.module+el8.10.0+1872+2e18eb19 | 2:1-82.module+el8.10.0+1872+2e18eb19 |
containers-commonRocky Linux:8 From an advisory covering 2 CVEs | before 2:1-82.module+el8.10.0+1874+ce489889 | 2:1-82.module+el8.10.0+1874+ce489889 |
containers-commonRocky Linux:8 From an advisory covering 2 CVEs | before 2:1-82.module+el8.10.0+1880+8e896d1b | 2:1-82.module+el8.10.0+1880+8e896d1b |
containers-commonRocky Linux:8 From an advisory covering 2 CVEs | before 2:1-82.module+el8.10.0+1896+b18fa106 | 2:1-82.module+el8.10.0+1896+b18fa106 |
containers-commonRocky Linux:8 From an advisory covering 2 CVEs | before 2:1-82.module+el8.10.0+1948+4b5cd4a9 | 2:1-82.module+el8.10.0+1948+4b5cd4a9 |
container-selinuxRocky Linux:8 From an advisory covering 2 CVEs | before 2:2.229.0-3.module+el8.10.0+40223+e940a224 | 2:2.229.0-3.module+el8.10.0+40223+e940a224 |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+1880+8e896d1b | 0:3.18-5.module+el8.10.0+1880+8e896d1b |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+1815+5fe7415e | 0:3.18-5.module+el8.10.0+1815+5fe7415e |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+1896+b18fa106 | 0:3.18-5.module+el8.10.0+1896+b18fa106 |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+1825+623b0c20 | 0:3.18-5.module+el8.10.0+1825+623b0c20 |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+1948+4b5cd4a9 | 0:3.18-5.module+el8.10.0+1948+4b5cd4a9 |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+2001+6a33db9f | 0:3.18-5.module+el8.10.0+2001+6a33db9f |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+1843+6892ab28 | 0:3.18-5.module+el8.10.0+1843+6892ab28 |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+40047+0c0a73f4 | 0:3.18-5.module+el8.10.0+40047+0c0a73f4 |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+1872+2e18eb19 | 0:3.18-5.module+el8.10.0+1872+2e18eb19 |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+40133+32c21f88 | 0:3.18-5.module+el8.10.0+40133+32c21f88 |
criuRocky Linux:8 From an advisory covering 2 CVEs | before 0:3.18-5.module+el8.10.0+1874+ce489889 | 0:3.18-5.module+el8.10.0+1874+ce489889 |
crunRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.14.3-4.module+el8.10.0+40310+c25440c1 | 0:1.14.3-4.module+el8.10.0+40310+c25440c1 |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+1874+ce489889 | 0:1.13-1.module+el8.10.0+1874+ce489889 |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+1880+8e896d1b | 0:1.13-1.module+el8.10.0+1880+8e896d1b |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+1896+b18fa106 | 0:1.13-1.module+el8.10.0+1896+b18fa106 |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+1948+4b5cd4a9 | 0:1.13-1.module+el8.10.0+1948+4b5cd4a9 |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+2001+6a33db9f | 0:1.13-1.module+el8.10.0+2001+6a33db9f |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+40047+0c0a73f4 | 0:1.13-1.module+el8.10.0+40047+0c0a73f4 |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+1815+5fe7415e | 0:1.13-1.module+el8.10.0+1815+5fe7415e |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+40133+32c21f88 | 0:1.13-1.module+el8.10.0+40133+32c21f88 |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+1825+623b0c20 | 0:1.13-1.module+el8.10.0+1825+623b0c20 |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+1843+6892ab28 | 0:1.13-1.module+el8.10.0+1843+6892ab28 |
fuse-overlayfsRocky Linux:8 From an advisory covering 2 CVEs | before 0:1.13-1.module+el8.10.0+1872+2e18eb19 | 0:1.13-1.module+el8.10.0+1872+2e18eb19 |
libslirpRocky Linux:8 From an advisory covering 2 CVEs | before 0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9 | 0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9 |
libslirpRocky Linux:8 From an advisory covering 2 CVEs | before 0:4.4.0-2.module+el8.10.0+1872+2e18eb19 | 0:4.4.0-2.module+el8.10.0+1872+2e18eb19 |
webpki-rootscrates.io | 0.0.0-0 up to 0.26.11, 0.26.12-0 up to 1.0.10 | 0.26.111.0.10 |
rustls-webpkicrates.io | 0.0.0-0 up to 0.103.16, 0.104.0-alpha.1 up to 0.104.0-alpha.8 | 0.103.160.104.0-alpha.8 |
webpki-root-certscrates.io | 0.0.0-0 up to 0.26.11, 0.26.12-0 up to 1.0.10 | 0.26.111.0.10 |
go1.26SUSE:Linux Enterprise Server 16.0 From an advisory covering 3 CVEs | before 1.26.10-160000.1.1 | 1.26.10-160000.1.1 |
go1.26SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 3 CVEs | before 1.26.10-160000.1.1 | 1.26.10-160000.1.1 |
go1.27SUSE:Linux Enterprise Server 16.0 | before 1.27.3-160000.1.1 | 1.27.3-160000.1.1 |
go1.27SUSE:Linux Enterprise Server for SAP applications 16.0 | before 1.27.3-160000.1.1 | 1.27.3-160000.1.1 |
go1.27SUSE:Linux Enterprise Module for Development Tools 15 SP7 | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise Server 15 SP4-LTSS | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise Server 15 SP5-LTSS | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise Server 15 SP6-LTSS | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.27SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | before 1.27.3-150000.1.15.1 | 1.27.3-150000.1.15.1 |
go1.26SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 3 CVEs | before 1.26.10-150000.1.36.1 | 1.26.10-150000.1.36.1 |
go1.26-opensslSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 16 CVEs | before 1.26.10-150600.13.18.1 | 1.26.10-150600.13.18.1 |
go1.26-opensslSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 16 CVEs | before 1.26.10-150600.13.18.1 | 1.26.10-150600.13.18.1 |
go1.26-opensslSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 16 CVEs | before 1.26.10-150600.13.18.1 | 1.26.10-150600.13.18.1 |
go1.26-opensslSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 16 CVEs | before 1.26.10-150000.1.21.2 | 1.26.10-150000.1.21.2 |
go1.26-opensslSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 16 CVEs | before 1.26.10-150000.1.21.2 | 1.26.10-150000.1.21.2 |
go1.26-opensslSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 16 CVEs | before 1.26.10-150000.1.21.2 | 1.26.10-150000.1.21.2 |
go1.26-opensslSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 16 CVEs | before 1.26.10-150000.1.21.2 | 1.26.10-150000.1.21.2 |
go1.26-opensslSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 16 CVEs | before 1.26.10-150000.1.21.2 | 1.26.10-150000.1.21.2 |
go1.26-opensslSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 16 CVEs | before 1.26.10-150000.1.21.2 | 1.26.10-150000.1.21.2 |
go1.26-opensslSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 16 CVEs | before 1.26.10-150000.1.21.2 | 1.26.10-150000.1.21.2 |
go1.26-opensslSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 16 CVEs | before 1.26.10-150000.1.21.2 | 1.26.10-150000.1.21.2 |
golang-1.24Ubuntu:22.04:LTS | All versions, plus listed versions 1.24.4-1ubuntu1~22.04.11.24.4-1ubuntu1~22.04.21.24.13-2~22.04.11.24.13-2~22.04.2 | None known |
golang-1.25Ubuntu:22.04:LTS | All versions, plus listed versions 1.25.14-1~ubuntu0.22.04.1 | None known |
golang-1.26Ubuntu:22.04:LTS | All versions, plus listed versions 1.26.8-1~ubuntu0.22.04.2 | None known |
golang-1.24Ubuntu:24.04:LTS | All versions, plus listed versions 1.24.4-1ubuntu1~24.04.11.24.4-1ubuntu1~24.04.21.24.13-2~24.04.1 | None known |
golang-1.25Ubuntu:24.04:LTS | All versions, plus listed versions 1.25.14-1~ubuntu0.24.04.1 | None known |
golang-1.26Ubuntu:24.04:LTS | All versions, plus listed versions 1.26.8-1~ubuntu0.24.04.2 | None known |
golang-1.26Ubuntu:26.10 | All versions, plus listed versions 1.26.0-11.26.2-31.26.4-11.26.5-11.26.6-21.26.7-11.26.8-11.26.8-2 | None known |
golang-1.27Ubuntu:26.10 | All versions, plus listed versions 1.27~rc1-11.27~rc2-11.27~rc3-11.27.0-11.27.1-1 | None known |
golang-1.24Ubuntu:26.04:LTS | All versions, plus listed versions 1.24.4-1ubuntu11.24.9-11.24.13-2 | None known |
golang-1.25Ubuntu:26.04:LTS | All versions, plus listed versions 1.25.0-0ubuntu11.25.7-21.25.14-1~ubuntu0.26.04.1 | None known |
golang-1.26Ubuntu:26.04:LTS | All versions, plus listed versions 1.26~rc3-21.26.0-11.26.8-1~ubuntu0.26.04.2 | None known |
go1.26openSUSE:Tumbleweed From an advisory covering 3 CVEs | before 1.26.10-1.1 | 1.26.10-1.1 |
regclientopenSUSE:Tumbleweed | before 0.11.7-1.1 | 0.11.7-1.1 |
gotosocialopenSUSE:Tumbleweed | before 0.22.3-1.1 | 0.22.3-1.1 |
docker-composeopenSUSE:Tumbleweed | before 5.6.1-1.1 | 5.6.1-1.1 |
gitoxideopenSUSE:Tumbleweed | before 0.61.0-1.1 | 0.61.0-1.1 |
go1.27openSUSE:Tumbleweed | before 1.27.3-1.1 | 1.27.3-1.1 |
tekton-cliopenSUSE:Tumbleweed From an advisory covering 2 CVEs | before 0.46.2-1.1 | 0.46.2-1.1 |
buildpacks-cliopenSUSE:Tumbleweed From an advisory covering 5 CVEs | before 0.40.10-1.1 | 0.40.10-1.1 |
istioctlopenSUSE:Tumbleweed | before 1.31.3-1.1 | 1.31.3-1.1 |
oktetoopenSUSE:Tumbleweed | before 3.24.1-1.1 | 3.24.1-1.1 |
github-mcp-serveropenSUSE:Tumbleweed | before 2.0.3-1.1 | 2.0.3-1.1 |
hcloud-cliopenSUSE:Tumbleweed | before 1.70.2-1.1 | 1.70.2-1.1 |
kubeloginopenSUSE:Tumbleweed | before 0.2.22-1.1 | 0.2.22-1.1 |
pinactopenSUSE:Tumbleweed | before 5.0.2-1.1 | 5.0.2-1.1 |
fleet-cliopenSUSE:Tumbleweed From an advisory covering 3 CVEs | before 0.16.3-1.1 | 0.16.3-1.1 |
versitygwopenSUSE:Tumbleweed | before 1.10.0-1.1 | 1.10.0-1.1 |
diunopenSUSE:Tumbleweed | before 4.33.1-1.1 | 4.33.1-1.1 |
bugwardenopenSUSE:Tumbleweed | before 0.7.0-1.1 | 0.7.0-1.1 |
golang-github-prometheus-alertmanageropenSUSE:Tumbleweed | before 0.34.2-1.1 | 0.34.2-1.1 |
novaopenSUSE:Tumbleweed | before 3.12.3-1.1 | 3.12.3-1.1 |
plutoopenSUSE:Tumbleweed | before 5.24.5-1.1 | 5.24.5-1.1 |
polarisopenSUSE:Tumbleweed | before 10.2.6-1.1 | 10.2.6-1.1 |
rcloneopenSUSE:Tumbleweed From an advisory covering 3 CVEs | before 1.76.0-1.1 | 1.76.0-1.1 |
headscaleopenSUSE:Tumbleweed | before 0.29.7-1.1 | 0.29.7-1.1 |
go1.26openSUSE:Leap 16.0 From an advisory covering 3 CVEs | before 1.26.10-160000.1.1 | 1.26.10-160000.1.1 |
go1.27openSUSE:Leap 16.0 | before 1.27.3-160000.1.1 | 1.27.3-160000.1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | phpc0de/CVE-2026-111943-Remediator | 2026-10-21 |
| PoC in GitHub | BlackthornYugen/tiny-key-s-server | 2026-10-22 |
| PoC in GitHub | andersundsehr/ca-trust-audit | 2026-10-22 |
| PoC in GitHub | majiayu000/trustsweep | 2026-10-22 |
| PoC in GitHub | Xowap/i-can-count-to-four | 2026-10-23 |
| PoC in GitHub | sam00/CVE-2026-111943-Emudhra-Ca-Compromise-POC | 2026-11-05 |
What each source reports
CVE List Score used
Distrust compromised intermediate certificates in crypto/x509
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
- Record
CVE-2026-111943- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-299
- Updated
- 2026-11-02
EUVDEUVD-2026-106926
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
- Record
EUVD-2026-106926- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
NVD
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
- Record
CVE-2026-111943- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-299
- Updated
- 2026-11-02
OSVALPINE-CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
- Record
ALPINE-CVE-2026-111943- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-03
OSVBELL-CVE-2026-111943
- Record
BELL-CVE-2026-111943- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
- Record
DEBIAN-CVE-2026-111943- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Show 47 moreShow less
OSVOESA-2026-4432
golang security update
.
Security Fix(es):
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.(CVE-2026-111943)
When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning.(CVE-2026-56866)
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.(CVE-2026-78660)
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.(CVE-2026-94440)
- Record
OESA-2026-4432- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2026-4433
golang security update
.
Security Fix(es):
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.(CVE-2026-111943)
When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning.(CVE-2026-56866)
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.(CVE-2026-78660)
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.(CVE-2026-94440)
- Record
OESA-2026-4433- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2026-4435
golang security update
.
Security Fix(es):
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.(CVE-2026-111943)
When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning.(CVE-2026-56866)
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.(CVE-2026-78660)
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.(CVE-2026-94440)
- Record
OESA-2026-4435- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2026-4530
golang security update
.
Security Fix(es):
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.(CVE-2026-111943)
- Record
OESA-2026-4530- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHBA-2026:89332
Red Hat Bug Fix Advisory: OpenShift Container Platform 4.20.44 packages update
- Record
RHBA-2026:89332- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHBA-2026:89649
Red Hat Bug Fix Advisory: OpenShift Container Platform 4.19.53 packages update
- Record
RHBA-2026:89649- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:85899
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:85899- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVRHSA-2026:86029
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:86029- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVRHSA-2026:86093
Red Hat Security Advisory: golang security, bug fix, and enhancement update
- Record
RHSA-2026:86093- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-14
OSVRHSA-2026:86196
Red Hat Security Advisory: golang security, bug fix, and enhancement update
- Record
RHSA-2026:86196- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-14
OSVRHSA-2026:86203
Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update
- Record
RHSA-2026:86203- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-14
OSVRHSA-2026:86733
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86733- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86738
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86738- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86776
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86776- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86812
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86812- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86839
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86839- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86858
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86858- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86863
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86863- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86867
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86867- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86886
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86886- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86893
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86893- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86906
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86906- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86908
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86908- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86914
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86914- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86918
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86918- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86922
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86922- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86927
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86927- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86928
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86928- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86929
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86929- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86930
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86930- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86932
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86932- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86934
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86934- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86936
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86936- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86938
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86938- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86939
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86939- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86943
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86943- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86944
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86944- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86946
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86946- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86948
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86948- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86949
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86949- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86952
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86952- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86956
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86956- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86958
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86958- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86960
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86960- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
OSVRHSA-2026:86972
Red Hat Security Advisory: grafana-pcp security update
- Record
RHSA-2026:86972- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVRHSA-2026:86973
Red Hat Security Advisory: grafana-pcp security update
- Record
RHSA-2026:86973- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVRHSA-2026:86977
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:86977- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, aliases_more | OSV | |
| affected | OSV | |
| affected, aliases_more, references | ||
| affected, aliases, aliases_more, references | OSV | |
| affected | OSV | |
| affected, aliases_more, references | OSV | |
| affected, aliases, aliases_more, references | OSV | |
| affected, aliases, aliases_more, references | OSV | |
| affected, aliases | OSV | |
| affected, aliases, references | OSV |
Show 9 moreShow less
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected | ||
| exploits | OSV, PoC in GitHub | |
| affected, aliases, references | OSV | |
| affected, aliases, facts | OSV | |
| affected, aliases, references | OSV | |
| affected, aliases, exploits, references | OSV | |
| first indexed | CVE List, EUVD, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
go.dev/cl/851047
groups.google.com/g/golang-announce/c/66pojueaQek
pkg.go.dev/vuln/GO-2026-6809
openwall.com/lists/oss-security/2026/10/20/29
security.alpinelinux.org/vuln/CVE-2026-111943
Show 194 moreShow less
access.redhat.com/errata/RHSA-2026:86093
bugzilla.redhat.com/2548334
errata.almalinux.org/10/ALSA-2026-86093.html
redhat.com/security/data/cve/CVE-2026-56866.html
nvd.nist.gov/vuln/detail/CVE-2026-111943
docs.bell-sw.com/security/cves/CVE-2026-111943
security-tracker.debian.org/tracker/CVE-2026-111943
advisories.mageia.org/MGASA-2026-0537.html
bugs.mageia.org/show_bug.cgi?id=36553
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-4432
security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_89332.json
cve.org/CVERecord?id=CVE-2026-111943
github.com/golang/go/issues/82345
images.redhat.com
issues.redhat.com/browse/RHEL-287191
grafana.com/security/security-advisories/cve-2026-17183
launchpad.net/bugs/2150256
jira.mongodb.org/browse/GODRIVER-4081
mongodb.com/community/forums/t/mongodb-go-driver-1-17-10-released/343342
curl.se/docs/CVE-2026-8924.html
hackerone.com/reports/3733905
gitlab.eclipse.org/security/cve-assignment/-/work_items/212
openssl-library.org/news/secadv/20260825.txt
docs.djangoproject.com/en/dev/releases/security
djangoproject.com/weblog/2026/aug/04/security-releases
vulncheck.com/advisories/gitpython-before-arbitrary-file-read-via-repo-archive
nodejs.org/en/blog/vulnerability/october-2026-security-releases
cisa.gov/known-exploited-vulnerabilities-catalog
git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98432.mbox
errata.rockylinux.org/RLSA-2026:86093
crates.io/crates/webpki-roots
rustsec.org/advisories/RUSTSEC-2026-0381.html
emudhra.we-have-a-problem.com
bugzilla.mozilla.org/show_bug.cgi?id=2083449
suse.com/support/update/announcement/2026/suse-su-202624359-1
bugzilla.suse.com/1255111
ubuntu.com/security/CVE-2026-111943
This page doesn't list everything
Left out here: 898 package rows and 1,052 references. The JSON record has them. Also not on the record: 177 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 226 source records.