{"id":"CVE-2025-47914","aliases":["ALPINE-CVE-2025-47914","DEBIAN-CVE-2025-47914","EUVD-2025-198227","GHSA-f6x5-jh6r-wrfv","GO-2025-4135","OESA-2026-3398","OESA-2026-3399","OESA-2026-3400","OESA-2026-3401","OESA-2026-3879","OESA-2026-3880","OESA-2026-4068","RHSA-2026:7291","RHSA-2026:7385","ROOT-APP-GOBINARY-CVE-2025-47914","SUSE-SU-2025:4526-1","SUSE-SU-2025:4536-1","SUSE-SU-2026:0014-1","SUSE-SU-2026:0067-1","SUSE-SU-2026:0125-1","SUSE-SU-2026:0439-1","SUSE-SU-2026:20035-1","SUSE-SU-2026:20123-1","SUSE-SU-2026:20176-1","SUSE-SU-2026:20244-1","SUSE-SU-2026:20357-1","SUSE-SU-2026:20451-1","SUSE-SU-2026:20626-1","SUSE-SU-2026:20641-1","SUSE-SU-2026:20656-1","SUSE-SU-2026:20949-1","SUSE-SU-2026:20976-1","SUSE-SU-2026:21291-1","SUSE-SU-2026:21756-1","SUSE-SU-2026:21827-1","SUSE-SU-2026:22451-1","SUSE-SU-2026:22516-1","SUSE-SU-2026:2400-1","SUSE-SU-2026:2401-1","SUSE-SU-2026:24378-1","SUSE-SU-2026:2493-1","SUSE-SU-2026:2706-1","SUSE-SU-2026:2733-1","SUSE-SU-2026:3056-1","SUSE-SU-2026:3630-1","SUSE-SU-2026:5067-1","UBUNTU-CVE-2025-47914","openSUSE-RU-2026:20010-1","openSUSE-SU-2025:15771-1","openSUSE-SU-2025:15773-1","openSUSE-SU-2025:15852-1","openSUSE-SU-2025:20143-1","openSUSE-SU-2025:20177-1","openSUSE-SU-2026:10013-1","openSUSE-SU-2026:10042-1","openSUSE-SU-2026:10302-1","openSUSE-SU-2026:11781-1","openSUSE-SU-2026:12295-1","openSUSE-SU-2026:12300-1","openSUSE-SU-2026:12314-1","openSUSE-SU-2026:20080-1","openSUSE-SU-2026:20132-1","openSUSE-SU-2026:20305-1","openSUSE-SU-2026:20438-1","openSUSE-SU-2026:20730-1","openSUSE-SU-2026:20788-1","openSUSE-SU-2026:20798-1","openSUSE-SU-2026:20902-1","openSUSE-SU-2026:21244-1","openSUSE-SU-2026:21483-1","openSUSE-SU-2026:21824-1"],"status":"published","title":"Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00546,"percentile":0.46307,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2025-11-19T20:11:57Z","modified":"2026-11-11T09:39:13Z","fixes":[{"ecosystem":"Go","package":"golang.org/x/crypto","fixed_in":["0.45.0"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.23","package":"etcd","fixed_in":["3.6.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"etcd","fixed_in":["3.6.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"golang-go.crypto","fixed_in":["1:0.45.0-1"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"golang.org/x/crypto","fixed_in":["v0.35.0-aikido.4","v0.37.0-aikido.5","v0.37.0-aikido.6","v0.40.0-aikido.8","v0.40.0-aikido.9","v0.32.0-aikido.6","v0.31.0-aikido.6","v0.31.0-aikido.7","v0.40.0-aikido.3","v0.35.0-aikido.2","v0.37.0-aikido.2","v0.31.0-aikido.8","v0.40.0-aikido.4","v0.37.0-aikido.3","v0.35.0-aikido.3","v0.40.0-aikido.5","v0.40.0-aikido.6","v0.36.0-aikido.3","v0.31.0-aikido.12","v0.31.0-aikido.10","v0.36.0-aikido.2","v0.31.0-aikido.11","v0.36.0-aikido.1","v0.32.0-aikido.4","v0.40.0-aikido.7","v0.37.0-aikido.4","v0.32.0-aikido.5","v0.31.0-aikido.9","v0.35.0-aikido.5","v0.35.0-aikido.6"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"rootio-golang.org/x/crypto","fixed_in":["v0.35.0-root.io.4","v0.31.0-root.io.1","v0.40.0-root.io.1","v0.37.0-root.io.1","v0.37.0-root.io.5","v0.37.0-root.io.6","v0.40.0-root.io.8","v0.40.0-root.io.9","v0.32.0-root.io.6","v0.35.0-root.io.1","v0.35.0-root.io.5","v0.31.0-root.io.12","v0.31.0-root.io.6","v0.31.0-root.io.7","v0.40.0-root.io.3","v0.35.0-root.io.2","v0.37.0-root.io.2","v0.31.0-root.io.8","v0.40.0-root.io.4","v0.37.0-root.io.3","v0.35.0-root.io.3","v0.40.0-root.io.5","v0.40.0-root.io.6","v0.36.0-root.io.3","v0.31.0-root.io.10","v0.36.0-root.io.2","v0.31.0-root.io.11","v0.36.0-root.io.1","v0.32.0-root.io.4","v0.40.0-root.io.7","v0.37.0-root.io.4","v0.32.0-root.io.5","v0.31.0-root.io.9","v0.35.0-root.io.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"podman","fixed_in":["4.9.5-150300.9.69.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"podman","fixed_in":["4.9.5-150300.9.69.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"podman","fixed_in":["4.9.5-150500.3.62.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"podman","fixed_in":["4.9.5-150500.3.62.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"podman","fixed_in":["4.9.5-150500.3.62.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"podman","fixed_in":["4.9.5-150400.4.65.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"podman","fixed_in":["4.9.5-150400.4.65.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"amazon-ssm-agent","fixed_in":["3.3.5678.0-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"golang.org/x/crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.8-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.10.0-1","1:0.12.0-1","1:0.13.0-1","1:0.14.0-1","1:0.16.0-1","1:0.17.0-1","1:0.18.0-1","1:0.19.0-1","1:0.21.0-1","1:0.22.0-1","1:0.23.0-1","1:0.24.0-1","1:0.24.0-2","1:0.25.0-1","1:0.25.0-1~bpo12+1","1:0.33.0-1~exp1","1:0.36.0-1~exp1","1:0.4.0-1","1:0.41.0-1~exp1","1:0.42.0-1","1:0.42.0-1~exp1","1:0.42.0-2","1:0.42.0-3","1:0.42.0-4","1:0.43.0-1","1:0.43.0-2","1:0.45.0-1","1:0.46.0-1","1:0.47.0-1","1:0.50.0-1","1:0.52.0-1","1:0.52.0-1~bpo13+1","1:0.53.0-1","1:0.54.0-1","1:0.55.0-1","1:0.56.0-1","1:0.57.0-1","1:0.57.0-2","1:0.57.0-2~bpo13+1","1:0.58.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.25.0-1","1:0.33.0-1~exp1","1:0.36.0-1~exp1","1:0.41.0-1~exp1","1:0.42.0-1","1:0.42.0-1~exp1","1:0.42.0-2","1:0.42.0-3","1:0.42.0-4","1:0.43.0-1","1:0.43.0-2","1:0.45.0-1","1:0.46.0-1","1:0.47.0-1","1:0.50.0-1","1:0.52.0-1","1:0.52.0-1~bpo13+1","1:0.53.0-1","1:0.54.0-1","1:0.55.0-1","1:0.56.0-1","1:0.57.0-1","1:0.57.0-2","1:0.57.0-2~bpo13+1","1:0.58.0-1"]},{"source":"osv","ecosystem":"Debian:14","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.45.0-1"}]}],"versions":["1:0.25.0-1","1:0.33.0-1~exp1","1:0.36.0-1~exp1","1:0.41.0-1~exp1","1:0.42.0-1","1:0.42.0-1~exp1","1:0.42.0-2","1:0.42.0-3","1:0.42.0-4","1:0.43.0-1","1:0.43.0-2"]},{"source":"osv","ecosystem":"Go","package":"golang.org/x/crypto","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.45.0"}]}]},{"source":"osv","ecosystem":"Go","package":"golang.org/x/crypto","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.45.0"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.1-13.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-15.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-15.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-15.oe2403sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"git-lfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2.oe2403sp1"}]}],"bundled":34},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"git-lfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-3.oe2403sp3"}]}],"bundled":34},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"git-lfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2.oe2403sp4"}]}],"bundled":45},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-1.hum1"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.26-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-1.hum1"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.26-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-1.hum1"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.26-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-1.hum1"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.26-shared","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-1.hum1"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.26-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-1.hum1"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.26-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2-1.hum1"}]}],"bundled":40},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.9-1.hum1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.25-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.9-1.hum1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.25-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.9-1.hum1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.25-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.9-1.hum1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.25-shared","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.9-1.hum1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.25-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.9-1.hum1"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"golang1.25-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.9-1.hum1"}]}],"bundled":38},{"source":"osv","ecosystem":"Root:Go","package":"golang.org/x/crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v0.35.0-aikido.4"},{"fixed":"v0.37.0-aikido.5"},{"fixed":"v0.37.0-aikido.6"},{"fixed":"v0.40.0-aikido.8"},{"fixed":"v0.40.0-aikido.9"},{"fixed":"v0.32.0-aikido.6"},{"fixed":"v0.31.0-aikido.6"},{"fixed":"v0.31.0-aikido.7"},{"fixed":"v0.40.0-aikido.3"},{"fixed":"v0.35.0-aikido.2"},{"fixed":"v0.37.0-aikido.2"},{"fixed":"v0.31.0-aikido.8"},{"fixed":"v0.40.0-aikido.4"},{"fixed":"v0.37.0-aikido.3"},{"fixed":"v0.35.0-aikido.3"},{"fixed":"v0.40.0-aikido.5"},{"fixed":"v0.40.0-aikido.6"},{"fixed":"v0.36.0-aikido.3"},{"fixed":"v0.31.0-aikido.12"},{"fixed":"v0.31.0-aikido.10"},{"fixed":"v0.36.0-aikido.2"},{"fixed":"v0.31.0-aikido.11"},{"fixed":"v0.36.0-aikido.1"},{"fixed":"v0.32.0-aikido.4"},{"fixed":"v0.40.0-aikido.7"},{"fixed":"v0.37.0-aikido.4"},{"fixed":"v0.32.0-aikido.5"},{"fixed":"v0.31.0-aikido.9"},{"fixed":"v0.35.0-aikido.5"},{"fixed":"v0.35.0-aikido.6"}]}]},{"source":"osv","ecosystem":"Root:Go","package":"rootio-golang.org/x/crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v0.35.0-root.io.4"},{"fixed":"v0.31.0-root.io.1"},{"fixed":"v0.40.0-root.io.1"},{"fixed":"v0.37.0-root.io.1"},{"fixed":"v0.37.0-root.io.5"},{"fixed":"v0.37.0-root.io.6"},{"fixed":"v0.40.0-root.io.8"},{"fixed":"v0.40.0-root.io.9"},{"fixed":"v0.32.0-root.io.6"},{"fixed":"v0.35.0-root.io.1"},{"fixed":"v0.35.0-root.io.5"},{"fixed":"v0.31.0-root.io.12"},{"fixed":"v0.31.0-root.io.6"},{"fixed":"v0.31.0-root.io.7"},{"fixed":"v0.40.0-root.io.3"},{"fixed":"v0.35.0-root.io.2"},{"fixed":"v0.37.0-root.io.2"},{"fixed":"v0.31.0-root.io.8"},{"fixed":"v0.40.0-root.io.4"},{"fixed":"v0.37.0-root.io.3"},{"fixed":"v0.35.0-root.io.3"},{"fixed":"v0.40.0-root.io.5"},{"fixed":"v0.40.0-root.io.6"},{"fixed":"v0.36.0-root.io.3"},{"fixed":"v0.31.0-root.io.10"},{"fixed":"v0.36.0-root.io.2"},{"fixed":"v0.31.0-root.io.11"},{"fixed":"v0.36.0-root.io.1"},{"fixed":"v0.32.0-root.io.4"},{"fixed":"v0.40.0-root.io.7"},{"fixed":"v0.37.0-root.io.4"},{"fixed":"v0.32.0-root.io.5"},{"fixed":"v0.31.0-root.io.9"},{"fixed":"v0.35.0-root.io.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150400.3.59.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150400.3.59.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150400.3.59.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150400.3.59.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.69.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.69.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.62.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.62.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.62.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.65.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.65.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP7","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-150600.4.12.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP7","package":"squashfuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-150600.3.2.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-150600.4.12.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"squashfuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-150600.3.2.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-150600.4.12.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"squashfuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-150600.3.2.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39.5-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39.5-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"elemental-register","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"elemental-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"elemental-operator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.10-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"elemental-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"elemental-operator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-slfo.1.1_1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"elemental-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-slfo.1.1_1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"docker-compose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.4.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.4.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.4.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"docker-compose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"docker-compose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"docker-compose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"docker-compose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-slfo.1.1_5.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-12.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-150700.3.24.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"kubevirt-1.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.6-150700.15.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-slfo.1.1_6.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.64.0-150700.9.11.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150400.3.68.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150400.3.68.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150400.3.68.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150400.3.68.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.62.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.62.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.62.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.62.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.62.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.62.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.5-150500.3.62.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.6.18.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-azurerm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.0-150200.6.12.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-external","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.6.12.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-google","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.43.0-150200.6.12.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-helm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.6.23.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2-150200.6.12.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.6.17.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-null","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.18.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-random","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.15.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"terraform-provider-tls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.5.15.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-150200.6.18.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-azurerm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.0-150200.6.12.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-external","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.6.12.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-google","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.43.0-150200.6.12.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-helm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-150200.6.23.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2-150200.6.12.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-150200.6.17.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-null","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.18.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-random","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.6.15.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"terraform-provider-tls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-150200.5.15.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"kubevirt-1.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.6-150700.15.17.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"amazon-ssm-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.5678.0-4.55.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.0~git20150608-1","1:0.0~git20151201.0.7b85b09-2","1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm1","1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm2","1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"lxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.20-0ubuntu4","0.21-0ubuntu3","0.21-0ubuntu5","0.22-0ubuntu1","0.22-0ubuntu2","0.23-0ubuntu1","0.23-0ubuntu2","0.23-0ubuntu3","0.24-0ubuntu2","0.24-0ubuntu3","0.24-0ubuntu4","0.25-0ubuntu1","0.26-0ubuntu2","0.26-0ubuntu3","0.27-0ubuntu1","0.27-0ubuntu2","2.0.0~beta1-0ubuntu3","2.0.0~beta1-0ubuntu4","2.0.0~beta2-0ubuntu1","2.0.0~beta2-0ubuntu2","2.0.0~beta3-0ubuntu1","2.0.0~beta3-0ubuntu2","2.0.0~beta3-0ubuntu3","2.0.0~beta3-0ubuntu4","2.0.0~beta4-0ubuntu1","2.0.0~beta4-0ubuntu2","2.0.0~beta4-0ubuntu3","2.0.0~beta4-0ubuntu4","2.0.0~beta4-0ubuntu5","2.0.0~beta4-0ubuntu6","2.0.0~beta4-0ubuntu7","2.0.0~rc1-0ubuntu1","2.0.0~rc1-0ubuntu2","2.0.0~rc1-0ubuntu3","2.0.0~rc2-0ubuntu2","2.0.0~rc2-0ubuntu3","2.0.0~rc3-0ubuntu1","2.0.0~rc3-0ubuntu2","2.0.0~rc3-0ubuntu3","2.0.0~rc3-0ubuntu4","2.0.0~rc4-0ubuntu1","2.0.0~rc5-0ubuntu1","2.0.0~rc6-0ubuntu1","2.0.0~rc6-0ubuntu2","2.0.0~rc7-0ubuntu1","2.0.0~rc7-0ubuntu2","2.0.0~rc8-0ubuntu1","2.0.0~rc8-0ubuntu2","2.0.0~rc8-0ubuntu3","2.0.0~rc8-0ubuntu5","2.0.0~rc8-0ubuntu6","2.0.0~rc8-0ubuntu7","2.0.0~rc9-0ubuntu2","2.0.0~rc9-0ubuntu3","2.0.0~rc9-0ubuntu4","2.0.0~rc9-0ubuntu5","2.0.0-0ubuntu1","2.0.0-0ubuntu2","2.0.0-0ubuntu3","2.0.0-0ubuntu4","2.0.1-0ubuntu1~16.04.1","2.0.2-0ubuntu1~16.04.1","2.0.3-0ubuntu1~ubuntu16.04.2","2.0.4-0ubuntu1~ubuntu16.04.1","2.0.5-0ubuntu1~ubuntu16.04.1","2.0.8-0ubuntu1~ubuntu16.04.1","2.0.8-0ubuntu1~ubuntu16.04.2","2.0.9-0ubuntu1~16.04.1","2.0.9-0ubuntu1~16.04.2","2.0.10-0ubuntu1~16.04.1","2.0.10-0ubuntu1~16.04.2","2.0.11-0ubuntu1~16.04.2","2.0.11-0ubuntu1~16.04.4","2.0.11-0ubuntu1~16.04.4+esm1","2.0.11-0ubuntu1~16.04.4+esm2","2.0.11-0ubuntu1~16.04.4+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9","1.9.1.1","1.9.2","2.0","2.0.1","2.0.2","2.0.3","2.0.5","2.0.8","2.0.9","2.0.10","2.11+0.16.04","2.12+0.16.04","2.13","2.14.2~16.04","2.15.2ubuntu1","2.16ubuntu3","2.17.1ubuntu1","2.20.1ubuntu1","2.21","2.22.2","2.22.3","2.22.6","2.23.1","2.24.1","2.25","2.26.10","2.27.5","2.28.5","2.29.4.2","2.32.3.2","2.32.9","2.33.1ubuntu2","2.34.2","2.34.2ubuntu0.1","2.37.4","2.37.4ubuntu0.1","2.38","2.39.2","2.39.2ubuntu0.2","2.40","2.42.1","2.45.1","2.45.1ubuntu0.2","2.46.1","2.47.1","2.48","2.48.3","2.54.3+16.04~esm2","2.54.3+16.04.0ubuntu0.1~esm3","2.54.3+16.04.0ubuntu0.1~esm4","2.54.3+16.04.0ubuntu0.1~esm5","2.54.3+16.04.0ubuntu0.1~esm6","2.61.4ubuntu0.16.04.1+esm1","2.61.4ubuntu0.16.04.1+esm2","2.61.4ubuntu0.16.04.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"lxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18-0ubuntu6","2.19-0ubuntu1","2.20-0ubuntu3","2.20-0ubuntu4","2.21-0ubuntu1","2.21-0ubuntu2","2.21-0ubuntu3","2.21-0ubuntu4","3.0.0~beta2-0ubuntu3","3.0.0~beta3-0ubuntu3","3.0.0~beta5-0ubuntu2","3.0.0~beta7-0ubuntu1","3.0.0-0ubuntu1","3.0.0-0ubuntu2","3.0.0-0ubuntu3","3.0.0-0ubuntu4","3.0.1-0ubuntu1~18.04.1","3.0.2-0ubuntu1~18.04.1","3.0.3-0ubuntu1~18.04.1","3.0.3-0ubuntu1~18.04.2","3.0.3-0ubuntu1~18.04.2+esm1","3.0.3-0ubuntu1~18.04.2+esm2","3.0.3-0ubuntu1~18.04.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.28.5+17.10","2.29.4.1+18.04","2.29.4.2+18.04","2.31.1+18.04","2.32+18.04~pre5","2.32+18.04~pre6","2.32+18.04","2.32.3.2+18.04","2.32.5+18.04","2.32.8+18.04","2.32.9+18.04","2.33.1+18.04ubuntu2","2.34.2+18.04","2.34.2+18.04.1","2.37.1+18.04","2.37.1.1+18.04","2.37.4+18.04","2.37.4+18.04.1","2.38+18.04","2.39.2+18.04","2.40+18.04","2.42.1+18.04","2.45.1+18.04","2.45.1+18.04.2","2.46.1+18.04","2.47.1+18.04","2.48+18.04","2.48.3+18.04","2.49.2+18.04","2.51.1+18.04","2.54.2+18.04ubuntu1","2.54.3+18.04","2.54.3+18.04.2ubuntu0.1","2.54.3+18.04.2ubuntu0.2","2.55.5+18.04","2.57.5+18.04","2.57.5+18.04ubuntu0.1","2.58+18.04","2.58+18.04.1","2.61.4ubuntu0.18.04.1+esm1","2.61.4ubuntu0.18.04.1+esm2","2.61.4ubuntu0.18.04.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.0~git20170629.0.5ef0053-1ubuntu1","1:0.0~git20170629.0.5ef0053-1ubuntu2","1:0.0~git20170629.0.5ef0053-2","1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm1","1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm2","1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.41+19.10.1","2.42.1+20.04","2.43.3+git1.8109f8","2.44~pre1+20.04","2.44+20.04","2.44.2+20.04","2.44.3+20.04","2.45.1+20.04","2.45.1+20.04.2","2.46.1+20.04","2.47.1+20.04","2.48+20.04","2.48.3+20.04","2.49.2+20.04","2.51.1+20.04ubuntu2","2.54.2+20.04ubuntu2","2.54.3+20.04","2.54.3+20.04.1","2.54.3+20.04.1ubuntu0.1","2.54.3+20.04.1ubuntu0.2","2.54.3+20.04.1ubuntu0.3","2.55.5+20.04","2.57.5+20.04","2.57.5+20.04ubuntu0.1","2.58+20.04","2.58+20.04.1","2.61.3+20.04","2.62+20.04","2.63+20.04","2.63+20.04ubuntu0.1","2.65.3+20.04","2.66.1+20.04","2.67.1+20.04","2.67.1+20.04ubuntu1~esm1","2.67.1+20.04ubuntu1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.0~git20190701.4def268-2","1:0.0~git20200221.2aa609c-1","1:0.0~git20200221.2aa609c-1ubuntu0.1~esm1","1:0.0~git20200221.2aa609c-1ubuntu0.1~esm2","1:0.0~git20200221.2aa609c-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.53+21.10ubuntu1","2.54.2+22.04ubuntu1","2.54.2+22.04ubuntu2","2.54.2+22.04ubuntu3","2.54.3+git19.g868fc21+22.04","2.54.3+git26.g360067e+22.04","2.55.2+22.04","2.55.2+22.04.1","2.55.3+22.04","2.55.3+22.04ubuntu1","2.55.5+22.04","2.56.2+22.04ubuntu1","2.57.4+22.04","2.57.5+22.04","2.57.5+22.04ubuntu0.1","2.58+22.04","2.58+22.04.1","2.61.3+22.04","2.62+22.04","2.63+22.04","2.63+22.04ubuntu0.1","2.65.3+22.04","2.66.1+22.04","2.67.1+22.04","2.68.5+ubuntu22.04.1","2.71+ubuntu22.04","2.72+ubuntu22.04","2.73+ubuntu22.04","2.73+ubuntu22.04.1","2.74.1+ubuntu22.04.4","2.75.2+ubuntu22.04","2.76+ubuntu22.04","2.76+ubuntu22.04.1","2.76.3+ubuntu22.04","2.76.3+ubuntu22.04.1","2.77.1+ubuntu22.04.1","2.78+ubuntu22.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.0~git20201221.eec23a3-1","1:0.0~git20211202.5770296-1","1:0.0~git20211202.5770296-1ubuntu0.1~esm1","1:0.0~git20211202.5770296-1ubuntu0.1~esm2","1:0.0~git20211202.5770296-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.60.4+23.10","2.61.3+24.04","2.62+24.04build1","2.63+24.04","2.63+24.04ubuntu0.1","2.63.1+24.04","2.65.3+24.04","2.66.1+24.04","2.67.1+24.04","2.68.5+ubuntu24.04.1","2.71+ubuntu24.04","2.72+ubuntu24.04","2.73+ubuntu24.04","2.73+ubuntu24.04.1","2.73+ubuntu24.04.2","2.74.1+ubuntu24.04.4","2.75.2+ubuntu24.04","2.76+ubuntu24.04","2.76+ubuntu24.04.1","2.76.3+ubuntu24.04","2.77.1+ubuntu24.04","2.78+ubuntu24.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.4.0-1","1:0.17.0-1","1:0.18.0-1","1:0.19.0-1","1:0.19.0-1ubuntu0.1~esm1","1:0.19.0-1ubuntu0.1~esm2","1:0.19.0-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.25.0-1","1:0.25.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.67.1+25.04","2.68.5+ubuntu25.10.2","2.71+ubuntu25.10","2.71.1+ubuntu25.10.1","2.72+ubuntu25.10.2","2.73+ubuntu25.10","2.73+ubuntu25.10.1","2.74.1+ubuntu25.10.4","2.75.2+ubuntu25.10"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.47.0-1","1:0.55.0-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74.1+ubuntu26.04.4","2.76+ubuntu26.10.1","2.76+ubuntu26.10.2","2.76.3+ubuntu26.10","2.77.1+ubuntu26.10.1","2.78+ubuntu26.10"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.71.1+ubuntu25.10.1","2.72+ubuntu26.04.1","2.73+ubuntu26.04.1","2.74+ubuntu26.04","2.74.1+ubuntu26.04","2.74.1+ubuntu26.04.3","2.74.1+ubuntu26.04.4","2.75.2+ubuntu26.04.2","2.76+ubuntu26.04.2","2.76+ubuntu26.04.3","2.76.3+ubuntu26.04","2.77.1+ubuntu26.04.2","2.78+ubuntu26.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"golang-go.crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.25.0-1","1:0.45.0-1","1:0.47.0-1","1:0.47.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"git-bug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cheat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"trivy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.68.2-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"git-bug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-bp160.1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cheat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-bp160.2.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mcphost","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.32.0-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kubeshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"53.1.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rz-pm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.6-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"k3sup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.14-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kumactl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-1.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"amazon-ssm-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.5678.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39.5-160000.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"elemental-register","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"elemental-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.4.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"docker-compose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.5.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20260723T184607-160000.1.1"}]}],"bundled":1734},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"containerized-data-importer1.65","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.65.0-160000.3.1"}]}],"bundled":39}],"products":[{"vendor":"golang","product":"crypto"},{"vendor":"golang.org/x/crypto","product":"golang.org/x/crypto/ssh/agent"}],"references":[{"url":"https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA","tags":["Mailing List","web","advisory","article","report"]},{"url":"https://go.dev/cl/721960","tags":["Patch","web","fix","article","report"]},{"url":"https://go.dev/issue/76364","tags":["Issue Tracking","Patch","web","report","article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4135","tags":["Vendor Advisory","web","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47914","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f6x5-jh6r-wrfv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-47914","tags":["advisory"]},{"url":"https://pkg.go.dev","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47914.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-47914","tags":["advisory"]},{"url":"https://go.googlesource.com/crypto","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58181","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3399","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3400","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3401","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4673","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47906","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47910","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48385","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58186","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58187","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61727","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25679","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32280","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32281","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33810","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33811","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42507","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56862","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3880","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26625","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27614","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4674","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61725","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7291","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27141","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58190","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-47911","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-22873","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68119","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61732","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61731","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61725","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61724","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61723","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58186","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58185","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58181","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-47914","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-47912","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-47910","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68121","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61730","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61729","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58189","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58187","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58188","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58183","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61728","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61726","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33809","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32289","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32288","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32283","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32282","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32281","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27144","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27143","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33810","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61727","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-25679","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27139","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27138","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27137","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27142","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7291.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436992","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-22873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22873","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/05/06/2","tags":["article"]},{"url":"https://go.dev/cl/670036","tags":["article"]},{"url":"https://go.dev/issue/73555","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4403","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2397528","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47910","tags":["advisory"]},{"url":"https://go.dev/cl/699275","tags":["article"]},{"url":"https://go.dev/issue/75054","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3955","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437109","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47911","tags":["advisory"]},{"url":"https://github.com/golang/vulndb/issues/4440","tags":["article"]},{"url":"https://go.dev/cl/709876","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4440","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407247","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47912","tags":["advisory"]},{"url":"https://go.dev/cl/709857","tags":["article"]},{"url":"https://go.dev/issue/75678","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4010","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416000","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47914","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2415997","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58181","tags":["advisory"]},{"url":"https://go.dev/cl/721961","tags":["article"]},{"url":"https://go.dev/issue/76363","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4134","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407258","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58183","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3122","tags":["article"]},{"url":"https://go.dev/cl/709861","tags":["article"]},{"url":"https://go.dev/issue/75677","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4014","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58185","tags":["advisory"]},{"url":"https://github.com/golang/go/commit/8709a41d5ef7321f486a1857f189c3fee20e8edd","tags":["article"]},{"url":"https://go.dev/cl/709856","tags":["article"]},{"url":"https://go.dev/issue/75671","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4011","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407250","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58186","tags":["advisory"]},{"url":"https://go.dev/cl/709855","tags":["article"]},{"url":"https://go.dev/issue/75672","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4012","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407259","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58187","tags":["advisory"]},{"url":"https://github.com/golang/go/commit/3fc4c79fdbb17b9b29ea9f8c29dd780df075d4c4","tags":["article"]},{"url":"https://go.dev/cl/709854","tags":["article"]},{"url":"https://go.dev/issue/75681","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4007","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58188","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407260","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58189","tags":["advisory"]},{"url":"https://go.dev/cl/707776","tags":["article"]},{"url":"https://go.dev/issue/75652","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4008","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437110","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58190","tags":["advisory"]},{"url":"https://github.com/golang/vulndb/issues/4441","tags":["article"]},{"url":"https://go.dev/cl/709875","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4441","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61723","tags":["advisory"]},{"url":"https://github.com/golang/go/commit/5ce8cd16f3859ec5ac4106ad8ec15d6236f4501b","tags":["article"]},{"url":"https://go.dev/cl/709858","tags":["article"]},{"url":"https://go.dev/issue/75676","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4009","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407257","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61724","tags":["advisory"]},{"url":"https://go.dev/cl/709859","tags":["article"]},{"url":"https://go.dev/issue/75716","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4015","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407249","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61725","tags":["advisory"]},{"url":"https://go.dev/cl/709860","tags":["article"]},{"url":"https://go.dev/issue/75680","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4006","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434432","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61726","tags":["advisory"]},{"url":"https://go.dev/cl/736712","tags":["article"]},{"url":"https://go.dev/issue/77101","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4341","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61727","tags":["advisory"]},{"url":"https://go.dev/cl/723900","tags":["article"]},{"url":"https://go.dev/issue/76442","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/8FJoBkPddm4","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4175","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61728","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61728","tags":["advisory"]},{"url":"https://go.dev/cl/736713","tags":["article"]},{"url":"https://go.dev/issue/77102","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4342","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418462","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61729","tags":["advisory"]},{"url":"https://go.dev/cl/725920","tags":["article"]},{"url":"https://go.dev/issue/76445","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4155","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434430","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61730","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61730","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434433","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61731","tags":["advisory"]},{"url":"https://go.dev/cl/736711","tags":["article"]},{"url":"https://go.dev/issue/77100","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4339","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437016","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61732","tags":["advisory"]},{"url":"https://go.dev/cl/734220","tags":["article"]},{"url":"https://go.dev/issue/76697","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/K09ubi9FQFk","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4433","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68119","tags":["advisory"]},{"url":"https://go.dev/cl/736710","tags":["article"]},{"url":"https://go.dev/issue/77099","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4338","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437111","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68121","tags":["advisory"]},{"url":"https://go.dev/cl/737700","tags":["article"]},{"url":"https://go.dev/issue/77217","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4337","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445356","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25679","tags":["advisory"]},{"url":"https://go.dev/cl/752180","tags":["article"]},{"url":"https://go.dev/issue/77578","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4601","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27137","tags":["advisory"]},{"url":"https://go.dev/cl/752182","tags":["article"]},{"url":"https://go.dev/issue/77952","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4599","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445344","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27138","tags":["advisory"]},{"url":"https://go.dev/cl/752183","tags":["article"]},{"url":"https://go.dev/issue/77953","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4600","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27139","tags":["advisory"]},{"url":"https://go.dev/cl/749480","tags":["article"]},{"url":"https://go.dev/issue/77827","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4602","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2443104","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27141","tags":["advisory"]},{"url":"https://go.dev/cl/746180","tags":["article"]},{"url":"https://go.dev/issue/77652","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4559","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445351","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27142","tags":["advisory"]},{"url":"https://go.dev/cl/752081","tags":["article"]},{"url":"https://go.dev/issue/77954","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4603","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27143","tags":["advisory"]},{"url":"https://go.dev/cl/763765","tags":["article"]},{"url":"https://go.dev/issue/78333","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4868","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456340","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27144","tags":["advisory"]},{"url":"https://go.dev/cl/763764","tags":["article"]},{"url":"https://go.dev/issue/78371","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4867","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456333","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32281","tags":["advisory"]},{"url":"https://go.dev/cl/758061","tags":["article"]},{"url":"https://go.dev/issue/78281","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4946","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456336","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32282","tags":["advisory"]},{"url":"https://go.dev/cl/763761","tags":["article"]},{"url":"https://go.dev/issue/78293","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4864","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32283","tags":["advisory"]},{"url":"https://go.dev/cl/763767","tags":["article"]},{"url":"https://go.dev/issue/78334","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4870","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456332","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32288","tags":["advisory"]},{"url":"https://go.dev/cl/763766","tags":["article"]},{"url":"https://go.dev/issue/78301","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4869","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456334","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32289","tags":["advisory"]},{"url":"https://go.dev/cl/763762","tags":["article"]},{"url":"https://go.dev/issue/78331","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4865","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33809","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33809","tags":["advisory"]},{"url":"https://go.dev/cl/757660","tags":["article"]},{"url":"https://go.dev/issue/78267","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4815","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33810","tags":["advisory"]},{"url":"https://go.dev/cl/763763","tags":["article"]},{"url":"https://go.dev/issue/78332","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4866","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7385","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33813","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42503","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7385.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33813","tags":["advisory"]},{"url":"https://go.dev/cl/759860","tags":["article"]},{"url":"https://go.dev/issue/78407","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4961","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467285","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42503","tags":["advisory"]},{"url":"https://go.dev/cl/774381","tags":["article"]},{"url":"https://go.dev/issue/79211","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254526-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253598","tags":["report"]},{"url":"https://bugzilla.suse.com/1254054","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47914","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254536-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253993","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260014-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260067-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260125-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260439-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237608","tags":["report"]},{"url":"https://bugzilla.suse.com/1238611","tags":["report"]},{"url":"https://bugzilla.suse.com/1239322","tags":["report"]},{"url":"https://bugzilla.suse.com/1241710","tags":["report"]},{"url":"https://bugzilla.suse.com/1253506","tags":["report"]},{"url":"https://bugzilla.suse.com/1253784","tags":["report"]},{"url":"https://bugzilla.suse.com/1253967","tags":["report"]},{"url":"https://bugzilla.suse.com/1255462","tags":["report"]},{"url":"https://bugzilla.suse.com/1257432","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8556","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620035-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253542","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620123-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253096","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-31133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52881","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620176-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1241826","tags":["report"]},{"url":"https://bugzilla.suse.com/1241857","tags":["report"]},{"url":"https://bugzilla.suse.com/1251511","tags":["report"]},{"url":"https://bugzilla.suse.com/1251679","tags":["report"]},{"url":"https://bugzilla.suse.com/1253581","tags":["report"]},{"url":"https://bugzilla.suse.com/1253901","tags":["report"]},{"url":"https://bugzilla.suse.com/1254079","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58190","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620244-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620357-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620451-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253584","tags":["report"]},{"url":"https://bugzilla.suse.com/1254041","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620626-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248988","tags":["report"]},{"url":"https://bugzilla.suse.com/1249154","tags":["report"]},{"url":"https://bugzilla.suse.com/1252376","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9566","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620641-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620656-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1252752","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62725","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620949-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620976-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621291-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621756-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253952","tags":["report"]},{"url":"https://bugzilla.suse.com/1260224","tags":["report"]},{"url":"https://bugzilla.suse.com/1264759","tags":["report"]},{"url":"https://bugzilla.suse.com/1264762","tags":["report"]},{"url":"https://bugzilla.suse.com/1265274","tags":["report"]},{"url":"https://bugzilla.suse.com/1265275","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33186","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621827-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622451-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262856","tags":["report"]},{"url":"https://bugzilla.suse.com/1266125","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46598","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622516-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6104","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262400-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1251420","tags":["report"]},{"url":"https://bugzilla.suse.com/1251615","tags":["report"]},{"url":"https://bugzilla.suse.com/1253559","tags":["report"]},{"url":"https://bugzilla.suse.com/1253935","tags":["report"]},{"url":"https://bugzilla.suse.com/1254014","tags":["report"]},{"url":"https://bugzilla.suse.com/1260234","tags":["report"]},{"url":"https://bugzilla.suse.com/1265467","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7374","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262401-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624378-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268579","tags":["report"]},{"url":"https://bugzilla.suse.com/1269471","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57231","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262493-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230323","tags":["report"]},{"url":"https://bugzilla.suse.com/1236523","tags":["report"]},{"url":"https://bugzilla.suse.com/1238699","tags":["report"]},{"url":"https://bugzilla.suse.com/1241838","tags":["report"]},{"url":"https://bugzilla.suse.com/1251495","tags":["report"]},{"url":"https://bugzilla.suse.com/1251689","tags":["report"]},{"url":"https://bugzilla.suse.com/1260295","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29181","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262706-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262953","tags":["report"]},{"url":"https://bugzilla.suse.com/1266191","tags":["report"]},{"url":"https://bugzilla.suse.com/1266648","tags":["report"]},{"url":"https://bugzilla.suse.com/1267179","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42506","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262733-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263056-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208300","tags":["report"]},{"url":"https://bugzilla.suse.com/1241030","tags":["report"]},{"url":"https://bugzilla.suse.com/1241033","tags":["report"]},{"url":"https://bugzilla.suse.com/1241728","tags":["report"]},{"url":"https://bugzilla.suse.com/1251365","tags":["report"]},{"url":"https://bugzilla.suse.com/1251559","tags":["report"]},{"url":"https://bugzilla.suse.com/1253508","tags":["report"]},{"url":"https://bugzilla.suse.com/1253517","tags":["report"]},{"url":"https://bugzilla.suse.com/1253797","tags":["report"]},{"url":"https://bugzilla.suse.com/1253799","tags":["report"]},{"url":"https://bugzilla.suse.com/1253980","tags":["report"]},{"url":"https://bugzilla.suse.com/1253983","tags":["report"]},{"url":"https://bugzilla.suse.com/1258096","tags":["report"]},{"url":"https://bugzilla.suse.com/1260139","tags":["report"]},{"url":"https://bugzilla.suse.com/1260149","tags":["report"]},{"url":"https://bugzilla.suse.com/1260180","tags":["report"]},{"url":"https://bugzilla.suse.com/1263247","tags":["report"]},{"url":"https://bugzilla.suse.com/1263313","tags":["report"]},{"url":"https://bugzilla.suse.com/1263357","tags":["report"]},{"url":"https://bugzilla.suse.com/1263411","tags":["report"]},{"url":"https://bugzilla.suse.com/1263445","tags":["report"]},{"url":"https://bugzilla.suse.com/1263515","tags":["report"]},{"url":"https://bugzilla.suse.com/1263606","tags":["report"]},{"url":"https://bugzilla.suse.com/1264862","tags":["report"]},{"url":"https://bugzilla.suse.com/1264888","tags":["report"]},{"url":"https://bugzilla.suse.com/1264938","tags":["report"]},{"url":"https://bugzilla.suse.com/1266051","tags":["report"]},{"url":"https://bugzilla.suse.com/1266057","tags":["report"]},{"url":"https://bugzilla.suse.com/1266086","tags":["report"]},{"url":"https://bugzilla.suse.com/1266112","tags":["report"]},{"url":"https://bugzilla.suse.com/1266122","tags":["report"]},{"url":"https://bugzilla.suse.com/1266127","tags":["report"]},{"url":"https://bugzilla.suse.com/1266132","tags":["report"]},{"url":"https://bugzilla.suse.com/1266150","tags":["report"]},{"url":"https://bugzilla.suse.com/1266160","tags":["report"]},{"url":"https://bugzilla.suse.com/1266477","tags":["report"]},{"url":"https://bugzilla.suse.com/1266482","tags":["report"]},{"url":"https://bugzilla.suse.com/1266541","tags":["report"]},{"url":"https://bugzilla.suse.com/1266547","tags":["report"]},{"url":"https://bugzilla.suse.com/1267058","tags":["report"]},{"url":"https://bugzilla.suse.com/1267271","tags":["report"]},{"url":"https://bugzilla.suse.com/1267273","tags":["report"]},{"url":"https://bugzilla.suse.com/1267276","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44740","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263630-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262265","tags":["report"]},{"url":"https://bugzilla.suse.com/1265736","tags":["report"]},{"url":"https://bugzilla.suse.com/1266575","tags":["report"]},{"url":"https://bugzilla.suse.com/1267120","tags":["report"]},{"url":"https://bugzilla.suse.com/1269093","tags":["report"]},{"url":"https://bugzilla.suse.com/1272000","tags":["report"]},{"url":"https://bugzilla.suse.com/1272840","tags":["report"]},{"url":"https://bugzilla.suse.com/1273606","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56852","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265067-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253611","tags":["report"]},{"url":"https://bugzilla.suse.com/1253946","tags":["report"]},{"url":"https://bugzilla.suse.com/1254082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-47914","tags":["report"]},{"url":"https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA?pli=1","tags":["report"]},{"url":"https://github.com/golang/go/issues/76364","tags":["report"]},{"url":"https://github.com/golang/crypto/commit/f91f7a7c31bf90b39c1de895ad116a2bacc88748","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1251363","tags":["report"]},{"url":"https://bugzilla.suse.com/1251547","tags":["report"]},{"url":"https://bugzilla.suse.com/1253512","tags":["report"]},{"url":"https://bugzilla.suse.com/1253786","tags":["report"]},{"url":"https://bugzilla.suse.com/1253977","tags":["report"]},{"url":"https://bugzilla.suse.com/1234565","tags":["report"]},{"url":"https://bugzilla.suse.com/1239494","tags":["report"]},{"url":"https://bugzilla.suse.com/1251463","tags":["report"]},{"url":"https://bugzilla.suse.com/1251664","tags":["report"]},{"url":"https://bugzilla.suse.com/1253930","tags":["report"]},{"url":"https://bugzilla.suse.com/1254084","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45337","tags":["web"]},{"url":"https://bugzilla.suse.com/1247629","tags":["report"]},{"url":"https://bugzilla.suse.com/1253593","tags":["report"]},{"url":"https://bugzilla.suse.com/1253922","tags":["report"]},{"url":"https://bugzilla.suse.com/1254051","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-48795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-51744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41178","tags":["web"]},{"url":"https://bugzilla.suse.com/1228324","tags":["report"]},{"url":"https://bugzilla.suse.com/1234595","tags":["report"]},{"url":"https://bugzilla.suse.com/1234794","tags":["report"]},{"url":"https://bugzilla.suse.com/1235211","tags":["report"]},{"url":"https://bugzilla.suse.com/1236528","tags":["report"]},{"url":"https://bugzilla.suse.com/1237679","tags":["report"]},{"url":"https://bugzilla.suse.com/1239341","tags":["report"]},{"url":"https://bugzilla.suse.com/1253924","tags":["report"]},{"url":"https://bugzilla.suse.com/1258047","tags":["report"]},{"url":"https://bugzilla.suse.com/1258048","tags":["report"]},{"url":"https://bugzilla.suse.com/1260311","tags":["report"]},{"url":"https://bugzilla.suse.com/1262956","tags":["report"]},{"url":"https://bugzilla.suse.com/1264177","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24137","tags":["web"]},{"url":"https://bugzilla.suse.com/1227010","tags":["report"]},{"url":"https://bugzilla.suse.com/1232948","tags":["report"]},{"url":"https://bugzilla.suse.com/1234512","tags":["report"]},{"url":"https://bugzilla.suse.com/1235265","tags":["report"]},{"url":"https://bugzilla.suse.com/1237618","tags":["report"]},{"url":"https://bugzilla.suse.com/1239225","tags":["report"]},{"url":"https://bugzilla.suse.com/1239385","tags":["report"]},{"url":"https://bugzilla.suse.com/1240466","tags":["report"]},{"url":"https://bugzilla.suse.com/1241724","tags":["report"]},{"url":"https://bugzilla.suse.com/1243633","tags":["report"]},{"url":"https://bugzilla.suse.com/1246151","tags":["report"]},{"url":"https://bugzilla.suse.com/1246730","tags":["report"]},{"url":"https://bugzilla.suse.com/1248897","tags":["report"]},{"url":"https://bugzilla.suse.com/1248937","tags":["report"]},{"url":"https://bugzilla.suse.com/1250625","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58058","tags":["web"]},{"url":"https://bugzilla.suse.com/1253563","tags":["report"]},{"url":"https://bugzilla.suse.com/1253864","tags":["report"]},{"url":"https://bugzilla.suse.com/1254023","tags":["report"]},{"url":"https://bugzilla.suse.com/1258591","tags":["report"]},{"url":"https://bugzilla.suse.com/1260696","tags":["report"]},{"url":"https://bugzilla.suse.com/1266158","tags":["report"]},{"url":"https://bugzilla.suse.com/1266596","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-11084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-15558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-26625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-34410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-34429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-34430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-41443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-44001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-44004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-44005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-51667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-56760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-56761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-60638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-63389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-63811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-70849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-70950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-70963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-71261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-30963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-36045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-37461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-38651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9804","tags":["web"]},{"url":"https://bugzilla.suse.com/1248946","tags":["report"]},{"url":"https://bugzilla.suse.com/1262269","tags":["report"]},{"url":"https://bugzilla.suse.com/1262952","tags":["report"]},{"url":"https://bugzilla.suse.com/1265799","tags":["report"]},{"url":"https://bugzilla.suse.com/1266179","tags":["report"]},{"url":"https://bugzilla.suse.com/1266639","tags":["report"]},{"url":"https://bugzilla.suse.com/1267176","tags":["report"]},{"url":"https://bugzilla.suse.com/1272064","tags":["report"]},{"url":"https://bugzilla.suse.com/1276687","tags":["report"]},{"url":"https://bugzilla.suse.com/1278621","tags":["report"]},{"url":"https://bugzilla.suse.com/1279234","tags":["report"]},{"url":"https://bugzilla.suse.com/1279315","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84304","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-47914","title":"Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T20:33:43.126Z","modified":"2025-11-20T17:15:00.344Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:32:26.320248Z"}],"euvd":[{"id":"EUVD-2025-198227","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T20:33:43Z","modified":"2025-11-20T17:15:00Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:14.564249Z"}],"ghsa":[{"id":"GHSA-f6x5-jh6r-wrfv","title":"golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T23:16:40Z","modified":"2025-11-20T16:36:10Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:39:10.178331Z"}],"nvd":[{"id":"CVE-2025-47914","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T21:15:50.517Z","modified":"2026-10-18T20:10:00.11Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:11:46.009629Z"}],"osv":[{"id":"ALPINE-CVE-2025-47914","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T21:15:50.517Z","modified":"2026-11-03T06:32:15.428976902Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2025-47914","title":"Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T20:33:43.126Z","modified":"2026-11-03T22:56:57.150556075Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T23:33:38.94482Z"},{"id":"DEBIAN-CVE-2025-47914","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T21:15:50.517Z","modified":"2026-10-23T18:04:59.602787395Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"GHSA-f6x5-jh6r-wrfv","title":"golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T23:16:40Z","modified":"2026-09-10T03:50:30.884151926Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:46:46.006631Z"},{"id":"OESA-2026-3398","title":"buildah security update","description":"The  package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container\u0026amp;apos;s root file system for manipulation * save container\u0026amp;apos;s root file system layer to create a new image * delete a working container or an image\r\n\r\nSecurity Fix(es):\n\nSSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.(CVE-2025-47914)\n\nSSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.(CVE-2025-58181)","status":"published","published":"2026-08-13T14:02:50Z","modified":"2026-08-16T01:45:20.618925247Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3399","title":"buildah security update","description":"The  package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container\u0026amp;apos;s root file system for manipulation * save container\u0026amp;apos;s root file system layer to create a new image * delete a working container or an image\r\n\r\nSecurity Fix(es):\n\nSSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.(CVE-2025-47914)\n\nSSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.(CVE-2025-58181)","status":"published","published":"2026-08-13T14:02:52Z","modified":"2026-08-16T01:45:20.42245005Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3400","title":"buildah security update","description":"The  package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container\u0026amp;apos;s root file system for manipulation * save container\u0026amp;apos;s root file system layer to create a new image * delete a working container or an image\r\n\r\nSecurity Fix(es):\n\nSSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.(CVE-2025-47914)\n\nSSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.(CVE-2025-58181)","status":"published","published":"2026-08-13T14:02:54Z","modified":"2026-08-16T01:45:19.250274264Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3401","title":"buildah security update","description":"The  package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container\u0026amp;apos;s root file system for manipulation * save container\u0026amp;apos;s root file system layer to create a new image * delete a working container or an image\r\n\r\nSecurity Fix(es):\n\nSSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.(CVE-2025-47914)\n\nSSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.(CVE-2025-58181)","status":"published","published":"2026-08-13T14:02:56Z","modified":"2026-08-16T01:45:20.294124292Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3879","title":"git-lfs security update","description":"Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.\r\n\r\nSecurity Fix(es):\n\nThe filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.(CVE-2024-8244)\n\nGitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk\u0026apos;s Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.(CVE-2025-27613)\n\nProxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.(CVE-2025-4673)\n\nIf the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath (\u0026quot;\u0026quot;, \u0026quot;.\u0026quot;, and \u0026quot;..\u0026quot;), can result in the binaries listed in the PATH being unexpectedly returned.(CVE-2025-47906)\n\nWhen using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.(CVE-2025-47910)\n\nThe Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: \u0026quot;http://[::1]/\u0026quot;. IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.(CVE-2025-47912)\n\nSSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.(CVE-2025-47914)\n\nGit is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a bundle advertised by the remote server, which allows the server-side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles, which allows the remote side to perform protocol injection. This protocol injection can cause the client to write the fetched bundle to a location controlled by the adversary. The fetched content is fully controlled by the server, which can in the worst case lead to arbitrary code execution. The use of bundle URIs is not enabled by default and can be controlled by the bundle.heuristic config option. Some cases of the vulnerability require that the adversary is in control of where a repository will be cloned to. This either requires social engineering or a recursive clone with submodules. These cases can thus be avoided by disabling recursive clones. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.(CVE-2025-48385)\n\nSSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.(CVE-2025-58181)\n\nA vulnerability was found in Google Go up to 1.25.1 (Programming Language Software). It has been rated as problematic.Using CWE to declare the problem leads to CWE-770. The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.Impacted is availability.Upgrading to version 1.25.2 eliminates this vulnerability.(CVE-2025-58183)\n\nParsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.(CVE-2025-58185)\n\nDespite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as \u0026quot;a=;\u0026quot;, an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.(CVE-2025-58186)\n\nDue to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.(CVE-2025-58187)\n\nWhen Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.(CVE-2025-58189)\n\nThe processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.(CVE-2025-61723)\n\nThe Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.(CVE-2025-61724)\n\nThe net/url package in the Go standard library does not impose a limit on the number of query parameters in a query string. While the overall size of query parameters in URLs is generally constrained by the maximum request header size, the net/http.Request.ParseForm method is capable of parsing large URL-encoded forms. An attacker can exploit this by submitting a form containing an excessive number of unique query parameters, leading to disproportionate memory consumption and potentially causing a Denial of Service (DoS) condition in the affected application.(CVE-2025-61726)\n\nAn excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.(CVE-2025-61727)\n\nWithin HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.(CVE-2025-61729)\n\nDuring session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.(CVE-2025-68121)\n\n[\u0026apos;announces:\u0026apos;, \u0026quot;We have just released Go versions 1.26.1 and 1.25.8, minor point releases.\\n\\nThese releases include 5 security fixes following the security policy:\\n\\n  * crypto/x509: incorrect enforcement of email constraints\\n\\n    When verifying a certificate chain which contains a certificate containing\\n    multiple email address constraints (composed of the full email address)\\n    which share common local portions (the portion of the address before the \u0026apos;@\u0026apos;\\n    character) but different domain portions (the portion of the address after\\n    the \u0026apos;@\u0026apos; character), these constraints will not be properly applied, and only\\n    the last constraint will be considered.\\n\\n    This can allow certificates in the chain containing email addresses which\\n    are either not permitted or excluded by the relevant constraints to be\\n    returned by calls to Certificate.Verify. Since the name constraint checks\\n    happen after chain building is complete, this only applies to certificate\\n    chains which chain to trusted roots (root certificates either in\\n    VerifyOptions.Roots or in the system root certificate pool), requiring a\\n    trusted CA to issue certificates containing either not permitted or\\n    excluded email addresses.\\n\\n    This issue only affects Go 1.26.\\n\\n    Thanks to Jakub Ciolek for reporting this issue.\\n\\n    This is CVE-2026-27137 and Go issue\u0026quot;, \u0026apos;.\\n\\n  * crypto/x509: panic in name constraint checking for malformed certificates\\n\\n    Certificate verification can panic when a certificate in the chain has an\\n    empty DNS name and another certificate in the chain has excluded name\\n    constraints. This can crash programs that are either directly verifying\\n    X.509 certificate chains, or those that use TLS.\\n\\n    Since the name constraint checks happen after chain building is complete,\\n    this only applies to certificate chains which chain to trusted roots (root\\n    certificates either in VerifyOptions.Roots or in the system root certificate\\n    pool), requiring a trusted CA to issue certificates containing malformed DNS\\n    names.\\n\\n    This issue only affects Go 1.26.\\n\\n    Thanks to Jakub Ciolek for reporting this issue.\\n\\n    This is CVE-2026-27138 and Go issue\u0026apos;, \u0026apos;.\\n\\n  * html/template: URLs in meta content attribute actions are not escaped\\n\\n    Actions which insert URLs into the content attribute of HTML meta tags are\\n    not escaped. This can allow XSS if the meta tag also has an http-equiv\\n    attribute with the value \u0026quot;refresh\u0026quot;.\\n\\n    A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be\\n    used to disable escaping URLs in actions in the meta content attribute which\\n    follow \u0026quot;url=\u0026quot; by setting htmlmetacontenturlescape=0.\\n\\n    This is CVE-2026-27142 and Go issue\u0026apos;, \u0026apos;.\\n\\n  * net/url: reject IPv6 literal not at start of host\\n\\n    The Go standard library function net/url.Parse insufficiently\\n    validated the host/authority component and accepted some invalid URLs\\n    by effectively treating garbage before an IP-literal as ignorable.\\n    The function should have rejected this as invalid.\\n\\n    To prevent this behavior, net/url.Parse now rejects IPv6 literals\\n    that do not appear at the start of the host subcomponent of a URL.\\n\\n    Thanks to Masaki Hara (\u0026apos;, \u0026apos;) of Wantedly.\\n\\n    This is CVE-2026-25679 and Go issue\u0026apos;, \u0026apos;.\\n\\n  * os: FileInfo can escape from a Root\\n\\n    On Unix platforms, when listing the contents of a directory using\\n    File.ReadDir or File.Readdir the returned FileInfo could reference\\n    a file outside of the Root in which the File was opened.\\n\\n    The contents of the FileInfo were populated using the lstat system\\n    call, which takes the path to the file as a parameter. If a component\\n    of the full path of the file described by the FileInfo is replaced with\\n    a symbolic link, the target of the lstat can be directed to another\\n    location on the filesystem.\\n\\n    The impact of this escape is limited to reading metadata provided by\\n    lstat from arbitrary locations on the filesystem. This could be used\\n    to p(CVE-2026-25679)\n\nWhen verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.(CVE-2026-27137)\n\nDue to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic(CVE-2026-27141)\n\nDuring chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.(CVE-2026-32280)\n\nValidating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.(CVE-2026-32281)\n\nOn Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.(CVE-2026-32282)\n\nWhen verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.(CVE-2026-33810)\n\nWhen using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.(CVE-2026-33811)\n\nA vulnerability was found in the encoding/asn1 package in Go. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.(CVE-2026-33818)\n\nWhen returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.(CVE-2026-42507)\n\nParsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.(CVE-2026-46600)\n\nWhen a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.(CVE-2026-56853)\n\nA flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, causing the depth counter to reset and never fire, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.(CVE-2026-56859)\n\nHandshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.(CVE-2026-56862)","status":"published","published":"2026-09-20T13:22:51Z","modified":"2026-09-20T13:30:21.787721587Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3880","title":"git-lfs security update","description":"Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.\r\n\r\nSecurity Fix(es):\n\nThe filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.(CVE-2024-8244)\n\nGitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk\u0026apos;s Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.(CVE-2025-27613)\n\nProxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.(CVE-2025-4673)\n\nIf the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath (\u0026quot;\u0026quot;, \u0026quot;.\u0026quot;, and \u0026quot;..\u0026quot;), can result in the binaries listed in the PATH being unexpectedly returned.(CVE-2025-47906)\n\nWhen using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.(CVE-2025-47910)\n\nThe Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: \u0026quot;http://[::1]/\u0026quot;. IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.(CVE-2025-47912)\n\nSSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.(CVE-2025-47914)\n\nGit is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a bundle advertised by the remote server, which allows the server-side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles, which allows the remote side to perform protocol injection. This protocol injection can cause the client to write the fetched bundle to a location controlled by the adversary. The fetched content is fully controlled by the server, which can in the worst case lead to arbitrary code execution. The use of bundle URIs is not enabled by default and can be controlled by the bundle.heuristic config option. Some cases of the vulnerability require that the adversary is in control of where a repository will be cloned to. This either requires social engineering or a recursive clone with submodules. These cases can thus be avoided by disabling recursive clones. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.(CVE-2025-48385)\n\nSSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.(CVE-2025-58181)\n\nA vulnerability was found in Google Go up to 1.25.1 (Programming Language Software). It has been rated as problematic.Using CWE to declare the problem leads to CWE-770. The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.Impacted is availability.Upgrading to version 1.25.2 eliminates this vulnerability.(CVE-2025-58183)\n\nParsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.(CVE-2025-58185)\n\nDespite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as \u0026quot;a=;\u0026quot;, an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.(CVE-2025-58186)\n\nDue to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.(CVE-2025-58187)\n\nWhen Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.(CVE-2025-58189)\n\nThe processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.(CVE-2025-61723)\n\nThe Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.(CVE-2025-61724)\n\nThe net/url package in the Go standard library does not impose a limit on the number of query parameters in a query string. While the overall size of query parameters in URLs is generally constrained by the maximum request header size, the net/http.Request.ParseForm method is capable of parsing large URL-encoded forms. An attacker can exploit this by submitting a form containing an excessive number of unique query parameters, leading to disproportionate memory consumption and potentially causing a Denial of Service (DoS) condition in the affected application.(CVE-2025-61726)\n\nAn excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.(CVE-2025-61727)\n\nWithin HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.(CVE-2025-61729)\n\nDuring session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.(CVE-2025-68121)\n\n[\u0026apos;announces:\u0026apos;, \u0026quot;We have just released Go versions 1.26.1 and 1.25.8, minor point releases.\\n\\nThese releases include 5 security fixes following the security policy:\\n\\n  * crypto/x509: incorrect enforcement of email constraints\\n\\n    When verifying a certificate chain which contains a certificate containing\\n    multiple email address constraints (composed of the full email address)\\n    which share common local portions (the portion of the address before the \u0026apos;@\u0026apos;\\n    character) but different domain portions (the portion of the address after\\n    the \u0026apos;@\u0026apos; character), these constraints will not be properly applied, and only\\n    the last constraint will be considered.\\n\\n    This can allow certificates in the chain containing email addresses which\\n    are either not permitted or excluded by the relevant constraints to be\\n    returned by calls to Certificate.Verify. Since the name constraint checks\\n    happen after chain building is complete, this only applies to certificate\\n    chains which chain to trusted roots (root certificates either in\\n    VerifyOptions.Roots or in the system root certificate pool), requiring a\\n    trusted CA to issue certificates containing either not permitted or\\n    excluded email addresses.\\n\\n    This issue only affects Go 1.26.\\n\\n    Thanks to Jakub Ciolek for reporting this issue.\\n\\n    This is CVE-2026-27137 and Go issue\u0026quot;, \u0026apos;.\\n\\n  * crypto/x509: panic in name constraint checking for malformed certificates\\n\\n    Certificate verification can panic when a certificate in the chain has an\\n    empty DNS name and another certificate in the chain has excluded name\\n    constraints. This can crash programs that are either directly verifying\\n    X.509 certificate chains, or those that use TLS.\\n\\n    Since the name constraint checks happen after chain building is complete,\\n    this only applies to certificate chains which chain to trusted roots (root\\n    certificates either in VerifyOptions.Roots or in the system root certificate\\n    pool), requiring a trusted CA to issue certificates containing malformed DNS\\n    names.\\n\\n    This issue only affects Go 1.26.\\n\\n    Thanks to Jakub Ciolek for reporting this issue.\\n\\n    This is CVE-2026-27138 and Go issue\u0026apos;, \u0026apos;.\\n\\n  * html/template: URLs in meta content attribute actions are not escaped\\n\\n    Actions which insert URLs into the content attribute of HTML meta tags are\\n    not escaped. This can allow XSS if the meta tag also has an http-equiv\\n    attribute with the value \u0026quot;refresh\u0026quot;.\\n\\n    A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be\\n    used to disable escaping URLs in actions in the meta content attribute which\\n    follow \u0026quot;url=\u0026quot; by setting htmlmetacontenturlescape=0.\\n\\n    This is CVE-2026-27142 and Go issue\u0026apos;, \u0026apos;.\\n\\n  * net/url: reject IPv6 literal not at start of host\\n\\n    The Go standard library function net/url.Parse insufficiently\\n    validated the host/authority component and accepted some invalid URLs\\n    by effectively treating garbage before an IP-literal as ignorable.\\n    The function should have rejected this as invalid.\\n\\n    To prevent this behavior, net/url.Parse now rejects IPv6 literals\\n    that do not appear at the start of the host subcomponent of a URL.\\n\\n    Thanks to Masaki Hara (\u0026apos;, \u0026apos;) of Wantedly.\\n\\n    This is CVE-2026-25679 and Go issue\u0026apos;, \u0026apos;.\\n\\n  * os: FileInfo can escape from a Root\\n\\n    On Unix platforms, when listing the contents of a directory using\\n    File.ReadDir or File.Readdir the returned FileInfo could reference\\n    a file outside of the Root in which the File was opened.\\n\\n    The contents of the FileInfo were populated using the lstat system\\n    call, which takes the path to the file as a parameter. If a component\\n    of the full path of the file described by the FileInfo is replaced with\\n    a symbolic link, the target of the lstat can be directed to another\\n    location on the filesystem.\\n\\n    The impact of this escape is limited to reading metadata provided by\\n    lstat from arbitrary locations on the filesystem. This could be used\\n    to p(CVE-2026-25679)\n\nWhen verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.(CVE-2026-27137)\n\nDue to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic(CVE-2026-27141)\n\nDuring chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.(CVE-2026-32280)\n\nValidating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.(CVE-2026-32281)\n\nOn Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.(CVE-2026-32282)\n\nWhen verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.(CVE-2026-33810)\n\nWhen using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.(CVE-2026-33811)\n\nA vulnerability was found in the encoding/asn1 package in Go. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.(CVE-2026-33818)\n\nWhen returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.(CVE-2026-42507)\n\nParsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.(CVE-2026-46600)\n\nWhen a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.(CVE-2026-56853)\n\nA flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, causing the depth counter to reset and never fire, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.(CVE-2026-56859)\n\nHandshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.(CVE-2026-56862)","status":"published","published":"2026-09-20T13:22:51Z","modified":"2026-09-20T13:30:21.883092864Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4068","title":"git-lfs security update","description":"Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.\r\n\r\nSecurity Fix(es):\n\nProcessing an incomplete post-handshake message for a QUIC connection can cause a panic.(CVE-2023-39321)\n\nQUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size.(CVE-2023-39322)\n\nThe filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.(CVE-2024-8244)\n\nCalling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.(CVE-2025-22874)\n\nGit LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository\u0026apos;s working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links exist which collide with the paths of files tracked by Git LFS. The git lfs checkout and git lfs pull commands do not check for symbolic links before writing to files in the working tree, allowing an attacker to craft a repository containing symbolic or hard links that cause Git LFS to write to arbitrary file system locations accessible to the user running these commands. As well, when the git lfs checkout and git lfs pull commands are run in a bare repository, they could write to files visible outside the repository. The vulnerability is fixed in version 3.7.1. As a workaround, support for symlinks in Git may be disabled by setting the core.symlinks configuration option to false, after which further clones and fetches will not create symbolic links. However, any symbolic or hard links in existing repositories will still provide the opportunity for Git LFS to write to their targets.(CVE-2025-26625)\n\nGitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk\u0026apos;s Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.(CVE-2025-27613)\n\nGitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script (e.g., Bourne shell, Perl, Python, ...) supplied by the attacker by invoking gitk filename, where filename has a particular structure. The script is run with the privileges of the user. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.(CVE-2025-27614)\n\nProxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.(CVE-2025-4673)\n\nThe go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS (e.g. Git), but contains metadata for another VCS (e.g. Mercurial). Modules which are retrieved using the go command line, i.e. via \u0026quot;go get\u0026quot;, are not affected.(CVE-2025-4674)\n\nGit GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.(CVE-2025-46835)\n\nIf the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath (\u0026quot;\u0026quot;, \u0026quot;.\u0026quot;, and \u0026quot;..\u0026quot;), can result in the binaries listed in the PATH being unexpectedly returned.(CVE-2025-47906)\n\nCancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.(CVE-2025-47907)\n\nWhen using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.(CVE-2025-47910)\n\nThe Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: \u0026quot;http://[::1]/\u0026quot;. IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.(CVE-2025-47912)\n\nSSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.(CVE-2025-47914)\n\nGit is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.(CVE-2025-48384)\n\nGit is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a bundle advertised by the remote server, which allows the server-side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles, which allows the remote side to perform protocol injection. This protocol injection can cause the client to write the fetched bundle to a location controlled by the adversary. The fetched content is fully controlled by the server, which can in the worst case lead to arbitrary code execution. The use of bundle URIs is not enabled by default and can be controlled by the bundle.heuristic config option. Some cases of the vulnerability require that the adversary is in control of where a repository will be cloned to. This either requires social engineering or a recursive clone with submodules. These cases can thus be avoided by disabling recursive clones. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.(CVE-2025-48385)\n\nSSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.(CVE-2025-58181)\n\nA vulnerability was found in Google Go up to 1.25.1 (Programming Language Software). It has been rated as problematic.Using CWE to declare the problem leads to CWE-770. The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.Impacted is availability.Upgrading to version 1.25.2 eliminates this vulnerability.(CVE-2025-58183)\n\nParsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.(CVE-2025-58185)\n\nDespite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as \u0026quot;a=;\u0026quot;, an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.(CVE-2025-58186)\n\nDue to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.(CVE-2025-58187)\n\nValidating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.(CVE-2025-58188)\n\nWhen Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.(CVE-2025-58189)\n\nThe processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.(CVE-2025-61723)\n\nThe Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.(CVE-2025-61724)\n\nThe ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.(CVE-2025-61725)\n\nThe net/url package in the Go standard library does not impose a limit on the number of query parameters in a query string. While the overall size of query parameters in URLs is generally constrained by the maximum request header size, the net/http.Request.ParseForm method is capable of parsing large URL-encoded forms. An attacker can exploit this by submitting a form containing an excessive number of unique query parameters, leading to disproportionate memory consumption and potentially causing a Denial of Service (DoS) condition in the affected application.(CVE-2025-61726)\n\nAn excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.(CVE-2025-61727)\n\nWithin HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.(CVE-2025-61729)\n\nDuring session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.(CVE-2025-68121)\n\n[\u0026apos;announces:\u0026apos;, \u0026quot;We have just released Go versions 1.26.1 and 1.25.8, minor point releases.\\n\\nThese releases include 5 security fixes following the security policy:\\n\\n  * crypto/x509: incorrect enforcement of email constraints\\n\\n    When verifying a certificate chain which contains a certificate containing\\n    multiple email address constraints (composed of the full email address)\\n    which share common local portions (the portion of the address before the \u0026apos;@\u0026apos;\\n    character) but different domain portions (the portion of the address after\\n    the \u0026apos;@\u0026apos; character), these constraints will not be properly applied, and only\\n    the last constraint will be considered.\\n\\n    This can allow certificates in the chain containing email addresses which\\n    are either not permitted or excluded by the relevant constraints to be\\n    returned by calls to Certificate.Verify. Since the name constraint checks\\n    happen after chain building is complete, this only applies to certificate\\n    chains which chain to trusted roots (root certificates either in\\n    VerifyOptions.Roots or in the system root certificate pool), requiring a\\n    trusted CA to issue certificates containing either not permitted or\\n    excluded email addresses.\\n\\n    This issue only affects Go 1.26.\\n\\n    Thanks to Jakub Ciolek for reporting this issue.\\n\\n    This is CVE-2026-27137 and Go issue\u0026quot;, \u0026apos;.\\n\\n  * crypto/x509: panic in name constraint checking for malformed certificates\\n\\n    Certificate verification can panic when a certificate in the chain has an\\n    empty DNS name and another certificate in the chain has excluded name\\n    constraints. This can crash programs that are either directly verifying\\n    X.509 certificate chains, or those that use TLS.\\n\\n    Since the name constraint checks happen after chain building is complete,\\n    this only applies to certificate chains which chain to trusted roots (root\\n    certificates either in VerifyOptions.Roots or in the system root certificate\\n    pool), requiring a trusted CA to issue certificates containing malformed DNS\\n    names.\\n\\n    This issue only affects Go 1.26.\\n\\n    Thanks to Jakub Ciolek for reporting this issue.\\n\\n    This is CVE-2026-27138 and Go issue\u0026apos;, \u0026apos;.\\n\\n  * html/template: URLs in meta content attribute actions are not escaped\\n\\n    Actions which insert URLs into the content attribute of HTML meta tags are\\n    not escaped. This can allow XSS if the meta tag also has an http-equiv\\n    attribute with the value \u0026quot;refresh\u0026quot;.\\n\\n    A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be\\n    used to disable escaping URLs in actions in the meta content attribute which\\n    follow \u0026quot;url=\u0026quot; by setting htmlmetacontenturlescape=0.\\n\\n    This is CVE-2026-27142 and Go issue\u0026apos;, \u0026apos;.\\n\\n  * net/url: reject IPv6 literal not at start of host\\n\\n    The Go standard library function net/url.Parse insufficiently\\n    validated the host/authority component and accepted some invalid URLs\\n    by effectively treating garbage before an IP-literal as ignorable.\\n    The function should have rejected this as invalid.\\n\\n    To prevent this behavior, net/url.Parse now rejects IPv6 literals\\n    that do not appear at the start of the host subcomponent of a URL.\\n\\n    Thanks to Masaki Hara (\u0026apos;, \u0026apos;) of Wantedly.\\n\\n    This is CVE-2026-25679 and Go issue\u0026apos;, \u0026apos;.\\n\\n  * os: FileInfo can escape from a Root\\n\\n    On Unix platforms, when listing the contents of a directory using\\n    File.ReadDir or File.Readdir the returned FileInfo could reference\\n    a file outside of the Root in which the File was opened.\\n\\n    The contents of the FileInfo were populated using the lstat system\\n    call, which takes the path to the file as a parameter. If a component\\n    of the full path of the file described by the FileInfo is replaced with\\n    a symbolic link, the target of the lstat can be directed to another\\n    location on the filesystem.\\n\\n    The impact of this escape is limited to reading metadata provided by\\n    lstat from arbitrary locations on the filesystem. This could be used\\n    to p(CVE-2026-25679)\n\nWhen verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.(CVE-2026-27137)\n\nDue to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic(CVE-2026-27141)\n\nDuring chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.(CVE-2026-32280)\n\nValidating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.(CVE-2026-32281)\n\nOn Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.(CVE-2026-32282)\n\nWhen verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.(CVE-2026-33810)\n\nWhen using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.(CVE-2026-33811)\n\nA vulnerability was found in the encoding/asn1 package in Go. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.(CVE-2026-33818)\n\nWhen returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.(CVE-2026-42507)\n\nParsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.(CVE-2026-46600)\n\nWhen a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.(CVE-2026-56853)\n\nA flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, causing the depth counter to reset and never fire, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.(CVE-2026-56859)\n\nHandshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.(CVE-2026-56862)","status":"published","published":"2026-09-25T01:28:01Z","modified":"2026-09-25T01:45:11.310843798Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RHSA-2026:7291","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-14T10:08:50Z","modified":"2026-10-20T10:15:12Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:7385","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-15T10:18:16Z","modified":"2026-10-20T10:15:22Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"ROOT-APP-GOBINARY-CVE-2025-47914","title":"CVE-2025-47914 in golang.org/x/crypto - Patched by Root","description":"Root has patched CVE-2025-47914 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available.","status":"published","published":"2026-10-22T09:47:50Z","modified":"2026-10-22T10:15:03.506898812Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2025-47914","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T21:15:00Z","modified":"2026-11-11T09:39:13.873562341Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-11T10:01:07.920765Z"},{"id":"GO-2025-4135","title":"Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent","description":"SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.","status":"published","published":"2025-11-19T20:11:57Z","modified":"2026-05-15T10:59:23.31466885Z","updated_at":"2026-11-02T15:47:02.011123Z"},{"id":"openSUSE-RU-2026:20010-1","title":"Recommended update for trivy","description":"This update for trivy fixes the following issues:\n\n- Update to version 0.68.2:\n  * release: v0.68.2 [release/v0.68] (#9950)\n  * fix(deps): bump alpine from `3.22.1` to `3.23.0` [backport: release/v0.68] (#9949)\n  * ci: enable `check-latest` for `setup-go` [backport: release/v0.68] (#9946)\n","status":"withdrawn","published":"2026-01-08T14:37:24Z","modified":"2026-06-24T14:04:06.315733329Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2025:15771-1","title":"git-bug-0.10.1-3.1 on GA media","description":"These are all security issues fixed in the git-bug-0.10.1-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-11-26T00:00:00Z","modified":"2026-03-23T04:54:11.144405Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15773-1","title":"cheat-4.4.2-3.1 on GA media","description":"These are all security issues fixed in the cheat-4.4.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-11-27T00:00:00Z","modified":"2026-03-23T04:54:10.965197Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2025:15852-1","title":"trivy-0.68.2-1.1 on GA media","description":"These are all security issues fixed in the trivy-0.68.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-12-29T00:00:00Z","modified":"2026-03-23T04:54:14.930396Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2025:20143-1","title":"Security update for git-bug","description":"This update for git-bug fixes the following issues:\n\nChanges in git-bug:\n\n- Revendor to include fixed version of depending libraries:\n  - GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade\n    golang.org/x/crypto to v0.43.0\n  - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade\n    github.com/go-viper/mapstructure/v2 to v2.4.0\n  - GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous\n  - GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade\n    github.com/cloudflare/circl to v1.6.1\n  - GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade\n    golang.org/x/crypto/ssh to v0.45.0\n  - GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade\n    golang.org/x/crypto/ssh/agent to v0.45.0\n\n- Revendor to include golang.org/x/net/html v 0.45.0 to prevent\n  possible DoS by various algorithms with quadratic complexity\n  when parsing HTML documents (bsc#1251463, CVE-2025-47911 and\n  bsc#1251664, CVE-2025-58190).\n\nUpdate to version 0.10.1:\n\n  - cli: ignore missing sections when removing configuration (ddb22a2f)\n\nUpdate to version 0.10.0:\n\n  - bridge: correct command used to create a new bridge (9942337b)\n  - web: simplify header navigation (7e95b169)\n  - webui: remark upgrade + gfm + syntax highlighting (6ee47b96)\n  - BREAKING CHANGE: dev-infra: remove gokart (89b880bd)\n\nUpdate to version 0.10.0:\n\n  - bridge: correct command used to create a new bridge (9942337b)\n  - web: simplify header navigation (7e95b169)\n  - web: remark upgrade + gfm + syntax highlighting (6ee47b96)\n\nUpdate to version 0.9.0:\n\n  - completion: remove errata from string literal (aa102c91)\n  - tui: improve readability of the help bar (23be684a)\n\nUpdate to version 0.8.1+git.1746484874.96c7a111:\n\n  * docs: update install, contrib, and usage documentation (#1222)\n  * fix: resolve the remote URI using url.*.insteadOf (#1394)\n  * build(deps): bump the go_modules group across 1 directory with 3 updates (#1376)\n  * chore: gofmt simplify gitlab/export_test.go (#1392)\n  * fix: checkout repo before setting up go environment (#1390)\n  * feat: bump to go v1.24.2 (#1389)\n  * chore: update golang.org/x/net (#1379)\n  * fix: use -0700 when formatting time (#1388)\n  * fix: use correct url for gitlab PATs (#1384)\n  * refactor: remove depdendency on pnpm for auto-label action (#1383)\n  * feat: add action: auto-label (#1380)\n  * feat: remove lifecycle/frozen (#1377)\n  * build(deps): bump the npm_and_yarn group across 1 directory with 12 updates (#1378)\n  * feat: support new exclusion label: lifecycle/pinned (#1375)\n  * fix: refactor how gitlab title changes are detected (#1370)\n  * revert: \"Create Dependabot config file\" (#1374)\n  * refactor: rename //:git-bug.go to //:main.go (#1373)\n  * build(deps): bump github.com/vektah/gqlparser/v2 from 2.5.16 to 2.5.25 (#1361)\n  * fix: set GitLastTag to an empty string when git-describe errors (#1355)\n  * chore: update go-git to v5@masterupdate_mods (#1284)\n  * refactor: Directly swap two variables to optimize code (#1272)\n  * Update README.md Matrix link to new room (#1275)\n\n- Update to version 0.8.0+git.1742269202.0ab94c9:\n  * deps(crypto): bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337) (#1312)\n\n- Update golang.org/x/crypto/ssh to v0.35.0 (bsc#1239494,\n  CVE-2025-22869).\n\n- Add missing Requires to completion subpackages.\n\nUpdate to version 0.8.0+git.1733745604.d499b6e:\n\n  * fix typos in docs (#1266)\n  * build(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 (#1289)\n\n- bump golang.org/x/crypto from v0.26.0 to v0.31.0 (fix for CVE-2024-45337, bsc#1234565).\n","status":"published","published":"2025-12-04T13:08:26Z","modified":"2026-03-23T04:54:18.421872Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2025:20177-1","title":"Security update for cheat","description":"This update for cheat fixes the following issues:\n\n- Security:\n  * CVE-2025-47913: Fix client process termination (bsc#1253593)\n  * CVE-2025-58181: Fix potential unbounded memory consumption (bsc#1253922)\n  * CVE-2025-47914: Fix panic due to an out of bounds read (bsc#1254051)\n  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0\n  * Replace golang.org/x/net=golang.org/x/net@v0.47.0\n  * Replace golang.org/x/sys=golang.org/x/sys@v0.38.0\n\n- Packaging improvements:\n  * Drop Requires: golang-packaging. The recommended Go toolchain\n    dependency expression is BuildRequires: golang(API) \u003e= 1.x or\n    optionally the metapackage BuildRequires: go\n  * Use BuildRequires: golang(API) \u003e= 1.19 matching go.mod\n  * Build PIE with pattern that may become recommended procedure:\n    %%ifnarch ppc64 GOFLAGS=\"-buildmode=pie\" %%endif go build\n    A go toolchain buildmode default config would be preferable\n    but none exist at this time.\n  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable\n  * Remove go build -o output binary location and name. Default\n    binary has the same name as package of func main() and is\n    placed in the top level of the build directory.\n  * Add basic %check to execute binary --help\n\n- Packaging improvements:\n  * Service go_modules replace dependencies with CVEs\n  * Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1\n    Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm\n  * Replace golang.org/x/net=golang.org/x/net@v0.36.0\n    Fixes GO-2025-3503 CVE-2025-22870\n  * Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0\n    Fixes GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8\n    Fixes GO-2025-3487 CVE-2025-22869\n  * Replace github.com/go-git/go-git/v5=github.com/go-git/go-git/v5@v5.13.0\n    Fixes GO-2025-3367 CVE-2025-21614 GHSA-r9px-m959-cxf4\n    Fixes GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m\n  * Service tar_scm set mode manual from disabled\n  * Service tar_scm create archive from git so we can exclude\n    vendor directory upstream committed to git. Committed vendor\n    directory contents have build issues even after go mod tidy.\n  * Service tar_scm exclude dir vendor\n  * Service set_version set mode manual from disabled\n  * Service set_version remove param basename not needed\n","status":"published","published":"2025-12-18T00:17:52Z","modified":"2026-03-23T04:54:19.442051Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10013-1","title":"apptainer-1.4.5-1.1 on GA media","description":"These are all security issues fixed in the apptainer-1.4.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-07T00:00:00Z","modified":"2026-03-23T04:54:20.787857Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10042-1","title":"mcphost-0.32.0-1.1 on GA media","description":"These are all security issues fixed in the mcphost-0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-13T00:00:00Z","modified":"2026-03-23T04:54:23.566561Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10302-1","title":"kubeshark-cli-53.1.0-1.1 on GA media","description":"These are all security issues fixed in the kubeshark-cli-53.1.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-07T00:00:00Z","modified":"2026-03-08T15:45:06.578925Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:11781-1","title":"rz-pm-0.3.6-1.1 on GA media","description":"These are all security issues fixed in the rz-pm-0.3.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-14T00:00:00Z","modified":"2026-09-15T10:15:04.994316216Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:12295-1","title":"k3sup-0.13.14-1.1 on GA media","description":"These are all security issues fixed in the k3sup-0.13.14-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-27T00:00:00Z","modified":"2026-10-28T17:23:14.299965913Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:12300-1","title":"kumactl-3.0.0-1.1 on GA media","description":"These are all security issues fixed in the kumactl-3.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-27T00:00:00Z","modified":"2026-10-28T17:23:14.296868365Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:12314-1","title":"amazon-ssm-agent-3.3.5678.0-1.1 on GA media","description":"These are all security issues fixed in the amazon-ssm-agent-3.3.5678.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-28T00:00:00Z","modified":"2026-10-29T12:15:05.399229135Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:20080-1","title":"Security update for buildah","description":"This update for buildah fixes the following issues:\n\n- CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed non validated message size causing a panic due to an out\n  of bounds read (bsc#1254054)\n- CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected\n  message type in response to a key listing or signing request (bsc#1253598)\n- CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc\n  files (bsc#1253096)\n\nOther fixes:\n\n- Updated to version 1.39.5.\n","status":"published","published":"2026-01-22T13:00:13Z","modified":"2026-03-23T04:54:43.247706Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20132-1","title":"Security update for elemental-register, elemental-toolkit","description":"This update for elemental-register, elemental-toolkit fixes the following issues:\n\nelemental-register was updated to 1.8.1:\n\nChanges on top of v1.8.1:\n\n  * Update headers to 2026\n  * Update questions to include SL Micro 6.2\n\nUpdate to v1.8.1:\n\n  * Install yip config files in before-install step\n  * Bump github.com/rancher-sandbox/go-tpm and its dependencies\n    This includes few CVE fixes:\n    * bsc#1241826 (CVE-2025-22872)\n    * bsc#1241857 (CVE-2025-22872)\n    * bsc#1251511 (CVE-2025-47911)\n    * bsc#1251679 (CVE-2025-58190)\n\nelemental-toolkit was updated to v2.3.2:\n\n  * Bump golang.org/x/crypto library\n    This includes few CVE fixes:\n    * bsc#1241826 (CVE-2025-22872)\n    * bsc#1241857 (CVE-2025-22872)\n    * bsc#1251511 (CVE-2025-47911)\n    * bsc#1251679 (CVE-2025-58190)\n    * bsc#1253581 (CVE-2025-47913)\n    * bsc#1253901 (CVE-2025-58181)\n    * bsc#1254079 (CVE-2025-47914)\n","status":"published","published":"2026-01-29T15:32:26Z","modified":"2026-03-23T04:54:45.260085Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20305-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\nChanges in podman:\n\n- Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)\n\n- CVE-2025-47914: Fixed golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read  (bsc#1253993)\n- CVE-2025-47913: Fixed golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542):\n\n- CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: Fixed runc: Container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files  (bsc#1252376):\n- CVE-2025-9566: Fixed that podman kube play command may overwrite host files (bsc#1249154):\n","status":"published","published":"2026-03-03T16:13:34Z","modified":"2026-03-23T04:54:50.491038Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20438-1","title":"Security update for docker-compose","description":"This update for docker-compose fixes the following issues:\n\n- CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in\n  response to a key listing or signing request (bsc#1253584).\n- CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds\n  read (bsc#1254041).\n- CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files\n  (bsc#1252752).\n","status":"published","published":"2026-03-27T10:04:45Z","modified":"2026-04-03T17:25:56.660076Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20730-1","title":"Security update for apptainer","description":"This update for apptainer fixes the following issues:\n\nChanges in apptainer:\n\n- Fix CVE-2026-34986 (bsc#1262956)\n      * github.com/go-jose/go-jose/v4@v4.1.4\n      CVE-2026-33186 GO-2026-4762 (bsc#1260311)\n      * google.golang.org/grpc@v1.79.3\n      CVE-2026-24137 GO-2026-4358 (bsc#1264177)\n      * github.com/sigstore/sigstore@v1.10.4\n        Fix fallout:\n\tgithub.com/moby/go-archive@v0.1.0\n\tgithub.com/containers/image/v5=github.com/containers/image/v5@v5.36.0\n\n- Fix HTML parser misimplementation of a part of the HTML\n  specification for table related tags (CVE-2025-58190,\n  GO-2026-4441, bsc#1258048).\n- Fix issue where the HTML parser takes a very long time or\n  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).\n\n- Update ot 1.4.5\n  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /\n    GHSA-j3rw-fx6g-q46j (bsc#1255462):\n    Ineffective application of selinux / apparmor --security option.\n    Updates of a few dependent go libraries for related security fixes.\n  * Other fix\n    Run FUSE processes in a separate process group. This detaches them\n    from the main process so they don't receive signals such as interrupts\n    sent to a terminal there. This was not a problem with interactive\n    shells because they start their own group, but was a problem with\n    some programs with interactive Read/Eval/Print/Loops such as python.\n    An interrupt there would kill the FUSE processes.\n- From 1.4.4\n  * By applying patches to the bundled fuse2fs, allow again the possibility\n    of using a non-writable ext3 image file as an overlay. Fixes regression\n    introduced in 1.4.3.\n  * If an overlay or bound data image is asked to be mounted writable but\n    the user has no write access to the image, show a warning message\n    instead of silently switching to readonly.\n  * Avoid a fatal error when starting fakeroot from suid mode while\n    in an NFS directory.\n  * Fix 32-bit builds which were accidentally broken by a library\n    upgrade that was done for a minor security issue.\n- Fix CVEs:\n  * GO-2025-4135 - CVE-2025-47914\n    Malformed constraint may cause denial of service in\n    golang.org/x/crypto/ssh/agent.\n  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924\n    Unbounded memory consumption in golang.org/x/crypto/ssh.\n  * GO-2025-4116 - CVE-2025-47913\n    Potential denial of service in golang.org/x/crypto/ssh/agent.\n  * GO-2025-3595 - CVE-2025-22872\n   Incorrect Neutralization of Input During Web Page Generation\n   in x/net.\n  * GO-2025-3503 - CVE-2025-22870\n    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.\n  * GO-2025-3487 - CVE-2025-22869\n    Potential denial of service in golang.org/x/crypto.\n  * GO-2025-3485 - CVE-2025-27144\n    DoS in go-jose Parsing in github.com/go-jose/go-jose.\n  * GO-2025-3754 - CVE-2025-8556\n    CIRCL-Fourq: Missing and wrong validation can lead to\n    incorrect results in github.com/cloudflare/circl.\n\n- No need for binutils-gold for aarch64\n\n- Update to 1.4.3\n  * Corrected the mconfig -s option for statically building apptainer\n    and starter binaries.\n  * Resolved an issue where the Makefile generated by mconfig -b\n    failed when the build directory was not a subdirectory of the\n    Apptainer source code.\n  * Fixed %files in definition files to correctly copy symlinks\n    pointing above the destination directory but within the\n    destination stage root filesystem.\n  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was\n    corrected to libnvoptix.so).\n  * Prevented timeouts during cleanup after building\n    gocryptfs-encrypted SIF files.\n  * Fixed a bug that prevented build with --passphrase or --pem-path\n    (without --encrypt) from implying fakeroot.\n  * Resolved a hang when copying files between build stages while\n    using suid mode without user namespaces.\n  * Fixed issues with running and building containers of different\n    architectures than the host via binfmt_misc when using rootless\n    fakeroot.\n  * Corrected \"target: no such file or directory\" errors when\n    extracting layers from certain OCI images that manipulate hard\n    links across layers.\n  * Fixed a crash when executing a privilege-encrypted container as\n    root.\n  * Improved documentation for the remote list command.\n  * Removed the fakerootcallback functionality.\n  * Updated the default pacman confURL for Bootstrap: arch container\n    builds.\n  * Updated bundled fuse programs to their latest releases.\n  * Changed the default message level from silent to normal in\n    nested apptainer executions of a build's %post section, and\n    suppressed an unnecessary warning.\n  * Invalid environment variables are now ignored when pulling\n    oci/docker containers.\n- Add definition file for SLE 16 (SLE-16.def).\n- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and\n  SP6 (SLE-15SP6.def).\n\n- Update to 1.4.2\n  * Restore looking for registry mirrors in /etc/containers/registry.conf\n    and related files. This had been inadvertently dropped beginning in 1.4.0.\n  * Fix use of the image cache when the home directory contains @ characters.\n    Previously it would assume that it was the start of a digest in the oci-dir.\n  * Fix signature verification failures on unsigned images.\n  * Add additional .deb packages to the release assets that include the label\n    trixie+ to indicate that they are for installing on Debian 13 or later.\n    Those packages are necessary to work with the new libfuse3 library in\n    Debian13. They also support libsubid, unlike the default packages because\n    they are built on Debian 11 which doesn't have that library.\n  * Add automatic triggering of Ubuntu PPA builds whenever there's a new\n    apptainer release.\n\n- Update to 1.4.1\n  * Fix the use of libsubid which had been broken by the revision\n    applied in 1.4.0-rc.2.\n  * Fix a bug introduced in 1.4.0 that caused arm64 to be\n    mis-converted to arm64v8 and resulted in a failure when pulling\n    OCI containers.\n  * Fix user database lookup in master process preventing instance\n    from starting correctly on systems using winbind.\n  * Check for existence of `/run/systemd/system` when verifying\n    cgroups can be used via systemd manager.\n  * Add a clear error message if someone tries to use privileged\n    network options while not using setuid mode.\n  * Allow multi-arch oci-archive files that have a nested index\n    with the manifest. This is the default format (both for Docker\n    and OCI) when using `nerdctl save`.\n  * Test if docker-archive is actually an oci-archive (since Docker\n    version 25), and if it is oci then use the OCI parser to avoid\n    bugs in the Docker parser. Save the daemon-daemon references\n    to a temporary docker-archive, to benefit from the same\n    improvements also for those references. Parse as oci-archive.\n\n- New Features \u0026 Functionality in from ineherited 1.4.0\n  * Add new build option `--mksquashfs-args` to pass additional\n    arguments to the `mksquashfs` command when building SIF files.\n    If a compression method other than gzip is selected, the SIF\n    file might not work with older installations of Apptainer\n    or Singularity, so an INFO message about that is printed. On\n    the other hand, an INFO message that was printed (twice) when\n    running an image with non-gzip compression has been removed.\n  * If the `mksquashfs` version is new enough (version 4.6 in\n    Leaep 16.0), then show a percentage progress bar (with ETA)\n    during SIF creation in the default log level. If the `mksquashfs`\n    version is older, then in verbose or debug log level show the\n    output of mksquashfs with its own progress bar.\n  * Statistics are now normally available for instances that are\n    started by non-root users on cgroups v2 systems. The instance\n    will be started in the current cgroup. Information about\n    configuration issues that prevent collection of statistics are\n    displayed as INFO messages by default.\n  * Add a `--sandbox` option to `apptainer pull`.\n  * Add configuration file binding to the `--nv` option. Files\n    that are recognized in the NVIDIA Container Toolkit, including\n    files for EGL ICD, were added to the default `nvliblist.conf`.\n  * It is now possible to use multiple environment variable files\n    using the `--env-file` flag. Files can be specified as a\n    comma-separated list or by using the flag multiple times.\n    Variables defined in later files take precedence over earlier\n    files.\n  * The registry login and registry logout commands now support a\n    `--authfile \u003cpath\u003e` option, which causes OCI credentials to be\n    written to / removed from a custom file located at `\u003cpath\u003e`\n    instead of the default location (`$HOME/.apptainer/docker-config.json`).\n    The commands `pull`, `push`, `run`, `exec`, `shell` and\n    instance start can now also be passed a `--authfile \u003cpath\u003e`\n    option, to read OCI registry credentials from this custom file.\n  * A new `--netns-path` option takes a path to a network\n    namespace to join when starting a container. The root user\n    may join any network namespace. An unprivileged user can only\n    join a network namespace specified in the new `allow netns\n    paths` directive in `apptainer.conf`, if they are also listed\n    in `allow net users` / `allow net groups` and apptainer is\n    installed with setuid privileges. Not supported with\n    `--fakeroot`.\n  * `apptainer.conf` now accepts setting the following options:\n        `allow ipc ns` -- Default value is `yes`; when set to `no`,\n\tit will disable the use of the `--ipc` flag.\n        `allow uts ns` -- Default value is `yes`; when set to `no`,\n\tit will invalidate the use of the `--uts` and `--hostname`\n\tflags.\n        `allow user ns` -- Default value is `yes`; when set to\n\t`no`, it will disable creation of user namespaces. Note\n\tthat this will prevent execution of containers with the\n\t`--userns` or `--fakeroot` flags and with unprivileged\n\tinstallations of Apptainer.\n- Changed defaults / behaviours\n  * Label the starter process seen in `ps` with the image filename,\n    for example: Apptainer runtime parent: `example.sif`.\n  * Remove runtime and compute libraries from `rocmliblist.conf`.\n    They should instead be provided by the container image.\n  * Allow overriding the build architecture with `--arch` and\n    `--arch-variant`, to build images for another architecture\n    than the current host arch. This requires that the host has\n    been set up to support multiple architectures (`binfmt_misc`).\n  * Complete the previously partial support for the riscv64\n    architecture.\n  * Show a warning message if changing directory to the cwd\n    fails, instead of silently switching to the home directory\n    or `/`.\n  * Write starter messages to stderr when an instance fails to\n    start. Previously they were incorrectly written to stdout.\n  * Skip attempting to bind inaccessible mount points when\n    handling the `mount hostfs = yes` configuration option.\n  * Fix storage of credentials for `docker.io` to behave the same\n    as for `index.docker.io`.\n  * Change message log level from warning to debug when environment\n    variables set inside a container or by `APPTAINERENV` have a\n    different value than the environment variable on the host.\n  * Change the default message level from silent to the normal\n    level in the nested apptainer that executes a build's `%post`\n    section, and suppress an unnecessary warning message.\n  * Ignore invalid environment variables when pulling oci/docker\n    containers.\n  * Remove the little-known `fakerootcallback` functionality.\n  * Update the default pacman confURL for `Bootstrap: arch`\n    container builds.\n  * Update the bundled fuse programs to their latest releases.\n- Bug fixes\n  * Fix the `mconfig -s` option to build the apptainer and starter\n    binaries statically as documented.\n  * `%files from` in a definition file will now correctly copy\n    symlinks that `%point` to a target above the destination\n    directory but inside the `%destination` stage root filesystem.\n  * Fixed typo in `nvliblist.conf` (`libnvoptix.so.1` -\u003e `libnvoptix.so`).\n  * Avoid timeouts when cleaning up from building gocryptfs-encrypted\n    SIF files.\n  * Fix bug that prevented build with `--passphrase` or\n    `--pem-path` but without `--encrypt` from implying fakeroot.\n  * Fix hang when copying files between build stages while using\n    suid mode without user namespaces.\n  * Fix running and building containers of different architectures\n    than the host via binfmt_misc when using rootless fakeroot.\n  * Fix `target: no such file or directory` error when extracting\n    layers from certain OCI images that manipulate hard links\n    across layers.\n  * Fix the crash that happened when executing a privilege-encrypted\n    container as root.\n\n- Fix CVE-2024-45338, CVE-2025-22870, CVE-2024-45337, CVE-2025-22869, CVE-2025-27144 CVE-2024-41110\n  * GO-2024-3333 CVE-2024-45338 (bsc#1234794)\n    GO-2025-3503 CVE-2025-22870 (bsc#1238611):\n    Update to: golang.org/x/net@v0.36.0\n  * GO-2024-3321 CVE-2024-45337 (bsc#1234595)\n    GO-2025-3487 CVE-2025-22869 (bsc#1239341):\n    Update to: golang.org/x/crypto@v0.35.0\n  * GO-2025-3485 CVE-2025-27144 (bsc#1237679):\n    Update to: github.com/go-jose/go-jose/v3@v3.0.4\n  * GO-2024-3005 CVE-2024-41110 (bsc#1228324):\n    Update to: github.com/docker/docker@v25.0.6+incompatible\n\n- Update golang.org/x/net to v0.23 to fix CVE-2023-45288 (bnc#1236528).\n\n- Update to version 1.3.6\n  * Avoid using kernel overlayfs when the lower layer is a sandbox\n    on an incompatible filesystem type such as GPFS or Lustre.\n    For those cases use fuse-overlayfs instead. This fixes a\n    regression introduced in 1.3.0. The regression didn't much\n    impact Lustre because kernel overlayfs refused to try to use\n    it and Apptainer proceeded to use fuse-overlayfs anyway, but\n    with GPFS the kernel overlayfs allowed mounting but returned\n    stale file handle errors.\n\n- Version 1.3.5\n  * Fix a regression introduced in 1.3.4 that overwrote existing\n    standard `/.singularity.d` files such as `runscript` in\n    container images even if they had been modified.\n  * Skip attempting to bind inaccessible mount points when\n    handling the `mount hostfs = yes` configuration option.\n  * Support parsing nested variables defined inside `%arguments`\n    section of definition files.\n  * Ignore invalid environment variables when pulling oci/docker\n    containers.\n\n- Version 1.3.4\n  * Fixed sif-embedded overlay partitions for containers that are\n    larger than 2 gigabytes.\n  * Fixed the failure when starting apptainer with\n    `instance --fakeroot`.\n  * `apptainer build -B ...` can now be used to mount custom\n    resolv.conf and hosts files from non-standard outside locations.\n    This can be used to run `apptainer build` in a nix-build sandbox\n    that has no `/etc/resolv.conf`.\n  * Fixed failing builds from local images that have symbolic links\n    for paths that are part of the base container environment (e.g.\n    /var/tmp -\u003e /tmp).\n  * Show info messages suggesting to use\n    `enable underlay = preferred` or the `--underlay` flag when\n    overlay is implied for bind mounts but the kernel is too old\n    to support fuse mounts in user namespaces and so tries to use\n    fusermount.\n  * When someone uses a `yum` bootstrap to build a container\n    without using subuid-based fakeroot or root, warn that it is\n    unlikely to work.\n  * Allow a writable `--overlay` to be used with `--nvccli` instead\n    of `--writable-tmpfs`.\n  * If an error \"no descriptor found for reference\" is seen while\n    getting an oci container, retry the operation up to five times.\n  * Make fakeroot Recommended for SUSE rpms instead of Required.\n  * Allow bind mounts onto existing files on r/o NFS filesystems.\n  * If an error is seen in the %post section when building a\n    container using fakeroot mode 3 (with the fakeroot command)\n    then show a message suggesting using `--ignore-fakeroot-command`\n    and referring to the documentation about how to install and use\n    it inside the container definition file.\n  * Show a more helpful error message when using fakeroot in suid\n    mode and there's an `/etc/subuid` mapping even though user\n    namespaces are not available (user namespaces are required for\n    `/etc/subuid` mapping).\n\n- Version 1.3.3\n  * Added libcudadebugger.so to nvliblist.conf to support cuda-gdb\n    in CUDA 12+.\n  * Ensure opened/kept file descriptors in stage 1 are not closed\n    during the Go garbage collection to avoid \"bad file descriptor\"\n    errors at startup.\n  * Fixed a segmentation violation issue when running Apptainer\n    checkpoint.\n  * Fixed an issue that Apptainer won't read default docker\n    credentials.\n\n- Version 1.3.2\n  * Fix for\n    [CVE-2024-3727](https://bugzilla.suse.com/show_bug.cgi?id=1224114)\n    in a dependent library which describes a flaw that can allow\n    attackers to trigger unexpected authenticated registry accesses\n    due to object digest values not being validated in all cases.\n  * Fixed the issue when nesting `apptainer instance start` inside\n    a container on cgroups-v2 capable host.\n  * Fixed the issue that oras download progress bar gets stuck\n    when downloading large images.\n\n- Version 1.3.1\n  * Make 'apptainer build' work with signed Docker containers.\n  * Fixed regression introduced in 1.3.0 that prevented closing\n    cryptsetup and the corresponding loop device after running\n    an encrypted sif container file in suid mode.\n  * Stopped binding over the default timezone in the container\n    with the host's timezone, which led to unexpected behavior if\n    the application changed timezones.\n  * Added progress bars for `oras://` push and pull.\n  * Hide `Instance stats will not be available` message under\n    `--sharens` mode.\n  * Fix problem where credentials locally stored with\n    `registry login` command were not usable in some execution\n    flows. Run `registry login` again with latest version to ensure\n    credentials are stored correctly.\n  * Make runscript timeout configurable.\n  * Return invalid bind path mount options during bind path\n    parsing.\n  * Make the INFO message more helpful when a running background\n    process at exit time causes a FUSE mount to not shut down\n    cleanly.\n  * Fixed the wrong mediaType in the oras push manifest.\n- Add Apptainer definition template for SLE15-SP7.\n\n- Make sure, build is reproducible by setting the GNU build ID to one\n  derived from the Go one. See https://pkg.go.dev/cmd/link.\n\n- Use go-jose version with fix for CVE-2024-28180 (bsc#1235211).\n","status":"published","published":"2026-05-14T16:09:31Z","modified":"2026-05-16T08:19:17.133144Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20788-1","title":"Security update for mcphost","description":"This update for mcphost fixes the following issues\n\n- CVE-2025-30153: github.com/getkin/kin-openapi/openapi3filter: Improper Handling of Highly Compressed Data (Data\n  Amplification) in github.com/getkin/kin-openapi/openapi3filter (bsc#1264762).\n- CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in\n  response to a key listing or (bsc#1265274).\n- CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds\n  read (bsc#1265275).\n- CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption\n  (bsc#1253952).\n- CVE-2026-32285: github.com/buger/jsonparser: denial of service via malformed JSON input (bsc#1264759).\n- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo-\n  header (bsc#1260224).\n\nChanges for mcphost:\n\n- Updated to version 0.34.0\n * Features:\n - Upgrade charmbracelet libs to v2 (bubbletea, lipgloss, bubbles)\n - Add Google Vertex AI support for Claude models\n - Add new models.\n * Fixes:\n - Eliminate escape sequence leak from spinner tea.Program instances.\n - Fix anthropic api issue.\n - Convert JSON Schema draft-07 exclusive bounds to draft-04 format.\n * Upgrade all dependencies to latest versions, resolve security issues\n and to obtain Go 1.26 compatibility.\n","status":"published","published":"2026-05-22T11:50:52Z","modified":"2026-05-26T18:24:15.174834861Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20798-1","title":"Security update for trivy","description":"This update for trivy fixes the following issues:\n\nUpdate to version 0.68.2:\n\nSecurity fixes:\n\n - CVE-2024-3817: hashicorp/go-getter: argument injection when fetching remote default git branches (bsc#1227010).\n - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (bsc#1234512).\n - CVE-2024-45338: golang.org/x/net/html: denial of service due to non-linear parsing of case-insensitive content (bsc#1235265).\n - CVE-2024-51744: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232948).\n - CVE-2025-11065: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs (bsc#1250625).\n - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239225).\n - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239385).\n - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241724).\n - CVE-2025-27144: gopkg.in/go-jose/go-jose.v2: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237618).\n - CVE-2025-30204: github.com/golang-jwt/jwt/v4,github.com/golang-jwt/jwt/v5: jwt-go allows excessive memory allocation during header parsing (bsc#1240466).\n - CVE-2025-46569: github.com/open-policy-agent/opa: HTTP request path can be crafted to inject Rego code into a constructed query when a virtual document is requested through the Data API (bsc#1246730).\n - CVE-2025-47291: github.com/containerd/containerd/v2: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. (bsc#1243633).\n - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (bsc#1251363).\n - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253512).\n - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read (bsc#1253977).\n - CVE-2025-53547: helm.sh/helm/v3: Helm Chart Code Execution (bsc#1246151).\n - CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248937, bsc#1248897).\n - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253786).\n - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input (bsc#1251547).\n\nOther fixes:\n\n - Update installation.md (#8979)\n - chore(alpine): add EOL date for Alpine 3.21 (#8221)\n - chore(alpine): add EOL date for Alpine 3.22 (#8992)\n - chore(cli): Remove Trivy Cloud (#9847)\n - chore(deps): Bump trivy-checks (#7819)\n - chore(deps): Bump trivy-checks (#8310)\n - chore(deps): Bump trivy-checks (#8619)\n - chore(deps): Bump trivy-checks (#8934)\n - chore(deps): Bump trivy-checks to v1.7.1 (#8467)\n - chore(deps): Bump up trivy-checks to v1.3.0 (#7959)\n - chore(deps): Switch to go-viper/mapstructure (#9579)\n - chore(deps): Update trivy-checks (#8798)\n - chore(deps): Upgrade trivy-checks (#8018)\n - chore(deps): bump Go to `v1.23.5` (#8341)\n - chore(deps): bump Go to `v1.23.5` [backport: release/v0.59] (#8343)\n - chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` (#8105)\n - chore(deps): bump `github.com/CycloneDX/cyclonedx-go` from `v0.9.1` to `v0.9.2` [backport: release/v0.58] (#8136)\n - chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` (#8140)\n - chore(deps): bump `golang.org/x/net` from `v0.32.0` to `v0.33.0` [backport: release/v0.58] (#8142)\n - chore(deps): bump alpine from 3.20.0 to 3.21.0 in the docker group across 1 directory (#8196)\n - chore(deps): bump alpine from 3.21.0 to 3.21.3 in the docker group across 1 directory (#8490)\n - chore(deps): bump alpine from 3.21.4 to 3.22.1 (#9301)\n - chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 (#9764)\n - chore(deps): bump github.com/containerd/containerd/v2 from 2.1.0 to 2.1.1 (#8901)\n - chore(deps): bump github.com/containerd/containerd/v2 from 2.1.4 to 2.1.5 (#9763)\n - chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible (#9274)\n - chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#8443)\n - chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#9088)\n - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#7868)\n - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#8597)\n - chore(deps): bump github.com/moby/buildkit from 0.17.0 to 0.17.2 in the docker group across 1 directory (#7990)\n - chore(deps): bump github.com/moby/buildkit from 0.17.2 to 0.18.0 in the docker group (#8029)\n - chore(deps): bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 (#9778)\n - chore(deps): bump github.com/quic-go/quic-go from 0.52.0 to 0.54.1 (#9694)\n - chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#9403)\n - chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#8103)\n - chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 [backport: release/v0.58] (#8122)\n - chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#9827)\n - chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 in the common group (#8822)\n - chore(deps): bump golangci-lint to v2.1.2 (#8766)\n - chore(deps): bump helm.sh/helm/v3 from 3.18.3 to 3.18.4 (#9164)\n - chore(deps): bump the aws group across 1 directory with 5 updates (#8652)\n - chore(deps): bump the aws group across 1 directory with 6 updates (#8074)\n - chore(deps): bump the aws group across 1 directory with 6 updates (#8163)\n - chore(deps): bump the aws group across 1 directory with 7 updates (#7991)\n - chore(deps): bump the aws group across 1 directory with 7 updates (#8468)\n - chore(deps): bump the aws group with 6 updates (#7902)\n - chore(deps): bump the aws group with 6 updates (#9383)\n - chore(deps): bump the aws group with 6 updates (#9481)\n - chore(deps): bump the aws group with 6 updates (#9547)\n - chore(deps): bump the aws group with 7 updates (#8299)\n - chore(deps): bump the aws group with 7 updates (#9311)\n - chore(deps): bump the aws group with 7 updates (#9419)\n - chore(deps): bump the aws group with 7 updates (#9691)\n - chore(deps): bump the common group across 1 directory with 10 updates (#8566)\n - chore(deps): bump the common group across 1 directory with 10 updates (#8817)\n - chore(deps): bump the common group across 1 directory with 10 updates [backport: release/v0.62] (#8831)\n - chore(deps): bump the common group across 1 directory with 11 updates (#8381)\n - chore(deps): bump the common group across 1 directory with 13 updates (#8491)\n - chore(deps): bump the common group across 1 directory with 14 updates (#8126)\n - chore(deps): bump the common group across 1 directory with 20 updates (#7876)\n - chore(deps): bump the common group across 1 directory with 20 updates (#9840)\n - chore(deps): bump the common group across 1 directory with 23 updates (#8733)\n - chore(deps): bump the common group across 1 directory with 24 updates (#9228)\n - chore(deps): bump the common group across 1 directory with 24 updates (#9507)\n - chore(deps): bump the common group across 1 directory with 26 updates (#9063)\n - chore(deps): bump the common group across 1 directory with 26 updates (#9347)\n - chore(deps): bump the common group across 1 directory with 29 updates (#8261)\n - chore(deps): bump the common group across 1 directory with 7 updates (#9590)\n - chore(deps): bump the common group across 1 directory with 9 updates (#8887)\n - chore(deps): bump the common group across 1 directory with 9 updates (#9153)\n - chore(deps): bump the common group with 12 updates (#8301)\n - chore(deps): bump the common group with 4 updates (#7949)\n - chore(deps): bump the common group with 6 updates (#7904)\n - chore(deps): bump the common group with 6 updates (#8162)\n - chore(deps): bump the common group with 6 updates (#8411)\n - chore(deps): bump the common group with 7 updates (#9382)\n - chore(deps): bump the docker group across 1 directory with 3 updates (#8127)\n - chore(deps): bump the docker group across 1 directory with 3 updates (#8762)\n - chore(deps): bump the docker group with 3 updates (#9545)\n - chore(deps): bump the docker group with 3 updates (#9776)\n - chore(deps): bump the github-actions group across 1 directory with 2 updates (#7854)\n - chore(deps): bump the github-actions group across 1 directory with 2 updates (#8962)\n - chore(deps): bump the github-actions group across 1 directory with 4 updates (#8331)\n - chore(deps): bump the github-actions group across 1 directory with 9 updates (#9563)\n - chore(deps): bump the github-actions group with 3 updates (#8473)\n - chore(deps): bump the github-actions group with 4 updates (#9739)\n - chore(deps): bump the testcontainers group with 2 updates (#8650)\n - chore(deps): bump the testcontainers group with 2 updates (#9506)\n - chore(deps): bump to alpine from `3.21.3` to `3.21.4` (#9283)\n - chore(deps): bump up Trivy-kubernetes to v0.9.1 (#9214)\n - chore(deps): remove missed replace of `trivy-db` (#8492)\n - chore(deps): update Docker to v28.2.2 and fix compatibility issues (#9037)\n - chore(deps): update Go to 1.24 and switch to go-version-file (#8388)\n - chore(deps): update csaf module dependency from csaf-poc to gocsaf (#7992)\n - chore(deps): update go-rustaudit location (#8450)\n - chore(deps): update to module-compatible docker-credential-gcr/v2 (#9591)\n - chore(deps): use aqua forks for `github.com/liamg/jfather` and `github.com/liamg/iamgo` (#8289)\n - chore(k8s): enhance k8s scan log (#6997)\n - chore(k8s): update comments with deprecated command format (#8964)\n - chore(license): add missed spdx exceptions: (#9147)\n - chore(secret): add reported issues related to secrets in junit template (#8193)\n - chore(terraform): add accessors to underlying raw hcl values (#8306)\n - chore(terraform): assign *terraform.Module 'parent' field (#8444)\n - chore(terraform): export module path on terraform modules (#8374)\n - chore(terraform): option to pass in instanced logger  (#8738)\n - chore(terraform): remove os.OpenPath call from terraform file functions (#8737)\n - chore(vex): suppress CVE-2024-45337 (#8101)\n - chore(vex): suppress CVE-2024-45338 (#8137)\n - chore: Update release flow to include chocolatey (#9460)\n - chore: Update release workflow to trigger version updates (#9162)\n - chore: add an issue template for maintainers (#8838)\n - chore: add context to the cache interface (#9565)\n - chore: add debug log to show image source location (#9163)\n - chore: add modernize tool integration for code modernization (#9251)\n - chore: bump Go to 1.24.7 (#9435)\n - chore: bump `mockery` to update v2.52.2 version and rebuild mock files (#8390)\n - chore: bump containerd to v2.0.0 (#7875)\n - chore: bump go to 1.23.4 (#8123)\n - chore: bump golangci-lint to v1.61.0 (#7853)\n - chore: bump up Go version to 1.24.4 (#9031)\n - chore: downgrade the failed block expand message to debug (#7964)\n - chore: drop FreeBSD 32-bit support (#9102)\n - chore: enable int-conversion from perfsprint (#8194)\n - chore: enable staticcheck (#8815)\n - chore: fix errors and typos in docs (#8963)\n - chore: fix some function names in comment (#9314)\n - chore: implement process-safe temp file cleanup (#9241)\n - chore: lint `errors.Join` (#7845)\n - chore: migrate protoc setup from Docker to buf CLI (#9184)\n - chore: remove Go checks (#7907)\n - chore: remove aws iam related scripts (#8179)\n - chore: remove debug prints (#8347)\n - chore: remove mockery (#8417)\n - chore: replace deprecated tenv linter with usetesting (#8504)\n - chore: trigger the trivy-www workflow (#9737)\n - chore: typo fix to replace `rego` with `repo` on the RepoFlagGroup options error output (#8643)\n - chore: update Docker lib (#8681)\n - chore: update code owners (#8303)\n - chore: update template URL for brew formula (#9221)\n - chore: update the rpm download Update (#9202)\n - chore: use go.mod for managing Go tools (#8493)\n - chore: use require.ErrorContains when possible (#8291)\n - ci(deps): add 3-day cooldown period for Dependabot updates (#9475)\n - ci(helm): auto public Helm chart after PR merged (#7526)\n - ci(helm): bump Trivy version to 0.57.1 for Trivy Helm Chart 0.9.0 (#7945)\n - ci(helm): bump Trivy version to 0.58.0 for Trivy Helm Chart 0.10.0 (#8038)\n - ci(helm): bump Trivy version to 0.58.1 for Trivy Helm Chart 0.10.0 (#8170)\n - ci(helm): bump Trivy version to 0.59.0 for Trivy Helm Chart 0.11.0 (#8311)\n - ci(helm): bump Trivy version to 0.59.1 for Trivy Helm Chart 0.11.1 (#8354)\n - ci(helm): bump Trivy version to 0.60.0 for Trivy Helm Chart 0.12.0 (#8494)\n - ci(helm): bump Trivy version to 0.61.0 for Trivy Helm Chart 0.13.0 (#8638)\n - ci(helm): bump Trivy version to 0.61.1 for Trivy Helm Chart 0.13.1 (#8753)\n - ci(helm): bump Trivy version to 0.62.0 for Trivy Helm Chart 0.14.0 (#8802)\n - ci(helm): bump Trivy version to 0.62.1 for Trivy Helm Chart 0.14.1 (#8836)\n - ci(helm): bump Trivy version to 0.63.0 for Trivy Helm Chart 0.15.0 (#8946)\n - ci(helm): bump Trivy version to 0.64.0 for Trivy Helm Chart 0.16.0 (#9107)\n - ci(helm): bump Trivy version to 0.64.1 for Trivy Helm Chart 0.16.1 (#9135)\n - ci(helm): bump Trivy version to 0.65.0 for Trivy Helm Chart 0.17.0 (#9288)\n - ci(helm): bump Trivy version to 0.66.0 for Trivy Helm Chart 0.18.0 (#9425)\n - ci(helm): bump Trivy version to 0.67.0 for Trivy Helm Chart 0.19.0 (#9554)\n - ci(helm): bump Trivy version to 0.67.2 for Trivy Helm Chart 0.19.1 (#9641)\n - ci(helm): create a helm branch for patches from main (#8673)\n - ci(spdx): add `aqua-installer` step to fix `mage` error (#8353)\n - ci(vuln): reduce github action script injection attack risk (#8610)\n - ci: add API diff workflow (#9600)\n - ci: add auto-ready-for-review workflow (#9179)\n - ci: add workflow to restrict direct PRs to release branches (#8240)\n - ci: delete cache after artifacts upload in canary workflow (#9177)\n - ci: enable `check-latest` for `setup-go` [backport: release/v0.68] (#9946)\n - ci: fix path to main dir for canary builds (#8231)\n - ci: get base_sha using base.ref (#9704)\n - ci: improve PR title validation workflow (#8720)\n - ci: migrate GitHub Actions from version tags to SHA pinning (#9405)\n - ci: move runner.os context from job-level env to step-level in canary workflow (#9233)\n - ci: optimize golangci-lint performance with cache-based strategy (#9173)\n - ci: remove invalid `--confirm` flag from `gh cache delete` command in canary builds (#9236)\n - ci: remove unused preinstalled software/images for build tests to free up disk space. (#9814)\n - ci: skip undefined labels in discussion triage action (#9175)\n - ci: specify repository for `gh cache delete` in canary worklfow (#9240)\n - ci: update GitHub Actions cache to v4 (#8475)\n - ci: use `Skitionek/notify-microsoft-teams` instead of `aquasecurity` fork (#8740)\n - ci: use `github.event.pull_request.user.login` for release PR check workflow (#8702)\n - ci: use environment variables in GitHub Actions for improved security (#9433)\n - ci: use gh pr view to get PR number for forked repositories in auto-ready workflow (#9183)\n - ci: use merge commit for apidiff to avoid false positives (#9622)\n - ci: use pull_request_target for apidiff workflow to support fork PRs (#9605)\n - docs(cli): improve flag value display format (#8560)\n - docs(java):  Update info about dev deps in gradle lock (#8830)\n - docs(java): add info about supported scopes (#7842)\n - docs(k8s): add a note about multi-container pods (#7815)\n - docs(misconf): Remove duplicate sections (#9819)\n - docs(misconf): Reorganize misconfiguration scan pages (#8206)\n - docs(misconf): simplify misconfiguration docs (#9030)\n - docs(python): Mention pip-compile (#8484)\n - docs(python): fix type with METADATA file name (#9090)\n - docs(report): Improve SARIF reporting doc (#7655)\n - docs(report): add nuanses about secret/license scanner in summary table (#9442)\n - docs(report): fix reporting doc format (#7671)\n - docs(server): fix info about scanning licenses on the client side. (#9805)\n - docs(vex): use debian minor version in examples (#8166)\n - docs(vuln): remove OSV for Python from data sources (#8841)\n - docs: Add info about helm charts release (#8640)\n - docs: Fix broken link to \"Built-in Checks\" (#9375)\n - docs: Fix broken links (#7900)\n - docs: Fix typo in terraform docs (#9492)\n - docs: Fix typos and linguistic errors in documentation / hacktoberfest (#9586)\n - docs: Fix typos in documentation (#8361)\n - docs: Update maintainer docs (#8674)\n - docs: Updated JSON schema version 2 in the trivy documentation (#8188)\n - docs: add Headlamp to the Trivy Ecosystem page (#7916)\n - docs: add PR review policy for maintainers (#9032)\n - docs: add Windows install instructions (#7800)\n - docs: add `overview` page for `others` (#7972)\n - docs: add abbreviation list (#8453)\n - docs: add commercial content (#8030)\n - docs: add example of creating whitelist of checks (#7821)\n - docs: add explanation for how to use non-system certificates (#9081)\n - docs: add info about `java-db` subdir (#9706)\n - docs: add info that `SSL_CERT_FILE` works on `Unix systems other than macOS` only (#9772)\n - docs: add note about disabled DS016 check (#7724)\n - docs: add note about temporary podman socket (#7921)\n - docs: add partners page (#8988)\n - docs: add section on customizing default check data (#9114)\n - docs: add terminology page to explain Trivy concepts (#7996)\n - docs: add vulnerability database contribution guide (#9667)\n - docs: apt-transport-https is a transitional package (#7678)\n - docs: bump pygments from 2.18.0 to 2.19.2 (#9596)\n - docs: catch some missed docs -\u003e guide (#9850)\n - docs: change --disable-metrics to --disable-telemetry in example (#8999) (#9003)\n - docs: change SecObserve URLs in documentatio (#9771)\n - docs: change in java.md: fix the Trity -to-\u003e Trivy typo (#8813)\n - docs: clarify inline ignore limitations for resource-less checks (#9537)\n - docs: combine trivy.dev into trivy docs (#7884)\n - docs: correct Ruby documentation (#8402)\n - docs: document eol supportability (#9434)\n - docs: drop AWS account scanning (#7997)\n - docs: fix a broken link (#8546)\n - docs: fix assets with versioning (#8996)\n - docs: fix dead links (#7998)\n - docs: fix mistakes/typos (#7942)\n - docs: fix modules path and update code example (#9539)\n - docs: fix navigate links (#8336)\n - docs: improve databases documentation (#7732)\n - docs: improve documentation for scanning raw IaC configurations (#9571)\n - docs: improve skipping files documentation (#8749)\n - docs: move info about `detection priority` into coverage section (#9469)\n - docs: partners page content updates (#9149)\n - docs: remove slack (#8565)\n - docs: replace short codes with Unicode emojis (#8296)\n - docs: restructure docs for new hosting (#9799)\n - docs: trivy partners page updates (#9133)\n - docs: update VEX documentation index page (#8458)\n - docs: update links to Semaphore pages (#9352)\n - docs: update vulnerability reporting guidelines in SECURITY.md (#9395)\n - feat(alma): add AlmaLinux 10 support (#9207)\n - feat(alpine): add maintainer field extraction for APK packages (#8930)\n - feat(aws): Add support for dualstack ECR endpoints (#9862)\n - feat(cli): Add available version checking (#8553)\n - feat(cli): Add trivy cloud suppport (#9637)\n - feat(cli): add `trivy auth` (#7664)\n - feat(cli): add version constraints to annoucements (#9023)\n - feat(cli): change --list-all-pkgs default to true (#9510)\n - feat(cli): error out when ignore file cannot be found (#7624)\n - feat(cli): rename `trivy auth` to `trivy registry` (#7727)\n - feat(cloudformation): support default values and list results in Fn::FindInMap (#9515)\n - feat(cyclonedx): Add initial support for loading external VEX files from SBOM references (#8254)\n - feat(cyclonedx): add file checksums to `CycloneDX` reports (#7507)\n - feat(cyclonedx): preserve SBOM structure when scanning SBOM files with vulnerability updates (#9439)\n - feat(db): append errors (#7843)\n - feat(db): enable concurrent access to vulnerability database (#9750)\n - feat(dotnet): add dependency graph support for .deps.json files (#9726)\n - feat(echo): Add Echo Support (#8833)\n - feat(flag): add `--cacert` flag (#9781)\n - feat(flag): add schema validation for `--server` flag (#9270)\n - feat(fs): change artifact type to repository when git info is detected (#9613)\n - feat(fs): optimize scanning performance by direct file access for known paths (#8525)\n - feat(fs): use git commit hash as cache key for clean repositories (#8278)\n - feat(go): construct dependencies in the parser (#7973)\n - feat(go): construct dependencies of `go.mod` main module in the parser (#7977)\n - feat(go): fix parsing main module version for go \u003e= 1.24 (#8433)\n - feat(go): support license scanning in both GOPATH and vendor (#8843)\n - feat(image): add Docker context resolution (#9166)\n - feat(image): add RepoTags support for Docker archives (#9690)\n - feat(image): add Sigstore bundle SBOM support (#9516)\n - feat(image): pass global context to docker/podman image save func (#9733)\n - feat(image): prevent scanning oversized container images (#8178)\n - feat(image): return error early if total size of layers exceeds limit (#8294)\n - feat(image): save layers metadata into report (#8394)\n - feat(java): add support remote repositories from settings.xml files (#9708)\n - feat(java): dereference all maven settings.xml env placeholders (#9024)\n - feat(k8s): add default commands for unknown platform (#7863)\n - feat(k8s): add support for controllers (#8614)\n - feat(k8s): get components from namespaced resources (#8918)\n - feat(k8s): improve artifact selections for specific namespaces (#8248)\n - feat(license): Support compound licenses (licenses using SPDX operators) (#8816)\n - feat(license): improve work text licenses with custom classification (#8888)\n - feat(license): improve work with custom classification of licenses from config file (#8861)\n - feat(license): observe pkg types option in license scanner (#9091)\n - feat(license): scan vendor directory for license for go.mod files (#8689)\n - feat(license): use separate SPDX ids to ignore SPDX expressions (#9087)\n - feat(minimos): Add support for MinimOS (#8792)\n - feat(misconf): Add RoleAssignments attribute (#9396)\n - feat(misconf): Add support for `Minimum Trivy Version` (#8880)\n - feat(misconf): Add support for aws_ami (#8499)\n - feat(misconf): Add support for configurable Rego error limit (#9657)\n - feat(misconf): Show misconfig ID in output (#7762)\n - feat(misconf): Update AppService schema (#9792)\n - feat(misconf): Update Azure Compute schema (#9675)\n - feat(misconf): Update Azure Container Schema (#9673)\n - feat(misconf): Update Azure network schema for new checks (#9791)\n - feat(misconf): Update SecurityCenter schema (#9674)\n - feat(misconf): Update azure storage schema (#9728)\n - feat(misconf): adapt AWS::DynamoDB::Table (#8529)\n - feat(misconf): adapt AWS::EC2::VPC (#8534)\n - feat(misconf): adapt aws_default_security_group (#8538)\n - feat(misconf): adapt aws_opensearch_domain (#8550)\n - feat(misconf): add OpenTofu file extension support (#8747)\n - feat(misconf): add agentpools to azure container schema (#9714)\n - feat(misconf): add misconfiguration location to junit template (#8793)\n - feat(misconf): add option to pass Rego scanner to IaC scanner (#8369)\n - feat(misconf): add private ip google access attribute to subnetwork (#9199)\n - feat(misconf): added audit config attribute (#9249)\n - feat(misconf): added logging and versioning to the gcp storage bucket (#9226)\n - feat(misconf): convert AWS managed policy to document (#8757)\n - feat(misconf): export raw Terraform data to Rego (#8741)\n - feat(misconf): export unresolvable field of IaC types to Rego (#7765)\n - feat(misconf): generate placeholders for random provider resources (#8051)\n - feat(misconf): include map key in manifest snippet for diagnostics (#9681)\n - feat(misconf): log causes of HCL file parsing errors (#7634)\n - feat(misconf): normalize CreatedBy for buildah and legacy docker builder (#8953)\n - feat(misconf): public network support for Azure Storage Account (#7601)\n - feat(misconf): render causes for Terraform (#8360)\n - feat(misconf): ssl_mode support for GCP SQL DB instance (#7564)\n - feat(misconf): support auto_provisioning_defaults in google_container_cluster (#8705)\n - feat(misconf): support for ignoring by inline comments for Dockerfile (#8115)\n - feat(misconf): support for ignoring by inline comments for Helm (#8138)\n - feat(misconf): support https_traffic_only_enabled in Az storage account (#9784)\n - feat(nodejs): add a bun.lock analyzer (#8897)\n - feat(nodejs): add bun.lock parser (#8851)\n - feat(nodejs): add root and workspace for `yarn` packages (#8535)\n - feat(nodejs): respect peer dependencies for dependency tree (#7989)\n - feat(oracle): add `flavors` support (#7858)\n - feat(parser): ignore white space in pom.xml files (#7747)\n - feat(python): add support for poetry dev dependencies (#8152)\n - feat(python): add support for uv (#8080)\n - feat(python): add support for uv dev and optional dependencies (#8134)\n - feat(redhat): Add EOL date for RHEL 10. (#8910)\n - feat(redhat): add os-release detection for RHEL-based images (#9458)\n - feat(repo): add git repository metadata to reports (#9252)\n - feat(report): add CVSS vectors in sarif report (#9157)\n - feat(report): add fingerprint generation for vulnerabilities (#9794)\n - feat(report): add image reference to report metadata (#9729)\n - feat(report): switch ReportID from UUIDv4 to UUIDv7 (#9749)\n - feat(report): update gitlab template to populate operating_system value (#7735)\n - feat(rust): add root and workspace relationships/package for `cargo` lock files (#8676)\n - feat(sbom): add SHA-512 hash support for CycloneDX SBOM (#9126)\n - feat(sbom): add manufacturer field to CycloneDX tools metadata (#9019)\n - feat(sbom): add support for SPDX attestations (#9829)\n - feat(sbom): added support for CoreOS (#9448)\n - feat(sbom): use SPDX license IDs list to validate SPDX IDs  (#9569)\n - feat(seal): add seal support (#9370)\n - feat(secret): Add built-in secrets rules for Private Packagist (#7826)\n - feat(secret): implement streaming secret scanner with byte offset tracking (#9264)\n - feat(suse): Add new openSUSE, Micro and SLES releases end of life dates (#9788)\n - feat(suse): Align SUSE/OpenSUSE OS Identifiers (#7965)\n - feat(terraform): add partial evaluation for policy templates (#8967)\n - feat(terraform): use .terraform cache for remote modules in plan scanning (#9277)\n - feat(ubuntu): add end of life date for Ubuntu 25.04 (#9077)\n - feat(ubuntu): add eol date for 20.04-ESM (#8981)\n - feat(vuln): add Root.io support for container image scanning (#9073)\n - feat: Update registry fallbacks (#7679)\n - feat: Update registry fallbacks [backport: release/v0.57] (#7944)\n - feat: add ArtifactID field to uniquely identify scan targets (#9663)\n - feat: add Bottlerocket OS package analyzer (#8653)\n - feat: add HTTP request/response tracing support (#9125)\n - feat: add JSONC support for comments and trailing commas (#8862)\n - feat: add ReportID field to scan reports (#9670)\n - feat: add `--distro` flag to manually specify OS distribution for vulnerability scanning (#8070)\n - feat: add `--vuln-severity-source` flag (#8269)\n - feat: add `workspaceRelationship` (#7889)\n - feat: add a examples field to check metadata (#8068)\n - feat: add cvss v4 score and vector in scan response (#7968)\n - feat: add documentation URL for database lock errors (#9531)\n - feat: add end of life date for Ubuntu 24.10 (#7787)\n - feat: add graceful shutdown with signal handling (#9242)\n - feat: add report summary table (#8177)\n - feat: add support for registry mirrors (#8244)\n - feat: add timeout handling for cache database operations (#9307)\n - feat: allow ignoring findings by type in Rego (#9578)\n - feat: include registry and repository in artifact ID calculation (#9689)\n - feat: reject unsupported artifact types in remote image retrieval (#9052)\n - feat: replace TinyGo with standard Go for WebAssembly modules (#8496)\n - feat: terraform parser option to set current working directory (#8909)\n - fix(alma): parse epochs from rpmqa file (#9101)\n - fix(alma): parse epochs from rpmqa file [backport: release/v0.64] (#9119)\n - fix(alpine): add `UID` for removed packages (#7887)\n - fix(aws): change CPU and Memory type of ContainerDefinition to a string (#7995)\n - fix(aws): update amazon linux 2 EOL date (#9176)\n - fix(aws): use `BuildableClient` insead of `xhttp.Client` (#9436)\n - fix(cli): Add more non-sensitive flags to telemetry (#9110)\n - fix(cli): Add more non-sensitive flags to telemetry [backport: release/v0.64] (#9124)\n - fix(cli): Handle empty ignore files more gracefully (#7962)\n - fix(cli): `clean --all` deletes only relevant dirs (#7704)\n - fix(cli): add config name to skip-policy-update alias (#7820)\n - fix(cli): add some values to the telemetry call (#9056)\n - fix(cli): disable `--skip-dir` and `--skip-files` flags for `sbom` command (#8886)\n - fix(cli): don't use allow values for `--compliance` flag (#8881)\n - fix(cli): ensure correct command is picked by telemetry (#9260)\n - fix(cli): panic: attempt to get os.Args[1] when len(os.Args) \u003c 2 (#9206)\n - fix(conda): memory leak by adding closure method for `package.json` file (#9349)\n - fix(cyclonedx): handle multiple license types (#9378)\n - fix(db): Dowload database when missing but metadata still exists (#9393)\n - fix(db): fix case when 2 trivy-db were copied at the same time (#8452)\n - fix(db): fix javadb downloading error handling (#7642)\n - fix(debian): don't include empty licenses for `dpkgs` (#8623)\n - fix(debian): infinite loop (#7928)\n - fix(deps): bump alpine from `3.22.1` to `3.23.0` [backport: release/v0.68] (#9949)\n - fix(flag): remove viper.SetDefault to fix IsSet() for config-only flags (#9732)\n - fix(flag): skip hidden flags for `--generate-default-config` command (#8046)\n - fix(fs): add missing defered Cleanup() call to post analyzer fs (#7882)\n - fix(fs): avoid shadowing errors in file.glob (#9286)\n - fix(fs): check postAnalyzers for StaticPaths (#8543)\n - fix(fs): fix cache key generation to use UUID (#8275)\n - fix(go): Do not trim v prefix from versions in Go Mod Analyzer (#7733)\n - fix(go): merge nested flags into string for ldflags for Go binaries (#8368)\n - fix(helm): properly handle multiple archived dependencies (#7782)\n - fix(image): disable AVD-DS-0007 for history scanning (#8366)\n - fix(image): use standardized HTTP client for ECR authentication (#9322)\n - fix(java): correctly inherit `version` and `scope` from upper/root `depManagement` and `dependencies` into parents (#7541)\n - fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props (#8050)\n - fix(java): correctly overwrite version from depManagement if dependency uses `project.*` props [backport: release/v0.58] (#8119)\n - fix(java): exclude dev dependencies in gradle lockfile (#8803)\n - fix(java): update order for resolving package fields from multiple demManagement (#9575)\n - fix(java): use `true` as default value for Repository Release|Snapshot Enabled in pom.xml and settings.xml files (#9751)\n - fix(julia): add `Relationship` field support (#8939)\n - fix(k8s)!: support k8s multi container (#7444)\n - fix(k8s): add missed option `PkgRelationships` (#8442)\n - fix(k8s): check all results for vulnerabilities (#7946)\n - fix(k8s): correct compare artifact versions (#8682)\n - fix(k8s): correct compare artifact versions [backport: release/v0.61] (#8699)\n - fix(k8s): disable parallel traversal with fs cache for k8s images (#9534)\n - fix(k8s): remove using `last-applied-configuration` (#8791)\n - fix(k8s): show report for `--report all` (#8613)\n - fix(k8s): skip passed misconfigs for the summary report (#8684)\n - fix(k8s): skip passed misconfigs for the summary report [backport: release/v0.61] (#8748)\n - fix(k8s): skip resources without misconfigs (#7797)\n - fix(k8s): support kubernetes v1.31 (#7810)\n - fix(k8s): use in-memory cache backend during misconfig scanning (#8873)\n - fix(license): add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping (#9116)\n - fix(license): always trim leading and trailing spaces for licenses (#8095)\n - fix(license): don't normalize `unlicensed` licenses into `unlicense` (#9611)\n - fix(license): fix license normalization for Universal Permissive License (#7766)\n - fix(license): handle SPDX WITH exceptions as single license in category detection (#9380)\n - fix(license): handle WITH operator for `LaxSplitLicenses` (#9232)\n - fix(misconf): .Config.User always takes precedence over USER in .History (#9050)\n - fix(misconf): Check values wholly prior to evalution (#8604)\n - fix(misconf): Improve logging for unsupported checks (#8634)\n - fix(misconf): Update trivy-checks default repo to `mirror.gcr.io` (#7953)\n - fix(misconf): add ephemeral block type to config schema (#8513)\n - fix(misconf): add missing variable as unknown (#8683)\n - fix(misconf): allow null values only for tf variables (#8112)\n - fix(misconf): allow null values only for tf variables [backport: release/v0.58] (#8238)\n - fix(misconf): change default ACL of digitalocean_spaces_bucket to private (#7577)\n - fix(misconf): check if for-each is known when expanding dyn block (#8808)\n - fix(misconf): check if for-each is known when expanding dyn block [backport: release/v0.62] (#8826)\n - fix(misconf): check if metadata is not nil (#8647)\n - fix(misconf): check if property is not nil before conversion (#7578)\n - fix(misconf): correct Azure value-to-time conversion in AsTimeValue (#9015)\n - fix(misconf): correctly adapt azure storage account (#9138)\n - fix(misconf): correctly handle all YAML tags in K8S templates (#8259)\n - fix(misconf): correctly parse empty port ranges in google_compute_firewall (#9237)\n - fix(misconf): disable git terminal prompt on tf module load (#8026)\n - fix(misconf): do not erase variable type for child modules (#7941)\n - fix(misconf): do not log scanners when misconfig scanning is disabled (#8345)\n - fix(misconf): do not log scanners when misconfig scanning is disabled [backport: release/v0.59] (#8349)\n - fix(misconf): do not skip loading documents from subdirectories (#8526)\n - fix(misconf): do not use cty.NilVal for non-nil values (#8567)\n - fix(misconf): ecs include enhanced for container insights (#8326)\n - fix(misconf): ensure boolean metadata values are correctly interpreted (#9770)\n - fix(misconf): ensure ignore rules respect subdirectory chart paths (#9324)\n - fix(misconf): ensure module source is known (#9404)\n - fix(misconf): ensure value used as ignore marker is non-null and known (#9835)\n - fix(misconf): filter null nodes when parsing json manifest (#8785)\n - fix(misconf): fix for Azure Storage Account network acls adaptation (#7602)\n - fix(misconf): fix incorrect k8s locations due to JSON to YAML conversion (#8073)\n - fix(misconf): fix log bucket in schema (#9235)\n - fix(misconf): handle heredocs in dockerfile instructions (#8284)\n - fix(misconf): handle null properties in CloudFormation templates (#7813)\n - fix(misconf): handle tofu files in module detection (#9486)\n - fix(misconf): handle unsupported experimental flags in Dockerfile (#9769)\n - fix(misconf): identify the chart file exactly by name (#8590)\n - fix(misconf): load full Terraform module (#7925)\n - fix(misconf): map healthcheck start period flag to --start-period instead of --startPeriod (#9837)\n - fix(misconf): move disabled checks filtering after analyzer scan (#9002)\n - fix(misconf): perform operations on attribute safely (#8774)\n - fix(misconf): populate context correctly for module instances (#8656)\n - fix(misconf): preserve original paths of remote submodules from .terraform (#9294)\n - fix(misconf): properly expand dynamic blocks (#7612)\n - fix(misconf): properly resolve local Terraform cache (#7983)\n - fix(misconf): reduce log noise on incompatible check (#9029)\n - fix(misconf): set default values for AWS::EKS::Cluster.ResourcesVpcConfig (#8548)\n - fix(misconf): skip Azure CreateUiDefinition (#8503)\n - fix(misconf): skip rewriting expr if attr is nil (#9113)\n - fix(misconf): skip rewriting expr if attr is nil [backport: release/v0.64] (#9127)\n - fix(misconf): strip build metadata suffixes from image history (#9498)\n - fix(misconf): unmark cty values before access (#9495)\n - fix(misconf): use argument value in WithIncludeDeprecatedChecks (#8942)\n - fix(misconf): use correct field log_bucket instead of target_bucket in gcp bucket (#9296)\n - fix(misconf): use log instead of fmt for logging (#8033)\n - fix(misconf): wrap AWS EnvVar to iac types (#7407)\n - fix(misconf): wrap legacy ENV values in quotes to preserve spaces (#9497)\n - fix(nodejs): correctly parse `packages` array of `bun.lock` file (#8998)\n - fix(nodejs): don't use prerelease logic for compare npm constraints  (#9208)\n - fix(nodejs): fix npmjs parser.pkgNameFromPath() panic issue (#9688)\n - fix(nodejs): parse workspaces as objects for package-lock.json files (#9518)\n - fix(nodejs): use snapshot string as `Package.ID` for pnpm packages (#9330)\n - fix(nodejs): use the default ID format to match licenses in pnpm packages. (#9661)\n - fix(oracle): add architectures support for advisories (#4809)\n - fix(oracle): add architectures support for advisories [backport: release/v0.58] (#8125)\n - fix(os): Add photon 5.0 in supported OS (#9724)\n - fix(os): add mapping OS aliases (#8466)\n - fix(plugin): don't remove plugins when updating index.yaml file (#9358)\n - fix(python): add `poetry` v2 support (#8323)\n - fix(python): add `poetry` v2 support [backport: release/v0.59] (#8335)\n - fix(python): impove package name normalization  (#9290)\n - fix(python): skip dev group's deps for poetry (#8106)\n - fix(python): skip dev group's deps for poetry [backport: release/v0.58] (#8158)\n - fix(redhat): Also try to find buildinfo in root layer (layer 0) (#8924)\n - fix(redhat): check `usr/share/buildinfo/` dir to detect content sets (#8222)\n - fix(redhat): correct rewriting of recommendations for the same vulnerability (#8063)\n - fix(redhat): correct rewriting of recommendations for the same vulnerability [backport: release/v0.58] (#8135)\n - fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files (#7912)\n - fix(redhat): don't return error if `root/buildinfo/content_manifests/` contains files that are not `contentSets` files [backport: release/v0.57] (#7939)\n - fix(redhat): include arch in PURL qualifiers (#7654)\n - fix(redhat): include arch in PURL qualifiers [backport: release/v0.56] (#7702)\n - fix(redhat): save contentSets for OS packages in fs/vm modes (#8820)\n - fix(redhat): trim invalid suffix from content_sets in manifest parsing (#8818)\n - fix(redhat): trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#8824)\n - fix(repo): `git clone` output to Stderr (#7561)\n - fix(repo): preserve RepoMetadata on FS cache hit (#9389)\n - fix(repo): sanitize git repo URL before inserting into report metadata (#9391)\n - fix(report): Fix invalid URI in SARIF report (#7645)\n - fix(report): clean buffer after flushing (#8725)\n - fix(report): correct field order in SARIF license results (#9712)\n - fix(report): don't panic when report contains vulns, but doesn't contain packages for `table` format (#8549)\n - fix(report): handle `git@github.com` schema for misconfigs in `sarif` report (#7898)\n - fix(report): remove html escaping for `shortDescription` and `fullDescription` fields for sarif reports (#8344)\n - fix(rootio): check full version to detect `root.io` packages (#9117)\n - fix(rootio): check full version to detect `root.io` packages [backport: release/v0.64] (#9120)\n - fix(rootio): fix severity selection (#9181)\n - fix(sbom):  use `Annotation` instead of `AttributionTexts` for `SPDX` formats (#7811)\n - fix(sbom): Fixes for Programming Language Vulnerabilities and SBOM Package Maintainer Details (#7871)\n - fix(sbom): add SBOM file's filePath as Application FilePath if we can't detect its path (#8346)\n - fix(sbom): add `buildInfo` info as properties (#9683)\n - fix(sbom): add options for DBs in private registries (#7660)\n - fix(sbom): add options for DBs in private registries [backport: release/v0.56] (#7691)\n - fix(sbom): add support for `file` component type of `CycloneDX` (#9372)\n - fix(sbom): attach nested packages to Application (#8144)\n - fix(sbom): attach nested packages to Application [backport: release/v0.58] (#8168)\n - fix(sbom): don’t panic on SBOM format if scanned CycloneDX file has empty metadata (#9562)\n - fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type (#8052)\n - fix(sbom): fix wrong overwriting of applications obtained from different sbom files but having same app type [backport: release/v0.58] (#8124)\n - fix(sbom): improve logic for binding direct dependency to parent component (#8489)\n - fix(sbom): merge in-graph and out-of-graph OS packages in scan results (#9194)\n - fix(sbom): preserve OS packages from multiple SBOMs (#8325)\n - fix(sbom): preserve OS packages from multiple SBOMs [backport: release/v0.59] (#8333)\n - fix(sbom): remove unnecessary OS detection check in SBOM decoding (#9034)\n - fix(sbom): scan results of SBOMs generated from container images are missing layers (#7635)\n - fix(sbom): use correct field for licenses in CycloneDX reports (#9057)\n - fix(sbom): use root package for `unknown` dependencies (if exists) (#8104)\n - fix(sbom): use root package for `unknown` dependencies (if exists) [backport: release/v0.58] (#8156)\n - fix(secret): add UTF-8 validation in secret scanner to prevent protobuf marshalling errors (#9253)\n - fix(secret): fix line numbers for multiple-line secrets (#9104)\n - fix(secret): ignore .dist-info directories during secret scanning (#8646)\n - fix(server): add HTTP transport setup to server mode (#9217)\n - fix(server): add missed Relationship field for `rpc` (#8872)\n - fix(server): fix redis key when trying to delete blob (#8649)\n - fix(server): secrets inspectation for the config analyzer in client server mode (#8418)\n - fix(spdx): init `pkgFilePaths` map for all formats (#8380)\n - fix(spdx): save text licenses into `otherLicenses` without normalize (#8502)\n - fix(spdx): use the `hasExtractedLicensingInfos` field for licenses that are not listed in the SPDX (#8077)\n - fix(suse): SUSE - update OSType constants and references for compatility (#8236)\n - fix(suse): SUSE - update OSType constants and references for compatility [backport: release/v0.58] (#8237)\n - fix(terraform): `evaluateStep` to correctly set `EvalContext` for multiple instances of blocks (#8555)\n - fix(terraform): `for_each` on a map returns a resource for every key (#9156)\n - fix(terraform): apply parser options to submodule parsing (#8377)\n - fix(terraform): hcl object expressions to return references (#8271)\n - fix(terraform): set null value as fallback for missing variables (#7669)\n - fix(vex): don't  suppress vulns for packages with infinity loop (#9465)\n - fix(vex): don't use reused BOM (#9604)\n - fix(vex): don't use reused BOM [backport: release/v0.67] (#9612)\n - fix(vex): use `lo.IsNil` to check `VEX` from OCI artifact (#8858)\n - fix(vex): use a separate `visited` set for each DFS path (#9760)\n - fix(vuln): compare `nuget` package names in lower case (#9456)\n - fix(wolfi): support new APK database location (#8937)\n - fix: Add missing version check flags (#8951)\n - fix: CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (#8088)\n - fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field (#8207)\n - fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field [backport: release/v0.58] (#8215)\n - fix: Correctly check for semver versions for trivy version check (#8948)\n - fix: Improve version comparisons when build identifiers are present (#7873)\n - fix: Trim the end-of-range suffix (#9618)\n - fix: Updated twitter icon (#7772)\n - fix: Use `fetch-level: 1` to check out trivy-repo in the release workflow (#9636)\n - fix: Use `fetch-level: 1` to check out trivy-repo in the release workflow [backport: release/v0.67] (#9638)\n - fix: add `buildInfo` for `BlobInfo` in `rpc` package (#9608)\n - fix: add `buildInfo` for `BlobInfo` in `rpc` package [backport: release/v0.67] (#9615)\n - fix: also check `filepath` when removing duplicate packages (#9142)\n - fix: check post-analyzers for StaticPaths (#8904)\n - fix: close all opened resources if an error occurs (#9665)\n - fix: close file descriptors and pipes on error paths (#9536)\n - fix: create temp file under composite fs dir (#9387)\n - fix: de-duplicate same `dpkg` packages with different filePaths from different layers (#8298)\n - fix: don't show corrupted trivy-db warning for first run (#8991)\n - fix: don't use `scope` for `trivy registry login` command (#8393)\n - fix: early-return, indent-error-flow and superfluous-else rules from revive  (#8796)\n - fix: enable err-error and errorf rules from perfsprint linter (#7859)\n - fix: enable usestdlibvars linter (#7770)\n - fix: filter all files when processing files installed from package managers (#8842)\n - fix: handle `BLOW_UNKNOWN` error to download DBs (#8060)\n - fix: handle `BLOW_UNKNOWN` error to download DBs [backport: release/v0.58] (#8121)\n - fix: improve conversion of image config to Dockerfile (#8308)\n - fix: julia parser panicing (#8883)\n - fix: migrate from `*.list` to `*.md5sums` files for `dpkg` (#9131)\n - fix: more revive rules (#8814)\n - fix: octalLiteral from go-critic (#8811)\n - fix: persistent flag option typo (#9374)\n - fix: prevent graceful shutdown message on normal exit (#9244)\n - fix: respect GITHUB_TOKEN to download artifacts from GHCR (#7580)\n - fix: restore compatibility for google.protobuf.Value (#9559)\n - fix: restore compatibility for google.protobuf.Value [backport: release/v0.67] (#9631)\n - fix: supporting .egg-info/METADATA in python.Packaging analyzer (#9151)\n - fix: suppress debug log for context cancellation errors (#9298)\n - fix: testifylint last issues (#8768)\n - fix: unused-parameter rule from revive (#8794)\n - fix: update all documentation links (#8045)\n - fix: update all documentation links (#9777)\n - fix: update cosing settings for GoReleaser after bumping cosing to v3 (#9863)\n - fix: use `--file-patterns` flag for all post analyzers (#7365)\n - fix: use context for analyzers (#9538)\n - fix: use-any from revive (#8810)\n - fix: using SrcVersion instead of Version for echo detector (#9552)\n - fix: using SrcVersion instead of Version for echo detector [backport: release/v0.67] (#9629)\n - fix: validate backport branch name (#9548)\n - fix: wasm module test (#8099)\n - perf(misconf): parse input for Rego once (#8483)\n - perf(misconf): retrieve check metadata from annotations once (#8478)\n - perf(secret): only match secrets of meaningful length, allow example strings to not be matched (#8602)\n - perf: avoid heap allocation in applier findPackage (#7883)\n - refactor(cli): Update the cloud config command (#9676)\n - refactor(cloudformation): remove unused ScanFile method from Scanner (#8927)\n - refactor(db): change logic to detect wrong DB (#8864)\n - refactor(db): use `Getter` interface with `GetParams` for trivy-db sources (#9239)\n - refactor(flag): improve flag system architecture and extensibility (#8718)\n - refactor(fs): use underlyingPath to determine virtual files more reliably (#9302)\n - refactor(k8s): add v prefix for Go packages (#7839)\n - refactor(k8s): scan config files as a folder (#7690)\n - refactor(license): improve license expression normalization (#8257)\n - refactor(license): simplify compound license scanning (#8896)\n - refactor(misconf): Deprecate `EXCEPTIONS` for misconfiguration scanning (#7776)\n - refactor(misconf): Remove unused options (#7896)\n - refactor(misconf): Simplify misconfig checks bundle parsing (#8533)\n - refactor(misconf): add ID to scan.Rule (#9573)\n - refactor(misconf): add ManifestFromYAML for unified manifest parsing (#9680)\n - refactor(misconf): decouple input fs and track extracted files with fs references (#9281)\n - refactor(misconf): get a block or attribute without calling HasChild (#8586)\n - refactor(misconf): introduce generic scanner (#7515)\n - refactor(misconf): make Rego scanner independent of config type (#7517)\n - refactor(misconf): mark AVDID fields as deprecated and use ID internally (#9576)\n - refactor(misconf): migrate from custom Azure JSON parser (#9222)\n - refactor(misconf): parse azure_policy_enabled to addonprofile.azurepolicy.enabled (#9851)\n - refactor(misconf): remove module outputs from parser.EvaluateAll (#8587)\n - refactor(misconf): remove unused methods for ec2.Instance (#8536)\n - refactor(misconf): remove unused methods from iac types (#8782)\n - refactor(misconf): remove unused methods from providers (#8781)\n - refactor(misconf): remove unused terraform attribute methods (#8657)\n - refactor(misconf): replace github.com/liamg/memoryfs with internal mapfs and testing/fstest (#9282)\n - refactor(misconf): rewrite Rego module filtering using functional filters (#9061)\n - refactor(misconf): set Trivy version by default in Rego scanner (#9001)\n - refactor(misconf): simplify k8s scanner (#7717)\n - refactor(misconf): switch to x/json  (#8719)\n - refactor(misconf): type-safe parser results in generic scanner (#9685)\n - refactor(misconf): use OPA v1 (#8518)\n - refactor(misconf): use atomic.Int32 (#9385)\n - refactor(python): use once + debug for `License acquired from METADATA...` logs (#8175)\n - refactor(report): write tables after rendering all results (#8357)\n - refactor(sbom): simplify relationship generation (#7985)\n - refactor(secret): clarify secret scanner messages (#9409)\n - refactor(secret): optimize performance by moving ToLower operation outside loop (#7862)\n - refactor(server): change custom advisory and vulnerability data types fr… (#8923)\n - refactor(terraform): make Scan method of Terraform plan scanner private (#9272)\n - refactor(terraform): remove result sorting from scanner (#8928)\n - refactor(terraform): simplify AllReferences method signature in Attribute (#8906)\n - refactor(ubuntu): update time handling for fixing time (#8780)\n - refactor(vex): improve SBOM reference handling with project standards (#8457)\n - refactor: add case-insensitive string set implementation (#9720)\n - refactor: add generic Set implementation (#8149)\n - refactor: add hook interface for extended functionality (#8585)\n - refactor: centralize HTTP transport configuration (#9058)\n - refactor: export `systemFileFiltering` Post Handler (#9359)\n - refactor: migrate from `github.com/aquasecurity/jfather` to `github.com/go-json-experiment/json` (#8591)\n - refactor: migrate from go-json-experiment to encoding/json/v2 (#9422)\n - refactor: move the aws config (#9617)\n - refactor: remove aws flag helper message (#9080)\n - refactor: remove google/wire dependency and implement manual DI (#9509)\n - refactor: remove support for custom Terraform checks (#7901)\n - refactor: rename scanner to service (#8584)\n - refactor: simplify Detect function signature (#9280)\n - refactor: switch to stable azcontainerregistry SDK package (#9319)\n - refactor: use slices package instead of custom function (#8172)\n - refactor: use strings.SplitSeq instead of strings.Split in for-loop (#8983)\n - refactor: use trivy-checks/pkg/specs package (#8226)\n - release: v0.56.2 [release/v0.56] (#7694)\n - release: v0.57.0 [main] (#7710)\n - release: v0.57.1 [release/v0.57] (#7943)\n - release: v0.58.0 [main] (#7874)\n - release: v0.58.1 [release/v0.58] (#8120)\n - release: v0.58.2 [release/v0.58] (#8216)\n - release: v0.59.0 [main] (#8041)\n - release: v0.59.1 [release/v0.59] (#8334)\n - release: v0.60.0 [main] (#8327)\n - release: v0.61.0 [main] (#8507)\n - release: v0.61.1 [release/v0.61] (#8704)\n - release: v0.62.0 [main] (#8669)\n - release: v0.62.1 [release/v0.62] (#8825)\n - release: v0.63.0 [main] (#8809)\n - release: v0.64.0 [main] (#8955)\n - release: v0.64.1 [release/v0.64] (#9122)\n - release: v0.65.0 [main] (#9108)\n - release: v0.66.0 [main] (#9289)\n - release: v0.67.0 [main] (#9432)\n - release: v0.67.1 [release/v0.67] (#9614)\n - release: v0.67.2 [release/v0.67] (#9639)\n - release: v0.68.0 [main] (#9549)\n - release: v0.68.1 [main] (#9867)\n - release: v0.68.2 [release/v0.68] (#9950)\n - style: Fix MD syntax in self-hosting.md (#8523)\n - test(go): refactor mod_test.go to use txtar format (#9775)\n - test(go): set `GOPATH` for tests (#9785)\n - test(helm): bump up Yamale dependency for Helm chart-testing-action (#9653)\n - test(k8s): update k8s integrtion test (#9725)\n - test(k8s): use a specific bundle for k8s misconfig scan (#9633)\n - test(misconf): drop gcp iam test covered by another case (#9285)\n - test(misconf): move terraform scan tests to integration tests (#9271)\n - test(misconf): remove BenchmarkCalculate using outdated check metadata (#9291)\n - test(server): replace mock driver with memory cache in server tests (#8416)\n - test: add HTTP basic authentication to git test server (#9407)\n - test: add end-to-end testing framework with image scan and proxy tests (#9231)\n - test: change branch in spdx schema link to check in integration tests (#7935)\n - test: change branch in spdx schema link to check in integration tests [backport: release/v0.57] (#7940)\n - test: define constants for test images (#7739)\n - test: improve and extend tests for iac/adapters/arm (#9028)\n - test: improve golden file management in integration tests (#9699)\n - test: include integration tests in linting and fix all issues (#9060)\n - test: replace Go checks with Rego (#7867)\n - test: replace mock with memory cache and fix non-deterministic tests (#8410)\n - test: replace mock with memory cache in scanner tests (#8413)\n - test: save `containerd` image into archive and use in tests (#7816)\n - test: set dummy value for NUGET_PACKAGES (#8107)\n - test: update golden files for TestRepository* integration tests (#9684)\n - test: use `aquasecurity` repository for test images (#8677)\n - test: use `aquasecurity` repository for test images [backport: release/v0.61] (#8698)\n - test: use forked images (#7755)\n - test: use memory cache (#8403)\n - test: use table-driven tests in Helm scanner tests (#8592)\n","status":"published","published":"2026-02-13T16:33:52Z","modified":"2026-05-29T18:24:10.235720339Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20902-1","title":"Security update for keybase-client","description":"This update for keybase-client fixes the following issues:\n\nChanges in keybase-client:\n\n- golang.org/x/crypto/ssh: Fixed multiple issues:\n  CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829, CVE-2026-39831,\n  CVE-2026-42508, CVE-2026-39833, CVE-2026-39830, CVE-2026-39832, CVE-2026-46597,\n  CVE-2026-46598, CVE-2026-46595, CVE-2026-39835 (boo#1266158)\n- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels\n  allows for validation bypass and privilege escalation (boo#1266596).\n\n- Update to version 6.6.2\n  * Improve git default branch handling\n\n- CVE-2026-33809: golang.org/x/image/tiff: excessive resource consumption due to\n  large allocation attempt when decoding maliciously crafted TIFF file (bsc#1260696)\n- Switch to go1.25 as required by update go image library.\n\n- Update to version 6.6.0\n  * Various bug fixes and performance improvements\n\n- CVE-2026-26958: filippo.io/edwards25519: failure to initialize receiver in MultiScalarMult\n  can produce invalid results and lead to undefined behavior (bsc#1258591).\n- CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic\n  due to an out of bounds read (bsc#1254023).\n- CVE-2025-58181: keybase-client: golang.org/x/crypto/ssh: invalidated number of mechanisms\n  can cause unbounded memory consumption (bsc#1253864).\n- CVE-2025-47913: keybase-client: golang.org/x/crypto/ssh/agent: client process termination\n  when receiving an unexpected message type in response to a key listing or signing request (bsc#1253563).\n\n- Update to version 6.5.1\n  * Fix team deletion not working\n  * Chat attachments improvements\n  * Miscellaneous bugfixes\n","status":"published","published":"2026-06-03T17:44:01Z","modified":"2026-06-06T18:24:23.494336976Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21244-1","title":"Security update for podman","description":"This update for podman fixes the following issues\n\n- CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing\n  encrypted key can lead to a denial of service (bsc#1262856).\n- CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh (bsc#1266125).\n- CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266125).\n- CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh (bsc#1266125).\n- CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh\n  (bsc#1266125).\n- CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh\n  (bsc#1266125).\n- CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent\n  (bsc#1266125).\n- CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266125).\n- CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266125).\n- CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh (bsc#1266125).\n- CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts\n  (bsc#1266125).\n- CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh\n  (bsc#1266125).\n- CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh (bsc#1266125).\n- CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent (bsc#1266125).\n","status":"published","published":"2026-07-06T15:38:19Z","modified":"2026-07-09T10:00:10.964372498Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21483-1","title":"Security update for govulncheck-vulndb","description":"This update for govulncheck-vulndb fixes the following issues:\n\n- Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z (jsc#PED-11136).\n\n Go CVE Numbering Authority IDs added or updated with aliases:\n * GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj\n * GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c\n * GO-2026-5102 CVE-2026-45021 GHSA-3vcp-chfh-f6r2\n * GO-2026-5272 CVE-2026-40938 GHSA-94jr-7pqp-xhcq\n * GO-2026-5486 CVE-2026-40924 GHSA-m2cx-gpqf-qf74\n * GO-2026-5542 CVE-2026-40090 GHSA-pj97-4p9w-gx3q\n * GO-2026-5630 CVE-2026-25542 GHSA-rmx9-2pp3-xhcr\n * GO-2026-5643 CVE-2026-40923 GHSA-rx35-6rhx-7858\n * GO-2026-5675 CVE-2026-41492 GHSA-vvf7-6rmr-m29q\n * GO-2026-5711 CVE-2026-40161 GHSA-wjxp-xrpv-xpff\n * GO-2026-5746 CVE-2026-41567 GHSA-x86f-5xw2-fm2r\n * GO-2026-5749 CVE-2026-41328 GHSA-x92x-px7w-4gx4\n * GO-2026-5837 CVE-2026-44840 GHSA-q2m9-6jp9-c6mc\n * GO-2026-5929 CVE-2026-44342 GHSA-26v7-h57m-gh9m\n * GO-2026-5930 CVE-2026-33655 GHSA-6qcr-qxgr-m7fv\n * GO-2026-5933 GHSA-3g4q-2f67-2gvh\n * GO-2026-5934 GHSA-59qp-cfj3-rp64\n * GO-2026-5935 GHSA-7856-g3gv-9wq8\n * GO-2026-5936 CVE-2026-53552 GHSA-26rh-24rg-j3vv\n * GO-2026-5937 CVE-2026-53508 GHSA-2jcc-mxv7-p3f9\n * GO-2026-5938 CVE-2026-53553 GHSA-4g5x-hcwm-82jw\n * GO-2026-5939 CVE-2026-10517 GHSA-698x-9w2p-7vvp\n * GO-2026-5940 CVE-2026-53572 GHSA-6w3m-4hhp-775q\n * GO-2026-5941 CVE-2026-53487 GHSA-gvhc-wv3v-7pf8\n * GO-2026-5942 CVE-2026-46600\n * GO-2026-5944 CVE-2026-50197 GHSA-659f-rgp5-w4wf\n * GO-2026-5945 CVE-2026-6815 GHSA-rmxx-v9rj-vpvg\n * GO-2026-5946 CVE-2026-52831 GHSA-v5px-423j-pf7p\n * GO-2026-5947 CVE-2026-53649 GHSA-xqhv-chqm-fhcc\n * GO-2026-5948 CVE-2026-50554 GHSA-588f-fvcv-xhvf\n * GO-2026-5949 CVE-2026-50553 GHSA-rqrh-8wpv-x7hh\n * GO-2026-5950 CVE-2026-53602 GHSA-339v-266x-79xr\n * GO-2026-5951 CVE-2026-10219 GHSA-6jm8-4fhr-5w64\n * GO-2026-5952 CVE-2026-49834 GHSA-9vcr-p3rj-q5q6\n * GO-2026-5953 CVE-2026-9094 GHSA-c9w5-qp6m-m395\n * GO-2026-5956 CVE-2026-55252 GHSA-h5g6-xmh4-hc37\n * GO-2026-5957 CVE-2026-54158 GHSA-5xfx-xj4h-5p7r\n * GO-2026-5958 CVE-2026-54068 GHSA-gcm7-57gf-953c\n * GO-2026-5959 CVE-2026-54072 GHSA-h29v-hj44-q8cv\n * GO-2026-5961 CVE-2026-54069 GHSA-hvr9-72v2-fff3\n * GO-2026-5962 CVE-2026-54088 GHSA-m93h-4hw7-5qcm\n * GO-2026-5963 CVE-2026-54067 GHSA-mvjr-vv3c-w4qv\n * GO-2026-5964 CVE-2026-54066 GHSA-p4m3-mgmm-c664\n * GO-2026-5965 CVE-2026-54070 GHSA-w7cg-whh7-xp28\n * GO-2026-5966 CVE-2026-54089 GHSA-xqp3-jq6g-x3qm\n * GO-2026-5967 CVE-2026-50551 GHSA-56mp-4f3v-fgj2\n * GO-2026-5968 CVE-2026-54174 GHSA-fpg8-7664-jc5q\n * GO-2026-5969 GHSA-g936-7jqj-mwv8\n * GO-2026-5970 CVE-2026-56852\n * GO-2026-5973 CVE-2026-54250 GHSA-jxr7-mqhw-9p98\n * GO-2026-5974 CVE-2026-44300 GHSA-wmj8-9953-vff5\n * GO-2026-5975 CVE-2026-50018 GHSA-42j2-w334-qxw7\n * GO-2026-5976 CVE-2026-50141 GHSA-g7mm-9vx7-jm7h\n * GO-2026-5977 CVE-2026-50013 GHSA-qrh4-p6v4-mrfg\n * GO-2026-5978 CVE-2026-50125 GHSA-qw5r-ppcg-f8rj\n * GO-2026-5979 CVE-2026-50006 GHSA-xrcf-6jh3-ggvx\n * GO-2026-5980 CVE-2026-50158 GHSA-2c7f-fxww-6w6c\n * GO-2026-5981 GHSA-mqxv-9rm6-w8qc\n * GO-2026-5982 GHSA-pqg7-v6wh-3pfp\n * GO-2026-5984 CVE-2026-53604 GHSA-2p2f-px33-4vv5\n * GO-2026-5985 GHSA-7rx3-5wx3-5v76\n * GO-2026-5986 CVE-2026-61699 GHSA-cm26-5974-52h8\n * GO-2026-5987 CVE-2026-55513 GHSA-g4x6-jcvr-9m3g\n * GO-2026-5988 CVE-2026-54628 GHSA-hwrq-8wxh-q4xv\n * GO-2026-5989 CVE-2026-55512 GHSA-m3cx-mwpg-32jg\n * GO-2026-5990 CVE-2026-54629 GHSA-mf78-3rpf-r784\n * GO-2026-5991 CVE-2026-53603 GHSA-q4vm-pq3q-8wgq\n * GO-2026-5992 CVE-2026-61549 GHSA-qf34-295c-26v8\n * GO-2026-5996 CVE-2026-54450 GHSA-pph6-vfjv-vpjw\n * GO-2026-5997 CVE-2026-54452 GHSA-xgch-x3mx-cm3c\n * GO-2026-5998 CVE-2026-54495 GHSA-398h-7f66-3h4p\n * GO-2026-5999 CVE-2026-10814 GHSA-jh6h-v6mp-h22v\n * GO-2026-6002 CVE-2026-58196 GHSA-pr64-jmmf-jp54\n * GO-2026-6003 CVE-2026-53714 GHSA-22xc-xg2r-9j7v\n * GO-2026-6004 CVE-2026-52833 GHSA-3v79-m2cg-89ww\n * GO-2026-6005 CVE-2026-53715 GHSA-8fv2-88gg-hm7q\n * GO-2026-6006 CVE-2026-53716 GHSA-cxpq-8v7q-cg56\n * GO-2026-6007 CVE-2026-53718 GHSA-fcrp-7gc2-93g7\n * GO-2026-6008 CVE-2026-53717 GHSA-h7pq-86h8-rp5x\n * GO-2026-6009 CVE-2026-53719 GHSA-m2v6-2jmh-4c68\n * GO-2026-6010 CVE-2026-50166 GHSA-v95x-xhq5-4929\n * GO-2026-6011 CVE-2026-53713 GHSA-wcrf-9vrr-854f\n * GO-2026-6012 CVE-2026-52832 GHSA-wpcj-rmv4-86qg\n * GO-2026-6013 CVE-2026-52724 GHSA-wvmp-6r4v-j6cv\n * GO-2026-6014 CVE-2025-7453 GHSA-2hfh-94w5-wxvf\n * GO-2026-6015 CVE-2026-54247 GHSA-cwxq-rc9x-2jvv\n * GO-2026-6016 GHSA-rjwr-m7qx-3fjr\n * GO-2026-6017 CVE-2026-27771 GHSA-8qw8-rq86-9pc2\n * GO-2026-6018 CVE-2026-54246 GHSA-5587-2x54-jj6h\n * GO-2026-6019 GHSA-8qqm-fp2q-v734\n * GO-2026-6020 CVE-2026-55668 GHSA-8wc8-hf36-mjh9\n * GO-2026-6021 CVE-2026-55667 GHSA-fmm7-x4gx-8jhr\n * GO-2026-6022 CVE-2026-54560 GHSA-vgj4-345g-jcf8\n * GO-2026-6023 CVE-2026-54562 GHSA-x756-g4x3-c64m\n * GO-2026-6024 CVE-2026-62685 GHSA-7rc3-g7h6-22m7\n * GO-2026-6025 CVE-2026-62684 GHSA-833g-cqhp-h72j\n * GO-2026-6026 CVE-2026-62843 GHSA-83xp-526h-j3ww\n * GO-2026-6027 CVE-2026-57894 GHSA-82f7-87hm-852x\n * GO-2026-6028 CVE-2026-58428 GHSA-25gq-j9jx-43pg\n * GO-2026-6029 CVE-2026-28740 GHSA-2m9v-5q2g-58vq\n * GO-2026-6030 CVE-2026-22874 GHSA-2r5c-gw76-rh3w\n * GO-2026-6031 CVE-2026-27761 GHSA-3pww-vcvm-3gmj\n * GO-2026-6032 CVE-2026-58420 GHSA-5ggr-2f2h-jmvm\n * GO-2026-6033 CVE-2026-58440 GHSA-66m4-5jjr-2rg5\n * GO-2026-6034 CVE-2026-56654 GHSA-683j-3ff6-hh2x\n * GO-2026-6035 CVE-2026-57886 GHSA-6c6r-5xr4-cr5m\n * GO-2026-6036 CVE-2026-50105 GHSA-6cqf-375w-639g\n * GO-2026-6037 CVE-2026-56755 GHSA-6hm7-3pwj-22rm\n * GO-2026-6038 CVE-2026-58314 GHSA-2fcr-jfvc-vgg2\n * GO-2026-6039 CVE-2026-59765 GHSA-2wm4-vwp6-v7xc\n * GO-2026-6040 CVE-2026-58511 GHSA-3r5c-2xxx-h872\n * GO-2026-6041 CVE-2026-58419 GHSA-44qc-pgvp-wx7v\n * GO-2026-6042 CVE-2026-56657 GHSA-4xjf-493q-98p3\n * GO-2026-6043 CVE-2026-27775 GHSA-649p-mmhf-85c7\n * GO-2026-6044 CVE-2026-58424 GHSA-777r-4v59-6486\n * GO-2026-6045 CVE-2026-56443 GHSA-7p4h-3gxq-x3h3\n * GO-2026-6046 CVE-2026-58423 GHSA-7wvc-rvp7-w99x\n * GO-2026-6047 CVE-2026-58437 GHSA-8p9h-49rc-qgxj\n * GO-2026-6048 CVE-2026-54481 GHSA-94v3-77j7-vm48\n * GO-2026-6049 CVE-2026-59763 GHSA-9mq6-mqjj-c2c5\n * GO-2026-6050 CVE-2026-58444 GHSA-cp3q-vrj2-ghhh\n * GO-2026-6051 CVE-2026-20896 GHSA-f75j-4cw6-rmx4\n * GO-2026-6052 CVE-2026-58416 GHSA-fj8v-hjwv-qm88\n * GO-2026-6053 CVE-2026-58429 GHSA-fq2p-5p22-8g6j\n * GO-2026-6054 CVE-2026-57897 GHSA-frpw-3h2q-4jj6\n * GO-2026-6055 CVE-2026-58436 GHSA-fw57-jgch-pgf3\n * GO-2026-6056 CVE-2026-58422 GHSA-g9g6-qhrc-p3qc\n * GO-2026-6057 CVE-2026-20779 GHSA-gx3v-q759-g323\n- Update to version 0.0.20260708T170500 2026-07-08T17:05:00Z.\n * GO-2026-4970 CVE-2026-39822\n * GO-2026-5856 CVE-2026-42505\n * GO-2026-5932\n- Update to version 0.0.20260707T200351 2026-07-07T20:03:51Z.\n * GO-2026-5073 CVE-2026-35480 GHSA-378j-3jfj-8r9f\n * GO-2026-5313 CVE-2026-50133 GHSA-c54g-xjwj-8g82\n * GO-2026-5320 CVE-2026-5160 GHSA-c97m-vxhj-p7j6\n * GO-2026-5380 CVE-2026-50135 GHSA-fw87-fv5r-9fpw\n * GO-2026-5410 GHSA-gxhx-2686-5h9g\n * GO-2026-5427 CVE-2026-7736 GHSA-hj4w-qr9j-c4cf\n * GO-2026-5496 CVE-2026-45570 GHSA-m7cr-m3pv-hgrp\n * GO-2026-5498 CVE-2026-44885 GHSA-m8fg-67j7-cx4v\n * GO-2026-5504 CVE-2026-35166 GHSA-mcv8-8m8x-48pg\n * GO-2026-5570 CVE-2025-66719 GHSA-q7c8-gfjh-8v4p\n * GO-2026-5665 CVE-2026-7734 GHSA-vm3g-8xwv-mxfp\n * GO-2026-5676 CVE-2026-40898 GHSA-vvgj-x9jq-8cj9\n * GO-2026-5681 CVE-2026-50134 GHSA-vxgm-5rmg-5w8g\n * GO-2026-5699 CVE-2026-7737 GHSA-w88c-9vg8-cmq8\n * GO-2026-5713 CVE-2026-37461 GHSA-wmvj-f67g-qg4g\n * GO-2026-5743 CVE-2026-45692 GHSA-x5w9-xh9r-mvfc\n * GO-2026-5761 CVE-2026-41579 GHSA-xjvp-4fhw-gc47\n * GO-2026-5762 CVE-2026-41589 GHSA-xjvp-7243-rg9h\n * GO-2026-5764 GHSA-xmrv-pmrh-hhx2\n * GO-2026-5778 CVE-2026-48702 GHSA-47q9-m4ww-924m\n * GO-2026-5779 CVE-2026-48529 GHSA-pjp5-fpmr-3349\n * GO-2026-5798 CVE-2026-48749 GHSA-2q3f-q5pq-g8wv\n * GO-2026-5799 CVE-2026-48751 GHSA-48q5-w887-33wv\n * GO-2026-5800 CVE-2026-48754 GHSA-4xg6-52mh-fpw8\n * GO-2026-5801 CVE-2026-48750 GHSA-73hr-m85f-64v9\n * GO-2026-5802 CVE-2026-48753 GHSA-ccjc-4qc3-jxqc\n * GO-2026-5803 CVE-2026-48752 GHSA-vxp5-584q-c479\n * GO-2026-5804 CVE-2026-48788 GHSA-4c8j-mgm4-qqvp\n * GO-2026-5805 CVE-2026-48785 GHSA-cr2j-534f-mf3g\n * GO-2026-5806 CVE-2026-48769 GHSA-f6m5-xw2g-xc4x\n * GO-2026-5807 GHSA-qh5x-rfwf-rvfv\n * GO-2026-5808 CVE-2026-48755 GHSA-v6mj-8pf4-hhw4\n * GO-2026-5809 GHSA-vgrc-hq28-p3xp\n * GO-2026-5810 CVE-2026-48756 GHSA-xhqx-mgh3-3h7q\n * GO-2026-5811 CVE-2026-48790 GHSA-57f6-pvx8-hwj6\n * GO-2026-5812 CVE-2026-41262 GHSA-gm7f-v959-fr2g\n * GO-2026-5813 GHSA-jqc5-2p7q-fqfc\n * GO-2026-5814 GHSA-rhq6-9rgh-v45c\n * GO-2026-5815 GHSA-v2jf-442r-6mjh\n * GO-2026-5816 CVE-2026-49258 GHSA-c6v2-3ffm-vcmc\n * GO-2026-5817 CVE-2026-3473 GHSA-7pf2-9c95-w332\n * GO-2026-5818 CVE-2026-3636 GHSA-ffpr-pfr4-g354\n * GO-2026-5819 CVE-2026-48794 GHSA-j748-h363-wqj8\n * GO-2026-5820 CVE-2026-4635 GHSA-pg7c-462j-grxv\n * GO-2026-5821 GHSA-q6xx-5vr8-p898\n * GO-2026-5822 CVE-2026-49349 GHSA-qvqc-4c52-x6qp\n * GO-2026-5823 GHSA-wcr3-9x4c-f5gj\n * GO-2026-5824 CVE-2026-53520 GHSA-x6fg-52vr-hj4w\n * GO-2026-5825 CVE-2026-49339 GHSA-2fp4-5v5c-4448\n * GO-2026-5826 CVE-2026-53521 GHSA-39g2-8x68-pmx8\n * GO-2026-5827 CVE-2026-49340 GHSA-4gxv-p5g5-j7w7\n * GO-2026-5828 CVE-2026-53519 GHSA-5c25-7vpj-9mqh\n * GO-2026-5829 CVE-2026-53523 GHSA-9rc6-8cjv-rcvx\n * GO-2026-5830 CVE-2026-49338 GHSA-hmgp-w9jm-vp95\n * GO-2026-5831 CVE-2026-53522 GHSA-jg62-j5h6-8mpq\n * GO-2026-5832 GHSA-ww5p-j6cj-6mqq\n * GO-2026-5833 CVE-2026-4646 GHSA-rmvv-8v8w-rf7x\n * GO-2026-5835 CVE-2026-5755 GHSA-37j2-3vv8-cf24\n * GO-2026-5836 CVE-2026-5308 GHSA-jmvr-r5hm-fxfr\n * GO-2026-5838 CVE-2026-5740 GHSA-w9m8-p4cc-4qj9\n * GO-2026-5839 CVE-2026-28735 GHSA-r5vf-grcx-5vqp\n * GO-2026-5842 CVE-2026-9300 GHSA-6p7m-c3mw-4gmw\n * GO-2026-5843 CVE-2026-9299 GHSA-m9r6-r5c3-jw4j\n * GO-2026-5844 CVE-2026-9301 GHSA-qm7q-rcm2-3frc\n * GO-2026-5845 CVE-2026-4915 GHSA-5gmf-x7hg-97wf\n * GO-2026-5846 CVE-2026-49823 GHSA-3r8v-2xmj-5c39\n * GO-2026-5847 GHSA-55f6-4pr5-c7m5\n * GO-2026-5848 CVE-2026-7374 GHSA-7jcp-v9w4-wjmg\n * GO-2026-5849 GHSA-7m8x-qg2j-4m3v\n * GO-2026-5850 CVE-2026-50565 GHSA-8wcj-mfrc-jx5q\n * GO-2026-5851 CVE-2026-49835 GHSA-9c54-x2g4-v92j\n * GO-2026-5852 CVE-2026-49824 GHSA-cvw6-gfvv-953q\n * GO-2026-5853 CVE-2026-49478 GHSA-f5mr-q85p-6hh6\n * GO-2026-5854 CVE-2026-49822 GHSA-gc3j-79f2-7vvw\n * GO-2026-5855 CVE-2026-50564 GHSA-gx55-f84r-v3r7\n * GO-2026-5857 CVE-2026-50566 GHSA-m63v-2g9w-2w6v\n * GO-2026-5858 CVE-2026-50563 GHSA-v455-mv2v-5g92\n * GO-2026-5859 CVE-2026-49821 GHSA-vjhc-cf4p-72q4\n * GO-2026-5860 CVE-2026-50545 GHSA-wmgg-3p4h-48x7\n * GO-2026-5861 CVE-2026-49820 GHSA-x7qq-m748-8p2c\n * GO-2026-5864 GHSA-3ccm-4qq2-5wrp\n * GO-2026-5865 GHSA-6c87-g9pw-78fx\n * GO-2026-5866 CVE-2026-49826 GHSA-8w27-c4vc-88q9\n * GO-2026-5867 CVE-2026-36045 GHSA-cv2p-68f4-f4pw\n * GO-2026-5868 CVE-2026-48824 GHSA-28pq-6qxg-wg5r\n * GO-2026-5869 CVE-2026-41053 GHSA-4j6x-2764-m8gh\n * GO-2026-5870 CVE-2026-9739 GHSA-7pf3-8xx7-rvhf\n * GO-2026-5871 CVE-2026-44938 GHSA-864g-863m-vcvq\n * GO-2026-5872 CVE-2026-49998 GHSA-g6vg-wj8f-48cj\n * GO-2026-5873 CVE-2026-44936 GHSA-hx4v-cxpf-vh8m\n * GO-2026-5874 CVE-2026-44937 GHSA-jmf4-m7j9-g72r\n * GO-2026-5875 CVE-2026-44939 GHSA-mhc6-2gfq-xx62\n * GO-2026-5876 CVE-2026-41052 GHSA-vx8h-4prv-g744\n * GO-2026-5877 CVE-2026-44935 GHSA-xr65-5cpm-g36x\n * GO-2026-5878 CVE-2026-50138 GHSA-3whc-qvhv-xqjp\n * GO-2026-5881 CVE-2026-50139 GHSA-j48m-h7xq-2xpj\n * GO-2026-5883 CVE-2026-9804 GHSA-mpmf-3w4r-qfpf\n * GO-2026-5888 CVE-2026-41184 GHSA-9p7w-w5q6-mxj3\n * GO-2026-5889 CVE-2026-50149 GHSA-g3xr-5w5j-w4q4\n * GO-2026-5890 CVE-2026-50192 GHSA-h5gx-45rj-2h5j\n * GO-2026-5891 CVE-2026-41185 GHSA-m67g-87rx-v42c\n * GO-2026-5892 CVE-2026-9097 GHSA-339w-3hqm-9pjc\n * GO-2026-5893 CVE-2026-6720 GHSA-3m4q-ggcj-j6m4\n * GO-2026-5894 CVE-2026-9093 GHSA-3w4h-g9f5-j84p\n * GO-2026-5895 CVE-2026-9090 GHSA-fwgq-j9r9-qjgr\n * GO-2026-5896 CVE-2026-9091 GHSA-gv4m-v8c8-hr3g\n * GO-2026-5897 CVE-2026-44454 GHSA-m3cr-vc2j-pm27\n * GO-2026-5898 CVE-2026-9098 GHSA-mfvp-7p3v-x9mh\n * GO-2026-5899 CVE-2026-9096 GHSA-rgq2-93gj-ffxg\n * GO-2026-5900 CVE-2026-49245 GHSA-3vcg-pv95-pq54\n * GO-2026-5901 CVE-2026-49254 GHSA-4q9j-6299-gxmr\n * GO-2026-5902 CVE-2026-49244 GHSA-h64p-8h4r-6gfh\n * GO-2026-5903 CVE-2026-52792 GHSA-mm6c-5j6x-hq8m\n * GO-2026-5905 CVE-2026-49445 GHSA-3fcv-jvfp-m4q9\n * GO-2026-5906 CVE-2026-55077 GHSA-29xf-69gq-m9jx\n * GO-2026-5907 CVE-2026-55076 GHSA-75vm-6w67-gwvp\n * GO-2026-5908 CVE-2026-55075 GHSA-9r87-mvcw-x35f\n * GO-2026-5909 CVE-2026-55429 GHSA-9rjw-3gwp-f59v\n * GO-2026-5910 CVE-2026-54637 GHSA-chwm-m7g7-685g\n * GO-2026-5911 CVE-2026-55079 GHSA-f962-qm93-mj4c\n * GO-2026-5913 CVE-2026-55427 GHSA-mcqq-fqgf-rxwm\n * GO-2026-5914 CVE-2026-53935 GHSA-q6h5-q3q6-f87x\n * GO-2026-5915 CVE-2026-55428 GHSA-wrq8-fcv5-8hvp\n * GO-2026-5916 CVE-2026-55078 GHSA-2mg2-p7r7-g27f\n * GO-2026-5917 CVE-2026-55430 GHSA-5g4w-3vw9-478w\n * GO-2026-5918 CVE-2026-55438 GHSA-5wg6-jmq2-53pw\n * GO-2026-5919 CVE-2026-55437 GHSA-7qw2-f75v-62f7\n * GO-2026-5920 CVE-2026-55436 GHSA-84rm-42xw-mx52\n * GO-2026-5921 CVE-2026-55434 GHSA-f5vp-w269-392g\n * GO-2026-5922 CVE-2026-55433 GHSA-jqj2-x4c5-jfxm\n * GO-2026-5923 GHSA-qrwj-vh9x-gw5v\n * GO-2026-5924 CVE-2026-55431 GHSA-v54h-cp2w-9x4g\n * GO-2026-5925 CVE-2026-55435 GHSA-wqxv-w64v-5wh6\n * GO-2026-5926 CVE-2026-55432 GHSA-x9qq-2qh5-8rxf\n- Update to version 0.0.20260626T200413 2026-06-26T20:04:13Z.\n * GO-2026-5066 CVE-2026-46604\n- Update to version 0.0.20260625T223441 2026-06-25T22:34:41Z.\n * GO-2026-4961 CVE-2026-33813\n * GO-2026-5003 CVE-2026-8275 GHSA-322p-rrj6-j44g\n * GO-2026-5004 CVE-2026-41889 GHSA-j88v-2chj-qfwx\n * GO-2026-5052 GHSA-mpwr-8vm7-h73f\n * GO-2026-5058 CVE-2026-4660 GHSA-92mm-2pjq-r785\n * GO-2026-5059 CVE-2026-55671 GHSA-29jh-8cfq-rr8x\n * GO-2026-5060 CVE-2026-55229 GHSA-2mrg-35hw-x3x9\n * GO-2026-5061 CVE-2026-46601\n * GO-2026-5062 CVE-2026-46602\n * GO-2026-5063 GHSA-2h46-9x5w-4wf7\n * GO-2026-5064 CVE-2026-53492 GHSA-33vj-92qq-66hc\n * GO-2026-5065 CVE-2026-52808 GHSA-268j-37xf-pp52\n * GO-2026-5067 CVE-2026-3108 GHSA-3439-vqgj-2gcf\n * GO-2026-5068 CVE-2026-25996 GHSA-34r5-6j7w-235f\n * GO-2026-5070 CVE-2026-45088 GHSA-35wr-x7v6-9fv2\n * GO-2026-5071 CVE-2026-44593 GHSA-3636-h3vx-6465\n * GO-2026-5072 CVE-2026-42296 GHSA-3775-99mw-8rp4\n * GO-2026-5076 CVE-2026-6959 GHSA-3934-423w-4jq3\n * GO-2026-5077 CVE-2026-45047 GHSA-39qr-rc93-vhqm\n * GO-2026-5078 CVE-2026-7573 GHSA-3c93-g9g6-p5j4\n * GO-2026-5079 CVE-2026-45224 GHSA-3cjv-h753-qf7h\n * GO-2026-5080 CVE-2026-42593 GHSA-3cv5-q585-h563\n * GO-2026-5081 CVE-2026-27783 GHSA-3fwp-p5rj-2pxf\n * GO-2026-5082 CVE-2026-46614 GHSA-3g33-6vg6-27m8\n * GO-2026-5083 CVE-2026-54761 GHSA-3g6v-2r68-prfc\n * GO-2026-5084 CVE-2026-45062 GHSA-3g8v-8r37-cgjm\n * GO-2026-5085 CVE-2026-41572 GHSA-3gr9-485j-v4xf\n * GO-2026-5086 CVE-2026-46415 GHSA-3h23-rrpc-3p87\n * GO-2026-5087 CVE-2026-8349 GHSA-3h63-fx68-x5fm\n * GO-2026-5088 CVE-2026-39429 GHSA-3j3q-wp9x-585p\n * GO-2026-5089 CVE-2026-46410 GHSA-3jmg-p96m-m328\n * GO-2026-5090 CVE-2026-40304 GHSA-3jpj-v3xr-5h6g\n * GO-2026-5091 GHSA-3m6q-h5gj-7mrw\n * GO-2026-5092 CVE-2026-3112 GHSA-3mw5-466q-295q\n * GO-2026-5093 CVE-2026-44326 GHSA-3p28-73q7-45xp\n * GO-2026-5094 CVE-2026-33540 GHSA-3p65-76g6-3w7r\n * GO-2026-5095 CVE-2026-27877 GHSA-3q27-7qjq-p9c5\n * GO-2026-5096 CVE-2026-54096 GHSA-3q2p-72cj-682c\n * GO-2026-5097 CVE-2026-42274 GHSA-3q34-rx83-r6mq\n * GO-2026-5098 CVE-2025-64719 GHSA-3qq3-668m-v9mj\n * GO-2026-5099 CVE-2026-42880 GHSA-3v3m-wc6v-x4x3\n * GO-2026-5100 GHSA-3v85-fqvh-7rxf\n * GO-2026-5101 CVE-2026-45298 GHSA-3v9w-6365-9w54\n * GO-2026-5103 CVE-2026-52816 GHSA-3w28-36p9-w929\n * GO-2026-5104 CVE-2026-8780 GHSA-3x4g-259h-5p7c\n * GO-2026-5106 CVE-2026-44477 GHSA-423p-g724-fr39\n * GO-2026-5107 CVE-2026-45686 GHSA-43g7-cwr8-q3jh\n * GO-2026-5108 CVE-2026-42272 GHSA-43jv-5j4x-qv67\n * GO-2026-5109 CVE-2026-44321 GHSA-44qj-cghf-9p97\n * GO-2026-5110 CVE-2026-52804 GHSA-4565-r4x7-hg8j\n * GO-2026-5111 CVE-2026-35600 GHSA-45q4-x4r9-8fqj\n * GO-2026-5112 CVE-2026-3113 GHSA-4765-v66x-rqx7\n * GO-2026-5113 CVE-2026-44425 GHSA-47r2-v3x6-wff9\n * GO-2026-5114 CVE-2026-35598 GHSA-48ch-p4gq-x46x\n * GO-2026-5115 CVE-2026-21726 GHSA-497x-rrr9-68jp\n * GO-2026-5117 CVE-2026-47190 GHSA-49pm-43hf-6xfq\n * GO-2026-5118 CVE-2026-40302 GHSA-4fxq-2x3x-6xqx\n * GO-2026-5120 CVE-2026-8621 GHSA-4g9m-rffv-h6wq\n * GO-2026-5121 GHSA-4gph-2hhr-5mwg\n * GO-2026-5123 GHSA-4h9q-p5j4-xvvh\n * GO-2026-5124 CVE-2026-52796 GHSA-4j89-2c4f-44c6\n * GO-2026-5125 GHSA-4jgr-pg2m-m988\n * GO-2026-5126 CVE-2026-47256 GHSA-4jvg-4jfx-fmhc\n * GO-2026-5127 CVE-2026-40251 GHSA-4m88-wxj4-9qj6\n * GO-2026-5128 CVE-2026-54762 GHSA-4mr2-fg2p-w63c\n * GO-2026-5129 CVE-2026-42238 GHSA-4pvg-prr3-9cxr\n * GO-2026-5130 CVE-2026-8781 GHSA-4qf2-p32m-7hmf\n * GO-2026-5131 CVE-2026-44323 GHSA-4rqf-grm6-vf75\n * GO-2026-5132 CVE-2026-42596 GHSA-4vmc-gm8v-m35h\n * GO-2026-5133 CVE-2026-55866 GHSA-4vrg-r928-h5vv\n * GO-2026-5134 CVE-2026-42572 GHSA-55gc-6fmc-fpx9\n * GO-2026-5136 CVE-2026-41131 GHSA-57j5-qwp2-vqp6\n * GO-2026-5137 CVE-2026-40193 GHSA-5835-4gvc-32pc\n * GO-2026-5138 CVE-2026-42459 GHSA-585v-hcgf-jhfr\n * GO-2026-5139 CVE-2026-47724 GHSA-598g-h2vc-h5vg\n * GO-2026-5140 CVE-2026-52809 GHSA-5c3f-6486-3g7g\n * GO-2026-5141 CVE-2026-40077 GHSA-5f5r-95pg-xrpm\n * GO-2026-5142 CVE-2026-44315 GHSA-5f62-53r8-qrqf\n * GO-2026-5143 CVE-2026-44849 GHSA-5fxq-qcf3-244w\n * GO-2026-5144 CVE-2026-11719 GHSA-5gf6-gc35-xjpc\n * GO-2026-5145 CVE-2026-40943 GHSA-5gqc-qhrj-9xw8\n * GO-2026-5146 CVE-2026-40876 GHSA-5h6h-7rc9-3824\n * GO-2026-5147 CVE-2026-34457 GHSA-5hvv-m4w4-gf6v\n * GO-2026-5148 CVE-2026-40886 GHSA-5jv8-h7qh-rf5p\n * GO-2026-5149 CVE-2026-39858 GHSA-5m6w-wvh7-57vm\n * GO-2026-5150 CVE-2026-35605 GHSA-5q48-q4fm-g3m6\n * GO-2026-5151 CVE-2026-40280 GHSA-5q7p-7jgv-ww56\n * GO-2026-5153 CVE-2026-24661 GHSA-5rfv-h47g-xj42\n * GO-2026-5154 CVE-2026-25705 GHSA-5v3h-x4wf-5c35\n * GO-2026-5155 CVE-2026-39383 GHSA-5vh4-rgv7-p9g4\n * GO-2026-5156 CVE-2026-34529 GHSA-5vpr-4fgw-f69h\n * GO-2026-5157 CVE-2023-34620 GHSA-5wfc-hjrc-gq87\n * GO-2026-5159 CVE-2026-54097 GHSA-5ww9-jg6q-38r7\n * GO-2026-5160 CVE-2026-45720 GHSA-5x9f-6vg5-qg4m\n * GO-2026-5161 CVE-2025-2842 GHSA-5xf3-gmx4-529v\n * GO-2026-5162 CVE-2026-40893 GHSA-62p3-hvxx-fxg4\n * GO-2026-5163 CVE-2026-35051 GHSA-6384-m2mw-rf54\n * GO-2026-5164 CVE-2026-32936 GHSA-63cw-r7xf-jmwr\n * GO-2026-5165 GHSA-6447-269v-g68m\n * GO-2026-5166 CVE-2026-47671 GHSA-64cj-qvx5-m4f3\n * GO-2026-5167 CVE-2026-35606 GHSA-67cg-cpj7-qgc9\n * GO-2026-5168 CVE-2026-41648 GHSA-67wx-r9xr-x75x\n * GO-2026-5169 CVE-2026-45796 GHSA-686c-7vgv-v3fx\n * GO-2026-5170 CVE-2026-40293 GHSA-68m9-983m-f3v5\n * GO-2026-5171 CVE-2026-34449 GHSA-68p4-j234-43mv\n * GO-2026-5172 GHSA-69hx-63pv-f8f4\n * GO-2026-5173 CVE-2026-4055 GHSA-6cfr-wp44-6qmv\n * GO-2026-5174 CVE-2026-7572 GHSA-6cmp-qv2f-x97x\n * GO-2026-5175 CVE-2026-34227 GHSA-6fpf-248c-m7wm\n * GO-2026-5176 CVE-2026-41574 GHSA-6g38-8j4p-j3pr\n * GO-2026-5177 CVE-2026-34761 GHSA-6gm8-3g4h-w82m\n * GO-2026-5178 CVE-2026-47780 GHSA-6gxq-gpr8-xgjp\n * GO-2026-5179 CVE-2026-8782 GHSA-6h8r-h22r-jj64\n * GO-2026-5180 CVE-2026-40912 GHSA-6jwx-7vp4-9847\n * GO-2026-5181 CVE-2026-55883 GHSA-6m68-r693-78qx\n * GO-2026-5182 CVE-2026-55770 GHSA-6mwx-4547-5vc9\n * GO-2026-5183 CVE-2026-48089 GHSA-6p54-fw2f-q7gf\n * GO-2026-5184 CVE-2026-52812 GHSA-6p9m-q3jp-47h4\n * GO-2026-5185 CVE-2026-41888 GHSA-6pjf-3r9x-m592\n * GO-2026-5186 CVE-2026-35471 GHSA-6qcc-6q27-whp8\n * GO-2026-5187 CVE-2026-6987 GHSA-6r3x-h84w-fhxx\n * GO-2026-5188 CVE-2026-45147 GHSA-6r88-8v7q-q4p2\n * GO-2026-5189 CVE-2026-42083 GHSA-6rgm-gr97-x3j5\n * GO-2026-5190 CVE-2026-8783 GHSA-6v92-ph9p-hrpc\n * GO-2026-5191 GHSA-6vgg-xhvh-38ff\n * GO-2026-5192 CVE-2026-39946 GHSA-6vgr-cp5c-ffx3\n * GO-2026-5193 GHSA-6vxv-wg6j-5qwp\n * GO-2026-5194 CVE-2026-47268 GHSA-6x26-5727-rrm9\n * GO-2026-5195 CVE-2026-41263 GHSA-6x2q-h3cr-8j2h\n * GO-2026-5196 CVE-2026-46354 GHSA-6x44-w3xg-hqqf\n * GO-2026-5197 CVE-2026-55670 GHSA-6x8v-2fq5-2229\n * GO-2026-5199 CVE-2026-4525 GHSA-72gw-fmmr-c4r4\n * GO-2026-5200 CVE-2026-42273 GHSA-72h4-mxfc-jx37\n * GO-2026-5201 CVE-2026-34605 GHSA-73g7-86qr-jrg3\n * GO-2026-5202 CVE-2026-52815 GHSA-744x-3838-5r56\n * GO-2026-5203 CVE-2026-42275 GHSA-74m3-9qvm-rp9h\n * GO-2026-5204 GHSA-74m6-4hjp-7226\n * GO-2026-5205 CVE-2026-35607 GHSA-7526-j432-6ppp\n * GO-2026-5206 GHSA-763j-3p5v-jfc6\n * GO-2026-5207 CVE-2026-41050 GHSA-765j-qfrp-hm3j\n * GO-2026-5209 CVE-2026-42081 GHSA-77x9-rf64-92gv\n * GO-2026-5210 CVE-2026-34403 GHSA-78mf-482w-62qj\n * GO-2026-5211 CVE-2026-24905 GHSA-79qw-g77v-2vfh\n * GO-2026-5212 CVE-2026-44310 GHSA-7c37-gx6w-8vc5\n * GO-2026-5213 CVE-2026-39388 GHSA-7ccv-rp6m-rffr\n * GO-2026-5214 CVE-2026-44778 GHSA-7cfq-5mhv-jrp9\n * GO-2026-5215 GHSA-7cwm-fpfh-rrch\n * GO-2026-5216 CVE-2026-48708 GHSA-7fq5-7wr8-rjwj\n * GO-2026-5217 CVE-2026-44850 GHSA-7fw3-x4r2-g7wc\n * GO-2026-5218 CVE-2026-44543 GHSA-7fxv-8wr2-mfc4\n * GO-2026-5219 CVE-2026-21724 GHSA-7g92-g4vh-hp84\n * GO-2026-5220 CVE-2026-45625 GHSA-7h26-hg47-p9hx\n * GO-2026-5221 CVE-2026-40885 GHSA-7h3j-592v-jcrp\n * GO-2026-5222 GHSA-7hgr-xvrr-xpw3\n * GO-2026-5223 CVE-2026-47722 GHSA-7hp6-g3pq-3pc3\n * GO-2026-5224 CVE-2026-44503 GHSA-7j59-v9qr-6fq9\n * GO-2026-5225 CVE-2026-46405 GHSA-7j6w-vvw2-5f9c\n * GO-2026-5226 CVE-2026-40944 GHSA-7jrq-q4pq-rhm6\n * GO-2026-5227 CVE-2026-42220 GHSA-7jrr-xw9c-mj39\n * GO-2026-5228 CVE-2026-5774 GHSA-7m55-2hr4-pw78\n * GO-2026-5229 CVE-2026-40259 GHSA-7m5h-w69j-qggg\n * GO-2026-5230 CVE-2026-46618 GHSA-7pjr-qpvh-m339\n * GO-2026-5231 GHSA-7qjx-gp9h-65qj\n * GO-2026-5232 GHSA-7qx6-f23w-3w7f\n * GO-2026-5233 CVE-2026-44309 GHSA-7rmh-48mx-2vwc\n * GO-2026-5234 CVE-2026-42590 GHSA-7v3r-m9c8-r855\n * GO-2026-5235 CVE-2026-42295 GHSA-7vf8-2cr6-54mf\n * GO-2026-5236 CVE-2026-40575 GHSA-7x63-xv5r-3p2x\n * GO-2026-5237 CVE-2026-7776 GHSA-7x9r-wcgg-w86f\n * GO-2026-5238 CVE-2026-6347 GHSA-82j6-4fq7-fx62\n * GO-2026-5239 CVE-2026-48096 GHSA-8396-jffm-qx4w\n * GO-2026-5240 GHSA-84g5-x8j3-7235\n * GO-2026-5241 CVE-2026-46617 GHSA-85g2-pmrx-r49q\n * GO-2026-5242 CVE-2026-41491 GHSA-85gx-3qv6-4463\n * GO-2026-5243 CVE-2026-25714 GHSA-8629-vc8r-5p58\n * GO-2026-5244 CVE-2026-45741 GHSA-86m8-88fq-xfxp\n * GO-2026-5245 CVE-2026-20719 GHSA-86vc-mg26-fj6x\n * GO-2026-5246 CVE-2026-44697 GHSA-87m7-qffr-542v\n * GO-2026-5247 CVE-2026-5807 GHSA-88v5-9hxc-f85r\n * GO-2026-5248 CVE-2026-45680 GHSA-89c6-vpcj-7vj4\n * GO-2026-5249 CVE-2026-52811 GHSA-89mr-xqfv-758m\n * GO-2026-5250 CVE-2026-54090 GHSA-8c9q-7855-wfxq\n * GO-2026-5251 CVE-2026-11717 GHSA-8fcc-w5hv-4gxv\n * GO-2026-5252 CVE-2026-47753 GHSA-8g7m-96c8-8wwc\n * GO-2026-5253 CVE-2026-41433 GHSA-8gmg-3w2q-65f4\n * GO-2026-5254 CVE-2026-35527 GHSA-8gw4-p4wq-4hcv\n * GO-2026-5255 CVE-2026-48025 GHSA-8h84-fhqq-q58v\n * GO-2026-5256 CVE-2026-28759 GHSA-8h9w-w78c-vvr3\n * GO-2026-5257 CVE-2026-45089 GHSA-8hf9-3q64-q2qf\n * GO-2026-5258 CVE-2026-34727 GHSA-8jvc-mcx6-r4cg\n * GO-2026-5259 GHSA-8mc6-xjpr-h98x\n * GO-2026-5260 CVE-2026-40922 GHSA-8q5w-mmxf-48jg\n * GO-2026-5261 CVE-2026-49396 GHSA-8qhj-4f8c-j8qg\n * GO-2026-5262 CVE-2026-5052 GHSA-8r5m-3f66-qpr3\n * GO-2026-5263 CVE-2026-5163 GHSA-8r89-8w26-cq32\n * GO-2026-5264 CVE-2026-42154 GHSA-8rm2-7qqf-34qm\n * GO-2026-5265 CVE-2026-45679 GHSA-8rrq-wcg8-cv5q\n * GO-2026-5267 CVE-2026-55776 GHSA-8w8f-r2xv-4q4j\n * GO-2026-5268 GHSA-8wfp-579w-6r25\n * GO-2026-5269 CVE-2026-44247 GHSA-8wxp-xxp2-rcgx\n * GO-2026-5270 CVE-2026-35454 GHSA-8x9r-hvwg-c55h\n * GO-2026-5271 CVE-2026-48501 GHSA-8xvp-7hj6-mcj9\n * GO-2026-5273 CVE-2026-44428 GHSA-95c3-6vvw-4mrq\n * GO-2026-5275 CVE-2026-45682 GHSA-962q-hwm5-52x5\n * GO-2026-5276 CVE-2026-35594 GHSA-96q5-xm3p-7m84\n * GO-2026-5277 CVE-2026-44774 GHSA-96qj-4jj5-wcjc\n * GO-2026-5278 CVE-2026-41135 GHSA-98cp-84m9-q3qp\n * GO-2026-5279 CVE-2026-29050 GHSA-98f2-w9h9-7fp9\n * GO-2026-5280 CVE-2026-41685 GHSA-98vh-x9cx-9cfp\n * GO-2026-5281 CVE-2026-45287 GHSA-995v-fvrw-c78m\n * GO-2026-5282 CVE-2026-46716 GHSA-99gv-2m7h-3hh9\n * GO-2026-5283 CVE-2026-39961 GHSA-99j8-wv67-4c72\n * GO-2026-5284 CVE-2026-40344 GHSA-9c4q-hq6p-c237\n * GO-2026-5285 GHSA-9cp7-j3f8-p5jx\n * GO-2026-5286 CVE-2026-28737 GHSA-9cpj-qc93-vw8v\n * GO-2026-5288 GHSA-9fw6-xgg2-mq9q\n * GO-2026-5289 CVE-2026-39350 GHSA-9gcg-w975-3rjh\n * GO-2026-5290 GHSA-9h64-2846-7x7f\n * GO-2026-5291 CVE-2026-41164 GHSA-9hmg-827w-9rhj\n * GO-2026-5292 CVE-2026-45626 GHSA-9mvm-4gwg-v8mp\n * GO-2026-5293 CVE-2026-6346 GHSA-9p64-jpc7-m2rp\n * GO-2026-5294 CVE-2026-47768 GHSA-9pg3-25fq-p6cc\n * GO-2026-5295 CVE-2026-40262 GHSA-9pr4-rf97-79qh\n * GO-2026-5296 CVE-2026-33544 GHSA-9q5m-jfc4-wc92\n * GO-2026-5297 CVE-2026-40097 GHSA-9qq8-cgcv-qmc9\n * GO-2026-5298 GHSA-9r4w-jg96-92mv\n * GO-2026-5299 CVE-2026-28699 GHSA-9r5x-wg6m-x2rc\n * GO-2026-5300 GHSA-9v4j-7g44-qcqw\n * GO-2026-5301 CVE-2026-26191 GHSA-9vcr-g537-3w5v\n * GO-2026-5302 CVE-2026-44423 GHSA-9w9c-9w8m-w89q\n * GO-2026-5303 CVE-2026-40884 GHSA-c29w-qq4m-2gcv\n * GO-2026-5304 CVE-2026-55774 GHSA-c36x-h252-g9x2\n * GO-2026-5305 CVE-2026-52813 GHSA-c39w-43gm-34h5\n * GO-2026-5308 CVE-2026-47179 GHSA-c3px-h233-h6fq\n * GO-2026-5310 CVE-2026-34476 GHSA-c4hg-6933-x62x\n * GO-2026-5311 CVE-2026-4858 GHSA-c4r7-j7pp-r8mp\n * GO-2026-5312 CVE-2026-47267 GHSA-c4v7-xg93-qf8g\n * GO-2026-5314 CVE-2026-40574 GHSA-c5c4-8r6x-56w3\n * GO-2026-5315 CVE-2026-45576 GHSA-c656-jcx2-7pqj\n * GO-2026-5316 CVE-2026-45723 GHSA-c66c-vq6w-fvh5\n * GO-2026-5317 CVE-2026-55884 GHSA-c73q-8xxr-rgqm\n * GO-2026-5318 CVE-2026-34453 GHSA-c77m-r996-jr3q\n * GO-2026-5319 CVE-2026-40243 GHSA-c839-4qxr-j4x3\n * GO-2026-5321 CVE-2026-28744 GHSA-cc8w-r4qh-3v65\n * GO-2026-5322 CVE-2026-55170 GHSA-cf98-j28v-49v6\n * GO-2026-5323 CVE-2026-46612 GHSA-chf8-4hv6-8pg6\n * GO-2026-5324 CVE-2026-42595 GHSA-chwh-f6gm-r836\n * GO-2026-5325 CVE-2026-6340 GHSA-cjm8-jxpw-g43m\n * GO-2026-5326 CVE-2026-44327 GHSA-cmpj-2x3g-m7g3\n * GO-2026-5328 GHSA-cp79-9mwr-wr49\n * GO-2026-5329 CVE-2026-40303 GHSA-cpf9-ph2j-ccr9\n * GO-2026-5330 CVE-2026-48154 GHSA-cpwg-x64r-rgwg\n * GO-2026-5331 CVE-2026-35037 GHSA-cqgf-f4x7-g6wc\n * GO-2026-5332 CVE-2025-41117 GHSA-cqp7-wf4c-3xgc\n * GO-2026-5333 CVE-2026-44884 GHSA-cqpq-2fgr-8mvc\n * GO-2026-5334 CVE-2026-20706 GHSA-cr4g-f395-h25h\n * GO-2026-5335 CVE-2026-45803 GHSA-crc3-h8v6-qh57\n * GO-2026-5337 CVE-2026-41068 GHSA-cvq5-hhx3-f99p\n * GO-2026-5338 CVE-2026-50195 GHSA-cvxm-645q-p574\n * GO-2026-5339 CVE-2026-47701 GHSA-cxh2-4639-vmc5\n * GO-2026-5340 CVE-2026-42461 GHSA-cxx3-hr75-4q96\n * GO-2026-5341 CVE-2026-34454 GHSA-f24x-5g9q-753f\n * GO-2026-5343 CVE-2026-48496 GHSA-f2r5-5m7w-p5cx\n * GO-2026-5344 CVE-2026-46703 GHSA-f396-4rp4-7v2j\n * GO-2026-5345 CVE-2026-45046 GHSA-f3jg-756w-gm35\n * GO-2026-5347 CVE-2026-48709 GHSA-f637-w7p2-m7fx\n * GO-2026-5348 CVE-2026-42560 GHSA-f6qq-3m3h-4g42\n * GO-2026-5349 CVE-2026-44325 GHSA-f8qv-7x5w-qr48\n * GO-2026-5350 CVE-2026-25726 GHSA-f8xp-wvcx-p6f4\n * GO-2026-5351 CVE-2026-41323 GHSA-f9g8-6ppc-pqq4\n * GO-2026-5352 CVE-2026-55828 GHSA-f9m7-vc86-p6jj\n * GO-2026-5353 GHSA-fc67-c4hg-q653\n * GO-2026-5354 GHSA-fcmh-qfxc-w685\n * GO-2026-5355 CVE-2026-11769 GHSA-fcw4-wwqm-m8cf\n * GO-2026-5356 CVE-2026-40242 GHSA-ff24-4prj-gpmj\n * GO-2026-5357 CVE-2026-34585 GHSA-ff66-236v-p4fg\n * GO-2026-5358 CVE-2026-24899 GHSA-ffg9-j72f-j6xm\n * GO-2026-5359 CVE-2026-28377 GHSA-ffqx-q65f-36jf\n * GO-2026-5360 CVE-2026-27656 GHSA-fg35-5rf6-qg3g\n * GO-2026-5361 CVE-2026-6970 GHSA-fg3j-5w9g-hmg7\n * GO-2026-5362 CVE-2026-35597 GHSA-fgfv-pv97-6cmj\n * GO-2026-5363 CVE-2026-41413 GHSA-fgw5-hp8f-xfhc\n * GO-2026-5364 CVE-2026-40946 GHSA-fhvp-9hcj-6m33\n * GO-2026-5365 CVE-2026-22555 GHSA-fhx7-m96w-mv29\n * GO-2026-5366 CVE-2026-45683 GHSA-fjq3-ffvr-vm46\n * GO-2026-5367 CVE-2026-54319 GHSA-fjv8-j4p5-cr9m\n * GO-2026-5369 CVE-2026-8634 GHSA-fm77-94qm-4894\n * GO-2026-5370 CVE-2026-45148 GHSA-fmh9-gpqh-g53g\n * GO-2026-5371 GHSA-fmqp-4wfc-w3v7\n * GO-2026-5372 CVE-2026-35458 GHSA-fmwg-qcqh-m992\n * GO-2026-5373 CVE-2026-53999 GHSA-fp5j-4fj2-4jvq\n * GO-2026-5374 CVE-2026-41485 GHSA-fpjq-c37h-cqcv\n * GO-2026-5375 GHSA-fpw6-hrg5-q5x5\n * GO-2026-5376 CVE-2026-45713 GHSA-fpxj-m5q8-fphw\n * GO-2026-5377 CVE-2026-42876 GHSA-fq7h-9x26-6j22\n * GO-2026-5378 CVE-2026-46680 GHSA-fqw6-gf59-qr4w\n * GO-2026-5379 CVE-2026-49343 GHSA-fw38-pc54-jvx9\n * GO-2026-5381 CVE-2026-44903 GHSA-fw8g-cg8f-9j28\n * GO-2026-5382 GHSA-fwg7-53p4-g33c\n * GO-2026-5383 CVE-2026-44542 GHSA-fwj3-42wh-8673\n * GO-2026-5384 CVE-2026-41647 GHSA-fwj8-62r8-8p8m\n * GO-2026-5385 CVE-2026-45728 GHSA-fwqx-8365-9983\n * GO-2026-5386 CVE-2026-8779 GHSA-fxvj-wqv2-xgcq\n * GO-2026-5387 CVE-2026-52805 GHSA-g2f5-gjr4-qjvm\n * GO-2026-5388 CVE-2026-34969 GHSA-g2qj-prgh-4g9r\n * GO-2026-5389 CVE-2026-44522 GHSA-g49p-4qxj-88v3\n * GO-2026-5390 GHSA-g53w-w6mj-hrpp\n * GO-2026-5391 CVE-2026-55669 GHSA-g5h5-m4hm-xjrr\n * GO-2026-5392 CVE-2026-46695 GHSA-g6ww-w5j2-r7x3\n * GO-2026-5393 CVE-2026-4274 GHSA-g7fp-cqj5-x8hf\n * GO-2026-5394 CVE-2026-35392 GHSA-g8mv-vp7j-qp64\n * GO-2026-5395 CVE-2026-42597 GHSA-g924-cjx7-2rjw\n * GO-2026-5396 CVE-2026-40246 GHSA-g9cw-qwhf-24jp\n * GO-2026-5397 CVE-2026-40195 GHSA-gc7j-g665-rxr9\n * GO-2026-5398 CVE-2024-53412 GHSA-ggmw-mjhv-75rm\n * GO-2026-5399 GHSA-ghmh-jhmj-wcmf\n * GO-2026-5400 CVE-2026-41520 GHSA-gj49-89wh-h4gj\n * GO-2026-5401 CVE-2026-46430 GHSA-gj84-924c-48fx\n * GO-2026-5402 CVE-2026-45371 GHSA-gmmv-4cc5-wr9r\n * GO-2026-5403 CVE-2026-6634 GHSA-gqp3-hfc3-8q54\n * GO-2026-5404 CVE-2026-4286 GHSA-gvg4-jhmr-6j23\n * GO-2026-5405 CVE-2026-4370 GHSA-gvrj-cjch-728p\n * GO-2026-5406 CVE-2026-55636 GHSA-gwxr-7h77-7777\n * GO-2026-5407 CVE-2026-40249 GHSA-gx38-8h33-pmxr\n * GO-2026-5409 CVE-2026-33380 GHSA-gxcp-jjxh-rwp4\n * GO-2026-5411 CVE-2026-54093 GHSA-gxjx-7m74-hcq8\n * GO-2026-5412 CVE-2026-42221 GHSA-h27v-ph7w-m9fp\n * GO-2026-5413 GHSA-h5fq-653g-gxrm\n * GO-2026-5414 CVE-2026-34828 GHSA-h5j9-cvrw-v5qh\n * GO-2026-5415 CVE-2026-39414 GHSA-h749-fxx7-pwpg\n * GO-2026-5416 GHSA-h829-5cg7-6hff\n * GO-2026-5417 CVE-2026-33489 GHSA-h8mm-c463-wjq3\n * GO-2026-5418 CVE-2026-45738 GHSA-h98r-wv3h-fr38\n * GO-2026-5419 CVE-2026-40109 GHSA-h9cx-xjg6-5v2w\n * GO-2026-5420 GHSA-h9mw-h4qc-f5jf\n * GO-2026-5421 CVE-2026-33414 GHSA-hc8w-h2mf-hp59\n * GO-2026-5422 CVE-2026-42575 GHSA-hcwr-pq9g-rq3m\n * GO-2026-5423 CVE-2026-55689 GHSA-hcxc-wf8j-23hv\n * GO-2026-5424 CVE-2026-52879 GHSA-hf2g-6j7h-98wg\n * GO-2026-5425 GHSA-hfc8-w5f4-3x6m\n * GO-2026-5428 CVE-2026-35596 GHSA-hj5c-mhh2-g7jq\n * GO-2026-5429 CVE-2026-41894 GHSA-hjh7-r5w8-5872\n * GO-2026-5430 CVE-2026-47203 GHSA-hjj4-hfjm-fmrj\n * GO-2026-5431 GHSA-hm2h-wwwh-g49x\n * GO-2026-5432 CVE-2026-4273 GHSA-hqpj-f3jh-29vx\n * GO-2026-5433 CVE-2026-42283 GHSA-hqwm-7x7x-8379\n * GO-2026-5434 CVE-2026-39901 GHSA-hqxq-hwqf-wg83\n * GO-2026-5436 CVE-2026-47252 GHSA-hrj8-hjv8-mgwc\n * GO-2026-5437 CVE-2026-41145 GHSA-hv4r-mvr4-25vw\n * GO-2026-5438 CVE-2026-6290 GHSA-hv5g-26jg-pc45\n * GO-2026-5439 CVE-2026-47124 GHSA-hvv7-hfrh-7gxj\n * GO-2026-5440 CVE-2026-46431 GHSA-hw27-4v2q-5qff\n * GO-2026-5441 GHSA-hw5x-4r37-72w7\n * GO-2026-5442 CVE-2026-4053 GHSA-hw87-6jcq-9f8q\n * GO-2026-5443 CVE-2026-44829 GHSA-hwc4-gmrw-5222\n * GO-2026-5444 CVE-2026-39972 GHSA-hwr4-mq23-wcv5\n * GO-2026-5445 CVE-2026-7474 GHSA-hx53-77qj-8663\n * GO-2026-5446 CVE-2026-45709 GHSA-j3fj-qppj-fmmc\n * GO-2026-5447 CVE-2026-44322 GHSA-j59f-x285-69jx\n * GO-2026-5448 CVE-2026-25779 GHSA-j5r2-4c8j-xc3m\n * GO-2026-5449 CVE-2026-44985 GHSA-j643-x8pv-8m67\n * GO-2026-5450 CVE-2026-6383 GHSA-j6cv-3w8p-vrg8\n * GO-2026-5451 CVE-2025-68152 GHSA-j6f6-jp3p-53mw\n * GO-2026-5453 CVE-2026-44424 GHSA-j72x-xfwg-783f\n * GO-2026-5454 CVE-2026-4054 GHSA-j76w-p754-g2w7\n * GO-2026-5455 CVE-2026-24000 GHSA-j8h8-75h3-jg53\n * GO-2026-5456 CVE-2026-45685 GHSA-j8p6-96vp-f3r9\n * GO-2026-5457 CVE-2026-48050 GHSA-j93g-rp6m-j32m\n * GO-2026-5458 CVE-2026-54091 GHSA-j9jx-hp4c-ghhh\n * GO-2026-5459 CVE-2026-47253 GHSA-j9rx-rppg-6hh4\n * GO-2026-5460 CVE-2026-48126 GHSA-jc3j-x6pg-4hmv\n * GO-2026-5461 CVE-2026-46403 GHSA-jc6w-wmfc-fh33\n * GO-2026-5462 CVE-2026-42294 GHSA-jcc8-g2q4-9fxq\n * GO-2026-5464 GHSA-jf2q-463c-6f52\n * GO-2026-5465 CVE-2026-40091 GHSA-jf4f-rr2c-9m58\n * GO-2026-5467 GHSA-jfwg-rxf3-p7r9\n * GO-2026-5468 CVE-2026-35393 GHSA-jg56-wf8x-qrv5\n * GO-2026-5469 CVE-2026-34581 GHSA-jgfx-74g2-9r6g\n * GO-2026-5470 CVE-2026-40248 GHSA-jgq2-qv8v-5cmj\n * GO-2026-5472 CVE-2026-47680 GHSA-jjrm-hr5f-673x\n * GO-2026-5473 CVE-2026-41645 GHSA-jm34-66cf-qpvr\n * GO-2026-5474 CVE-2026-6334 GHSA-jp3f-x449-4q75\n * GO-2026-5475 CVE-2026-47262 GHSA-jpcc-p29g-p8mq\n * GO-2026-5476 CVE-2026-47125 GHSA-jpjh-jm2p-39hh\n * GO-2026-5477 CVE-2026-52798 GHSA-jq8v-rmf6-65jw\n * GO-2026-5478 CVE-2026-44324 GHSA-jqfc-gwj5-3w63\n * GO-2026-5479 CVE-2026-40883 GHSA-jrq5-hg6x-j6g3\n * GO-2026-5480 CVE-2026-44883 GHSA-jvp4-q659-95mj\n * GO-2026-5481 CVE-2026-35585 GHSA-jvpw-637p-h3pw\n * GO-2026-5482 CVE-2026-40343 GHSA-jwch-w7wh-gqjm\n * GO-2026-5483 CVE-2026-34972 GHSA-jwvj-g8pc-cx45\n * GO-2026-5484 CVE-2026-3495 GHSA-jx93-pf6x-874r\n * GO-2026-5485 GHSA-m23h-6mwm-39m8\n * GO-2026-5487 CVE-2026-3605 GHSA-m2w4-8ggf-rj47\n * GO-2026-5489 CVE-2026-2325 GHSA-m3p3-8frq-q7qh\n * GO-2026-5491 CVE-2026-46377 GHSA-m5j3-4634-c2vq\n * GO-2026-5493 CVE-2026-46378 GHSA-m6xr-fvfg-5g64\n * GO-2026-5494 CVE-2026-6343 GHSA-m79q-8qf5-v622\n * GO-2026-5495 CVE-2026-28741 GHSA-m7cf-4gh2-v4qg\n * GO-2026-5497 CVE-2026-42576 GHSA-m7hm-vm4x-28jf\n * GO-2026-5499 CVE-2026-45730 GHSA-m8xg-8xg9-mxhm\n * GO-2026-5500 CVE-2026-55185 GHSA-m999-j542-5w3r\n * GO-2026-5501 CVE-2025-41118 GHSA-m9hq-h476-h2g8\n * GO-2026-5502 CVE-2026-44474 GHSA-mc29-hmx6-856q\n * GO-2026-5505 CVE-2026-44882 GHSA-mgq6-4x29-88r3\n * GO-2026-5507 CVE-2026-3590 GHSA-mh4x-rmrx-3hp4\n * GO-2026-5508 GHSA-mhc4-qq83-fmrr\n * GO-2026-5509 CVE-2026-5467 GHSA-mj24-pqx2-6788\n * GO-2026-5510 CVE-2026-26231 GHSA-mm7c-rhg6-qr4r\n * GO-2026-5511 GHSA-mmpx-jh39-wrv6\n * GO-2026-5512 CVE-2026-3115 GHSA-mpc7-mm28-f6wq\n * GO-2026-5514 CVE-2026-46668 GHSA-mqcf-gqvg-rmhm\n * GO-2026-5515 CVE-2026-48031 GHSA-mqq6-462x-jxmm\n * GO-2026-5517 CVE-2026-55775 GHSA-mwr2-wmgp-crj6\n * GO-2026-5519 GHSA-mxg3-432p-mr72\n * GO-2026-5520 CVE-2026-46356 GHSA-mxmp-wr3w-rvqx\n * GO-2026-5521 CVE-2026-42222 GHSA-mxqh-q9h6-v8pq\n * GO-2026-5522 CVE-2026-27769 GHSA-mxxh-fmjq-j6x4\n * GO-2026-5523 CVE-2026-47735 GHSA-p2j4-c4g6-rpf5\n * GO-2026-5524 CVE-2026-25773 GHSA-p32q-v29x-wq9r\n * GO-2026-5526 CVE-2026-40264 GHSA-p49j-v9wc-wg57\n * GO-2026-5527 CVE-2026-42183 GHSA-p4gq-3vxj-f4jq\n * GO-2026-5528 CVE-2026-21728 GHSA-p4r4-xvrq-gvmc\n * GO-2026-5530 CVE-2026-40265 GHSA-p5w6-75f9-cc2p\n * GO-2026-5531 GHSA-p64j-f4x9-wq66\n * GO-2026-5533 CVE-2026-55882 GHSA-p749-9w62-w533\n * GO-2026-5534 CVE-2026-45327 GHSA-p7c4-8x34-8j8f\n * GO-2026-5535 CVE-2026-5469 GHSA-p8c7-hjc4-gwf8\n * GO-2026-5536 CVE-2026-52799 GHSA-p9f5-h3rx-j5qw\n * GO-2026-5537 CVE-2026-44328 GHSA-p9mg-74mg-cwwr\n * GO-2026-5538 CVE-2025-71261 GHSA-pgh9-mpwc-8jjf\n * GO-2026-5539 CVE-2026-45678 GHSA-pgvv-q3wf-mm9m\n * GO-2026-5540 CVE-2026-39846 GHSA-phhp-9rm9-6gr2\n * GO-2026-5541 GHSA-pj6q-4vq4-r8cg\n * GO-2026-5544 CVE-2026-42602 GHSA-pjv4-3c63-699f\n * GO-2026-5545 CVE-2026-52797 GHSA-pm6v-2h4w-4rp2\n * GO-2026-5546 CVE-2026-40945 GHSA-pm7q-rjjx-979p\n * GO-2026-5547 GHSA-pmwq-pjrm-6p5r\n * GO-2026-5549 CVE-2026-40910 GHSA-pq96-pwvg-vrr9\n * GO-2026-5550 CVE-2025-52490 GHSA-pqhp-4xfc-hjgq\n * GO-2026-5551 CVE-2026-39087 GHSA-pqhx-w72w-m393\n * GO-2026-5552 CVE-2026-53541 GHSA-prj9-97mp-mwh2\n * GO-2026-5553 GHSA-prxj-3gcv-cqrh\n * GO-2026-5554 CVE-2026-44475 GHSA-pwfh-mqp3-pqwj\n * GO-2026-5555 CVE-2026-44349 GHSA-pwqg-q8pg-pp6r\n * GO-2026-5556 CVE-2026-52800 GHSA-pwx3-qcgw-vh7h\n * GO-2026-5557 CVE-2026-41571 GHSA-pxf8-6wqm-r6hh\n * GO-2026-5558 GHSA-pxh5-6rrc-8rjv\n * GO-2026-5559 CVE-2026-41059 GHSA-pxq7-h93f-9jrg\n * GO-2026-5560 CVE-2026-43644 GHSA-q23m-vm9r-5745\n * GO-2026-5561 CVE-2026-45627 GHSA-q2pj-8v84-9mh5\n * GO-2026-5562 CVE-2026-29051 GHSA-q2pw-xx38-p64j\n * GO-2026-5563 CVE-2026-41326 GHSA-q49m-57vm-c8cc\n * GO-2026-5564 CVE-2026-4740 GHSA-q4gv-pjmh-c735\n * GO-2026-5565 CVE-2026-42223 GHSA-q4w7-56hr-83rm\n * GO-2026-5567 CVE-2026-44523 GHSA-q6mh-rqwh-g786\n * GO-2026-5568 CVE-2026-55686 GHSA-q6r4-3wmg-fwcq\n * GO-2026-5571 GHSA-q7j3-v8qv-22vq\n * GO-2026-5572 CVE-2026-40281 GHSA-q7r4-hc83-hf2q\n * GO-2026-5573 CVE-2026-45760 GHSA-q8ch-jx67-q52x\n * GO-2026-5574 CVE-2026-46358 GHSA-q8cj-789h-vg24\n * GO-2026-5575 CVE-2026-40868 GHSA-q93q-v844-jrqp\n * GO-2026-5577 CVE-2026-44245 GHSA-q98m-7w8c-w388\n * GO-2026-5578 CVE-2026-5724 GHSA-q98v-9f9w-f49q\n * GO-2026-5579 CVE-2026-34992 GHSA-qcmw-8mm4-4p28\n * GO-2026-5580 CVE-2026-52806 GHSA-qf6p-p7ww-cwr9\n * GO-2026-5581 CVE-2026-44473 GHSA-qfxw-v8qx-vj3v\n * GO-2026-5582 CVE-2026-35602 GHSA-qh78-rvg3-cv54\n * GO-2026-5583 CVE-2026-33190 GHSA-qhmp-q7xh-99rh\n * GO-2026-5584 CVE-2026-22872 GHSA-qjjm-7j9w-pw72\n * GO-2026-5586 CVE-2026-47726 GHSA-qm33-p5p9-f8vg\n * GO-2026-5587 GHSA-qmwh-9m9c-h36m\n * GO-2026-5588 CVE-2026-38651 GHSA-qpv2-rwc8-c993\n * GO-2026-5589 CVE-2026-42574 GHSA-qq3r-w4hj-gjp6\n * GO-2026-5590 CVE-2026-45152 GHSA-qqq4-5773-pmw5\n * GO-2026-5591 CVE-2026-48777 GHSA-qqqm-5547-774x\n * GO-2026-5594 GHSA-qr4g-8hrp-c4rw\n * GO-2026-5598 CVE-2026-54324 GHSA-qwxf-2m7m-2m3x\n * GO-2026-5599 CVE-2026-45711 GHSA-qx5x-85p8-vg4j\n * GO-2026-5600 CVE-2026-54322 GHSA-qxvm-pcfm-qc39\n * GO-2026-5601 CVE-2026-11401 GHSA-r236-5pc3-3qcp\n * GO-2026-5602 CVE-2026-34984 GHSA-r2pg-r6h7-crf3\n * GO-2026-5603 GHSA-r2x7-427f-rq69\n * GO-2026-5604 CVE-2026-55887 GHSA-r2xf-7jw5-pjg6\n * GO-2026-5605 CVE-2026-42594 GHSA-r33j-c622-r6qp\n * GO-2026-5607 CVE-2026-44430 GHSA-r48c-v28r-pf6v\n * GO-2026-5608 CVE-2026-35599 GHSA-r4fg-73rc-hhh7\n * GO-2026-5609 CVE-2026-39396 GHSA-r65v-xgwc-g56j\n * GO-2026-5610 CVE-2026-45681 GHSA-r6c9-g6q5-qrf9\n * GO-2026-5611 CVE-2026-33467 GHSA-r727-5pf6-47r2\n * GO-2026-5612 CVE-2026-40197 GHSA-r7w7-mmxr-47r9\n * GO-2026-5613 CVE-2026-41136 GHSA-r99v-75p9-xqm5\n * GO-2026-5614 GHSA-rc6v-5rmx-w5mv\n * GO-2026-5615 GHSA-rf84-wr5g-m3rp\n * GO-2026-5616 CVE-2026-42882 GHSA-rfgq-wgg8-662p\n * GO-2026-5617 CVE-2026-42306 GHSA-rg2x-37c3-w2rh\n * GO-2026-5618 CVE-2026-45737 GHSA-rg3g-4rw9-gqrp\n * GO-2026-5619 CVE-2025-70950 GHSA-rg3p-p27c-2f39\n * GO-2026-5620 CVE-2026-44594 GHSA-rg65-45m7-hq57\n * GO-2026-5621 CVE-2026-4789 GHSA-rggm-jjmc-3394\n * GO-2026-5622 CVE-2026-53489 GHSA-rgh6-rfwx-v388\n * GO-2026-5623 GHSA-rgj7-vg8v-j4wr\n * GO-2026-5624 GHSA-rh99-wc69-c255\n * GO-2026-5625 CVE-2026-42091 GHSA-rhf7-wvw3-vjvm\n * GO-2026-5626 GHSA-rj4g-rqgh-rx9h\n * GO-2026-5627 CVE-2026-42591 GHSA-rm4c-xj6x-49mw\n * GO-2026-5628 CVE-2026-52878 GHSA-rm5c-5x2p-48wr\n * GO-2026-5629 CVE-2026-27659 GHSA-rmhw-c3xr-m3xx\n * GO-2026-5631 GHSA-rp7v-4384-hfrp\n * GO-2026-5632 CVE-2026-42571 GHSA-rpfr-x88x-xwcw\n * GO-2026-5633 CVE-2026-44881 GHSA-rpgq-m5fp-32wr\n * GO-2026-5634 CVE-2026-27806 GHSA-rphv-h674-5hp2\n * GO-2026-5635 CVE-2026-48058 GHSA-rqfj-vv8r-xhqc\n * GO-2026-5636 CVE-2026-42589 GHSA-rqgh-gxv4-6657\n * GO-2026-5637 CVE-2026-44429 GHSA-rqv2-m695-f8j4\n * GO-2026-5638 CVE-2026-44210 GHSA-rr59-xxvx-96qr\n * GO-2026-5639 CVE-2026-44848 GHSA-rrmm-9v76-h3p4\n * GO-2026-5640 CVE-2026-41422 GHSA-rw2c-8rfq-gwfv\n * GO-2026-5641 CVE-2026-44982 GHSA-rw47-hm26-6wr7\n * GO-2026-5642 CVE-2026-44330 GHSA-rwww-x45w-p52w\n * GO-2026-5644 CVE-2026-34448 GHSA-rx4h-526q-4458\n * GO-2026-5645 CVE-2026-47120 GHSA-rxf6-wjh4-jfj6\n * GO-2026-5646 GHSA-rxmp-8h9v-56cx\n * GO-2026-5647 CVE-2026-44319 GHSA-rxrq-fv76-26pr\n * GO-2026-5648 CVE-2026-44671 GHSA-rxvx-hhpj-q6px\n * GO-2026-5649 CVE-2026-45087 GHSA-v25v-m36w-jp4h\n * GO-2026-5650 CVE-2026-40103 GHSA-v479-vf79-mg83\n * GO-2026-5651 CVE-2026-3637 GHSA-v549-xx3c-6pc8\n * GO-2026-5652 CVE-2026-42339 GHSA-v5c3-6wvc-pc2q\n * GO-2026-5653 GHSA-v5mh-h5hx-7v92\n * GO-2026-5654 CVE-2026-40481 GHSA-v7xq-3wx6-fqc2\n * GO-2026-5656 CVE-2026-44514 GHSA-v8j7-hp7c-738f\n * GO-2026-5657 CVE-2026-45808 GHSA-v8v8-cm84-m686\n * GO-2026-5658 CVE-2026-44427 GHSA-v8vw-gw5j-w7m6\n * GO-2026-5659 CVE-2026-35604 GHSA-v9w4-gm2x-6rvf\n * GO-2026-5661 CVE-2026-52807 GHSA-vcm5-gvmp-78mp\n * GO-2026-5662 CVE-2026-40179 GHSA-vffh-x6r8-xx99\n * GO-2026-5663 CVE-2026-3114 GHSA-vhgh-g7x8-4rx8\n * GO-2026-5664 GHSA-vjgj-42f6-7997\n * GO-2026-5667 CVE-2026-35579 GHSA-vp29-5652-4fw9\n * GO-2026-5668 CVE-2026-41568 GHSA-vp62-88p7-qqf5\n * GO-2026-5669 CVE-2026-45742 GHSA-vp73-vjw8-8f32\n * GO-2026-5670 CVE-2026-28736 GHSA-vph7-r229-qxpf\n * GO-2026-5671 CVE-2026-6333 GHSA-vqp5-2mrp-qqxg\n * GO-2026-5672 CVE-2026-49397 GHSA-vrmh-5mmx-hjwx\n * GO-2026-5673 CVE-2026-42082 GHSA-vrrx-58h3-prmh\n * GO-2026-5674 CVE-2026-42186 GHSA-vv66-6rp4-wr4f\n * GO-2026-5677 CVE-2026-45684 GHSA-vvmg-8mjr-g6q3\n * GO-2026-5678 GHSA-vw82-7fv8-r6gp\n * GO-2026-5679 CVE-2026-40318 GHSA-vw86-c94w-v3x4\n * GO-2026-5680 CVE-2026-44426 GHSA-vwx9-7qcf-gg7f\n * GO-2026-5682 CVE-2026-46370 GHSA-vxm7-9x8v-8gm4\n * GO-2026-5683 CVE-2026-44544 GHSA-vxvc-cg7j-rwqj\n * GO-2026-5685 CVE-2026-47249 GHSA-w342-mj6g-v9c4\n * GO-2026-5686 CVE-2026-52880 GHSA-w4c6-7r69-w7j9\n * GO-2026-5687 CVE-2026-46717 GHSA-w4g9-mxgg-j532\n * GO-2026-5688 CVE-2026-55187 GHSA-w4mc-hhc6-xp28\n * GO-2026-5689 CVE-2026-45712 GHSA-w4vj-r5pg-3722\n * GO-2026-5690 CVE-2026-55701 GHSA-w5cv-pw74-4rxc\n * GO-2026-5691 CVE-2026-54092 GHSA-w5fm-68j4-fpc4\n * GO-2026-5692 CVE-2026-5412 GHSA-w5fq-8965-c969\n * GO-2026-5694 CVE-2026-39395 GHSA-w6c6-c85g-mmv6\n * GO-2026-5695 CVE-2026-25119 GHSA-w6j9-vw59-27wv\n * GO-2026-5696 CVE-2026-40263 GHSA-w6m9-39cv-2fwp\n * GO-2026-5697 CVE-2026-5468 GHSA-w799-7525-rpr6\n * GO-2026-5698 CVE-2026-47723 GHSA-w7w5-5gcp-38rw\n * GO-2026-5701 GHSA-w8jj-cwmc-wgq2\n * GO-2026-5702 CVE-2026-40107 GHSA-w95v-4h65-j455\n * GO-2026-5703 CVE-2026-8462 GHSA-wc3v-3457-c8cm\n * GO-2026-5704 CVE-2026-35036 GHSA-wc4h-2348-jc3p\n * GO-2026-5705 GHSA-wcmj-x466-56mm\n * GO-2026-5706 CVE-2026-11718 GHSA-wcpr-6g7x-p44r\n * GO-2026-5708 CVE-2026-33381 GHSA-wfhv-mj62-f5xh\n * GO-2026-5709 GHSA-wfqx-gjrf-g28r\n * GO-2026-5710 CVE-2026-42151 GHSA-wg65-39gg-5wfj\n * GO-2026-5712 CVE-2026-52810 GHSA-wmfg-5p4h-5fw3\n * GO-2026-5714 CVE-2026-45676 GHSA-wp73-mwgf-4jq9\n * GO-2026-5715 CVE-2026-47215 GHSA-wqcr-7rf3-f64m\n * GO-2026-5716 CVE-2026-42541 GHSA-wqcw-g35j-j578\n * GO-2026-5717 CVE-2026-44320 GHSA-wqfh-gq79-j8mf\n * GO-2026-5718 CVE-2026-8052 GHSA-wqwc-x3rc-2xw6\n * GO-2026-5719 CVE-2026-44015 GHSA-wr32-99hh-6f35\n * GO-2026-5720 CVE-2026-44316 GHSA-wr8j-6chw-gm6p\n * GO-2026-5721 CVE-2026-24791 GHSA-wrr5-99h5-gq57\n * GO-2026-5722 CVE-2026-40245 GHSA-wrwh-rpq4-87hf\n * GO-2026-5723 CVE-2026-42875 GHSA-wv26-88m5-6h59\n * GO-2026-5724 CVE-2026-52801 GHSA-wv27-2vqp-j7g5\n * GO-2026-5725 CVE-2026-45726 GHSA-wv8c-6mx2-xf4j\n * GO-2026-5726 CVE-2026-28732 GHSA-wvcv-9xpm-7mqc\n * GO-2026-5727 CVE-2026-6345 GHSA-wvgv-4fc3-2rcp\n * GO-2026-5728 CVE-2026-40189 GHSA-wvhv-qcqf-f3cx\n * GO-2026-5729 CVE-2026-54321 GHSA-ww63-pv5x-vfc8\n * GO-2026-5731 CVE-2026-44317 GHSA-wwqh-7jm5-gj7w\n * GO-2026-5732 GHSA-wxg7-w2v3-w38g\n * GO-2026-5733 CVE-2026-33031 GHSA-x234-x5vq-cc2v\n * GO-2026-5734 CVE-2026-21388 GHSA-x274-8qfc-hrgf\n * GO-2026-5735 CVE-2026-32885 GHSA-x2xq-qhjf-5mvg\n * GO-2026-5737 GHSA-x3f4-v83f-7wp2\n * GO-2026-5738 CVE-2026-41246 GHSA-x4mj-7f9g-29h4\n * GO-2026-5739 CVE-2026-46371 GHSA-x4qr-qw6h-wvxq\n * GO-2026-5741 CVE-2026-40247 GHSA-x5r2-r74c-3w28\n * GO-2026-5742 CVE-2026-41684 GHSA-x5r6-jr56-89pv\n * GO-2026-5744 CVE-2026-26062 GHSA-x67p-9m2r-fxqv\n * GO-2026-5745 GHSA-x845-2f78-7v36\n * GO-2026-5747 CVE-2026-34528 GHSA-x8jc-jvqm-pm3f\n * GO-2026-5751 CVE-2026-42297 GHSA-xchc-cqwg-g76q\n * GO-2026-5752 CVE-2026-48020 GHSA-xf64-8mw2-4gr2\n * GO-2026-5753 CVE-2026-41432 GHSA-xff3-5c9p-2mr4\n * GO-2026-5754 CVE-2026-34530 GHSA-xfqj-3vmx-63wv\n * GO-2026-5755 CVE-2026-10720 GHSA-xg3j-c7q4-f9ph\n * GO-2026-5756 CVE-2026-47703 GHSA-xgx4-4h9w-53pv\n * GO-2026-5757 CVE-2026-42600 GHSA-xh8f-g2qw-gcm7\n * GO-2026-5758 CVE-2026-53488 GHSA-xhf5-7wjv-pqxp\n * GO-2026-5759 GHSA-xhj4-g6w8-2xjw\n * GO-2026-5760 CVE-2026-41174 GHSA-xhjw-95fp-8vgq\n * GO-2026-5763 CVE-2026-39984 GHSA-xm5m-wgh2-rrg3\n * GO-2026-5765 CVE-2026-52814 GHSA-xp79-5mx3-jx52\n * GO-2026-5766 CVE-2026-5199 GHSA-xpg8-3hhp-p7w8\n * GO-2026-5767 CVE-2026-4531 GHSA-xq44-64rg-8g3h\n * GO-2026-5768 CVE-2026-55672 GHSA-xqxv-4jc2-x56x\n * GO-2026-5769 CVE-2026-6339 GHSA-xvcx-mgpc-5xh3\n * GO-2026-5770 CVE-2026-34762 GHSA-xw45-cc32-442f\n * GO-2026-5771 CVE-2026-34742 GHSA-xw59-hvm2-8pj6\n * GO-2026-5772 CVE-2026-45721 GHSA-xwcr-wm99-g9jc\n * GO-2026-5773 CVE-2026-52802 GHSA-xxhq-69mf-w8cr\n * GO-2026-5776 GHSA-r4v7-6wcg-ghj5\n- Update to version 0.0.20260616T235518 2026-06-16T23:55:18Z.\n * GO-2026-5041 CVE-2026-44981 GHSA-273h-gvwr-c3qj\n * GO-2026-5042 CVE-2026-47243 GHSA-2gv2-cffp-j227\n * GO-2026-5043 CVE-2026-30963 GHSA-2ww6-hf35-mfjm\n * GO-2026-5049 CVE-2026-47725 GHSA-273q-qgh5-wrj6\n * GO-2026-5054 CVE-2026-48113 GHSA-24fp-5v3p-rvpw\n * GO-2026-5055 CVE-2026-54094 GHSA-239w-m3h6-ch8v\n- Update to version 0.0.20260602T213947 2026-06-02T21:39:47Z.\n * GO-2026-4960 CVE-2026-39386 GHSA-2gw9-c2r2-f5qf\n * GO-2026-5031 CVE-2026-42500\n * GO-2026-5032 CVE-2026-46599\n * GO-2026-5037 CVE-2026-27145\n * GO-2026-5038 CVE-2026-42504\n * GO-2026-5039 CVE-2026-42507\n- Update to version 0.0.20260526T224918 2026-05-26T22:49:18Z.\n * GO-2026-4945 CVE-2026-34986 GHSA-78h2-9frx-2jm8\n * GO-2026-4958 CVE-2026-35469 GHSA-pc3f-x583-g7j2\n * GO-2026-4985 CVE-2026-39882 GHSA-w8rr-5gcm-pp58\n * GO-2026-5002 CVE-2026-23998 GHSA-2rc4-7jc6-qffh\n * GO-2026-5024 CVE-2026-39824\n * GO-2026-5025 CVE-2026-42506\n * GO-2026-5026 CVE-2026-39821\n * GO-2026-5027 CVE-2026-42502\n * GO-2026-5028 CVE-2026-25680\n * GO-2026-5029 CVE-2026-25681\n * GO-2026-5030 CVE-2026-27136\n- Update to version 0.0.20260522T020834 2026-05-22T02:08:34Z.\n * GO-2025-3548 CVE-2024-12886 GHSA-v464-r2r9-www7\n * GO-2026-4951 CVE-2026-35601 GHSA-2g7h-7rqr-9p4r\n * GO-2026-4952 CVE-2026-35595 GHSA-2vq4-854f-5c72\n * GO-2026-4953 CVE-2026-40188 GHSA-2943-crp8-38xx\n * GO-2026-4963 CVE-2026-41070 GHSA-246w-jgmq-88fg\n * GO-2026-4964 CVE-2026-41176 GHSA-25qr-6mpr-f7qx\n * GO-2026-4965 CVE-2026-41646 GHSA-29rg-wmcw-hpf4\n * GO-2026-4966 CVE-2026-41644 GHSA-29v9-frvh-c426\n * GO-2026-4967 CVE-2026-42072 GHSA-2hp7-65r3-wv54\n * GO-2026-4969 CVE-2026-32934 GHSA-2wpx-qpw2-g5h5\n * GO-2026-4983 GHSA-28xx-pppm-vqff\n * GO-2026-4988 CVE-2026-42300 GHSA-2g9v-7mr5-fgjg\n * GO-2026-4989 GHSA-2ccx-cjjh-r2j8\n * GO-2026-4990 CVE-2026-42592 GHSA-2pmr-289p-44r3\n * GO-2026-4991 GHSA-258c-965c-p3hc\n * GO-2026-4992 CVE-2026-44670 GHSA-2h64-c999-c9r6\n * GO-2026-4993 CVE-2026-44588 GHSA-25rp-h46x-2hjm\n * GO-2026-4994 CVE-2026-44318 GHSA-27ph-8q4f-h7m7\n * GO-2026-4995 CVE-2026-44329 GHSA-3258-qmv8-frp3\n * GO-2026-4996 CVE-2025-2786 GHSA-28gr-56hr-prp6\n * GO-2026-4997 CVE-2026-6863 GHSA-2v93-vp82-cjv8\n * GO-2026-4999 CVE-2026-45090 GHSA-2g4x-fq3j-cgq4\n * GO-2026-5001 CVE-2026-45375 GHSA-27qc-m5gf-jv5r\n * GO-2026-5005 CVE-2026-39833\n * GO-2026-5006 CVE-2026-39832\n * GO-2026-5008 CVE-2026-45781 GHSA-2v5f-5r6w-p67r\n * GO-2026-5009 CVE-2026-45695 GHSA-2q4c-3mrw-63c3\n * GO-2026-5010 GHSA-3278-c88v-xrh4\n * GO-2026-5013 CVE-2026-46597\n * GO-2026-5014 CVE-2026-39828\n * GO-2026-5015 CVE-2026-39835\n * GO-2026-5016 CVE-2026-39827\n * GO-2026-5017 CVE-2026-39830\n * GO-2026-5018 CVE-2026-39829\n * GO-2026-5019 CVE-2026-39831\n * GO-2026-5020 CVE-2026-39834\n * GO-2026-5021 CVE-2026-42508\n * GO-2026-5023 CVE-2026-46595\n * GO-2026-5033 CVE-2026-46598\n- Update to version 0.0.20260507T192140 2026-05-07T19:21:40Z.\n * GO-2026-4918 CVE-2026-33814\n * GO-2026-4971 CVE-2026-39836\n * GO-2026-4976 CVE-2026-39825\n * GO-2026-4977 CVE-2026-42499\n * GO-2026-4978 CVE-2026-39819\n * GO-2026-4979 CVE-2026-39817\n * GO-2026-4980 CVE-2026-39826\n * GO-2026-4981 CVE-2026-33811\n * GO-2026-4982 CVE-2026-39823\n * GO-2026-4984 CVE-2026-42501\n * GO-2026-4986 CVE-2026-39820\n- Update to version 0.0.20260421T185951 2026-04-21T18:59:51Z.\n * GO-2025-3368 CVE-2025-21613 GHSA-v725-9546-7q7m\n * GO-2025-3993 CVE-2025-59531 GHSA-f9gq-prrc-hrhc\n * GO-2025-3996 CVE-2025-59537 GHSA-wp4p-9pxh-cgx2\n * GO-2026-4514 CVE-2026-32285 GHSA-6g7g-w4f8-9c9x\n * GO-2026-4771 CVE-2026-33815 GHSA-xgrm-4fwx-7qm8\n * GO-2026-4772 CVE-2026-33816 GHSA-9jj7-4m8r-rfcm\n * GO-2026-4962 CVE-2026-33812\n- Update to version 0.0.20260416T222113 2026-04-16T22:21:13Z.\n * GO-2025-3503 CVE-2025-22870 GHSA-qxp5-gwg8-xv66\n * GO-2026-4727 CVE-2026-26246 GHSA-44mv-jq72-gj49\n * GO-2026-4736 CVE-2026-30405 GHSA-4p9m-8gc4-rw2h\n * GO-2026-4738 CVE-2026-32761 GHSA-68j5-4m99-w9w9\n * GO-2026-4771 CVE-2026-33815\n * GO-2026-4772 CVE-2026-33816\n * GO-2026-4789 CVE-2026-26933 GHSA-27qj-9gvp-8rh9\n * GO-2026-4790 CVE-2026-26931 GHSA-5vrw-qjxw-89r5\n * GO-2026-4806 CVE-2026-33413 GHSA-q8m4-xhhv-38mg\n * GO-2026-4808 CVE-2026-33343 GHSA-rfx7-8w68-q57q\n * GO-2026-4815 CVE-2026-33809 GHSA-44p7-9xx4-hf2g\n * GO-2026-4864 CVE-2026-32282\n * GO-2026-4865 CVE-2026-32289\n * GO-2026-4866 CVE-2026-33810\n * GO-2026-4867 CVE-2026-27144\n * GO-2026-4868 CVE-2026-27143\n * GO-2026-4869 CVE-2026-32288\n * GO-2026-4870 CVE-2026-32283\n * GO-2026-4871 CVE-2026-27140\n * GO-2026-4879 CVE-2026-33898 GHSA-453r-g2pg-cxxq\n * GO-2026-4881 CVE-2026-33897 GHSA-83xr-5xxr-mh92\n * GO-2026-4882 CVE-2026-33542 GHSA-p8mm-23gg-jc9r\n * GO-2026-4884 CVE-2026-33945 GHSA-q4q8-7f2j-9h9f\n * GO-2026-4885 CVE-2026-33711 GHSA-q9vp-3wcg-8p4x\n * GO-2026-4886 CVE-2026-33743 GHSA-vg76-xmhg-j5x3\n * GO-2026-4909 CVE-2026-33762 GHSA-gm2x-2g9h-ccm8\n * GO-2026-4910 CVE-2026-34165 GHSA-jhf3-xxhw-2wpp\n * GO-2026-4920 CVE-2026-34940 GHSA-324q-cwx9-7crr\n * GO-2026-4923 CVE-2026-33817 GHSA-6jwv-w5xf-7j27\n * GO-2026-4924 CVE-2025-68153 GHSA-245v-p8fj-vwm2\n * GO-2026-4946 CVE-2026-32281\n * GO-2026-4947 CVE-2026-32280\n- Update to version 0.0.20260402T184258 2026-04-02T18:42:58Z.\n * GO-2026-4518 CVE-2026-32286 GHSA-jqcq-xjh3-6g23\n * GO-2026-4753 CVE-2026-33487 GHSA-479m-364c-43vc\n * GO-2026-4760 GHSA-hwqm-qvj9-4jr2\n * GO-2026-4762 CVE-2026-33186 GHSA-p77j-4mvh-x3m3\n * GO-2026-4764 GHSA-pcgw-qcv5-h8ch\n * GO-2026-4858 CVE-2026-33747 GHSA-4c29-8rgm-jvjj\n * GO-2026-4859 CVE-2026-33748 GHSA-4vrq-3vrq-g6gg\n * GO-2026-4863 GHSA-g9ww-x58f-9g6m\n * GO-2026-4872 CVE-2026-33907 GHSA-55q8-2gwx-29pc\n * GO-2026-4873 CVE-2026-33906 GHSA-87j9-m7x6-hvw2\n * GO-2026-4874 CVE-2026-33904 GHSA-9h59-p45g-445h\n * GO-2026-4875 CVE-2026-33903 GHSA-f2f3-9cx3-wcmf\n * GO-2026-4876 GHSA-prh4-vhfh-24mj\n * GO-2026-4880 CVE-2026-32695 GHSA-67jx-r9pv-98rj\n * GO-2026-4883 CVE-2026-33997 GHSA-pxq6-2prw-chj9\n * GO-2026-4887 CVE-2026-34040 GHSA-x744-4wpc-v9h2\n * GO-2026-4888 CVE-2026-26060 GHSA-3458-r943-hmx4\n * GO-2026-4889 CVE-2026-26061 GHSA-99hj-44vg-hfcp\n * GO-2026-4890 CVE-2026-34042 GHSA-x34h-54cw-9825\n * GO-2026-4891 CVE-2026-34041 GHSA-xmgr-9pqc-h5vw\n * GO-2026-4892 CVE-2026-29180 GHSA-m2h6-4xpq-qw3m\n * GO-2026-4893 CVE-2026-33433 GHSA-qr99-7898-vr7c\n * GO-2026-4894 CVE-2026-32241 GHSA-vchx-5pr6-ffx2\n * GO-2026-4896 CVE-2026-34204 GHSA-3rh2-v3gr-35p9\n * GO-2026-4897 GHSA-46wh-3698-f2cx\n * GO-2026-4899 GHSA-c279-989m-238f\n * GO-2026-4901 CVE-2026-33030 GHSA-5hf2-vhj6-gj9m\n * GO-2026-4902 CVE-2026-33029 GHSA-cp8r-8jvw-v3qg\n * GO-2026-4903 CVE-2026-33026 GHSA-fhh2-gg7w-gwpq\n * GO-2026-4904 CVE-2026-33032 GHSA-h6c2-x2m2-mwhf\n * GO-2026-4905 CVE-2026-27018 GHSA-jjwv-57xh-xr6r\n * GO-2026-4906 CVE-2026-33028 GHSA-m468-xcm6-fxg4\n * GO-2026-4907 CVE-2026-33027 GHSA-m8p8-53vf-8357\n * GO-2026-4911 CVE-2026-33990 GHSA-x2f5-332j-9xwq\n * GO-2026-4912 CVE-2026-34389 GHSA-4f9r-x588-pp2h\n * GO-2026-4913 CVE-2026-34386 GHSA-9p23-p2m4-2r4m\n * GO-2026-4914 CVE-2026-34385 GHSA-v895-833r-8c45\n * GO-2026-4915 CVE-2026-34388 GHSA-w254-4hp5-7cvv\n * GO-2026-4916 CVE-2026-26233 GHSA-247x-7qw8-fp98\n * GO-2026-4919 CVE-2026-33634 GHSA-69fq-xp46-6x23\n- Update to version 0.0.20260326T203309 2026-03-26T20:33:09Z.\n * GO-2026-4513 CVE-2026-32284\n * GO-2026-4514 CVE-2026-32285\n * GO-2026-4518 CVE-2026-32286\n * GO-2026-4526 CVE-2026-32287\n * GO-2026-4700 CVE-2026-32704 GHSA-4j3x-hhg2-fm2x\n * GO-2026-4701 CVE-2026-32720 GHSA-7x23-j8gv-v54x\n * GO-2026-4702 CVE-2026-32301 GHSA-j77h-rr39-c552\n * GO-2026-4703 GHSA-q926-c743-49qj\n * GO-2026-4704 CVE-2026-32606 GHSA-wj2j-qwcf-cfcc\n * GO-2026-4705 CVE-2026-32747 GHSA-h5vh-m7fg-w5h6\n * GO-2026-4706 CVE-2026-32751 GHSA-qr46-rcv3-4hq3\n * GO-2026-4707 CVE-2026-32749 GHSA-qvvf-q994-x79v\n * GO-2026-4708 CVE-2026-32750 GHSA-rjhh-m223-9qqv\n * GO-2026-4709 CVE-2026-32815 GHSA-xp2m-98x8-rpj6\n * GO-2026-4710 CVE-2026-32760 GHSA-5gg9-5g7w-hm73\n * GO-2026-4711 CVE-2026-32758 GHSA-9f3r-2vgw-m8xp\n * GO-2026-4712 CVE-2026-32771 GHSA-f7cq-gvh6-qr25\n * GO-2026-4713 CVE-2026-32759 GHSA-ffx7-75gc-jg7c\n * GO-2026-4714 CVE-2026-32737 GHSA-fgm3-q9r5-43v9\n * GO-2026-4715 CVE-2026-32769 GHSA-hxm7-9q36-c77f\n * GO-2026-4716 CVE-2026-32767 GHSA-j7wh-x834-p3r7\n * GO-2026-4717 CVE-2026-32828 GHSA-j94x-8wcp-x7hm\n * GO-2026-4718 CVE-2026-32768 GHSA-mw24-f3xh-j3qv\n * GO-2026-4719 CVE-2026-32805 GHSA-p799-g7vv-f279\n * GO-2026-4721 CVE-2026-32940 GHSA-4mx9-3c2h-hwhg\n * GO-2026-4722 CVE-2026-32938 GHSA-fq2j-j8hc-8vw8\n * GO-2026-4723 CVE-2026-32941 GHSA-97vp-pwqj-46qc\n * GO-2026-4724 CVE-2026-32254 GHSA-phqm-jgc3-qf8g\n * GO-2026-4725 CVE-2026-25783 GHSA-2v3w-6g35-5f9v\n * GO-2026-4726 CVE-2026-2456 GHSA-34g8-9fpp-46ch\n * GO-2026-4728 CVE-2026-32953 GHSA-4w7r-3222-8h6v\n * GO-2026-4729 CVE-2026-2458 GHSA-679f-wmrg-qf57\n * GO-2026-4731 CVE-2026-24458 GHSA-m5rv-56xx-hfc6\n * GO-2026-4732 CVE-2026-2457 GHSA-ph22-fw5m-w2q9\n * GO-2026-4733 CVE-2026-25780 GHSA-xv2p-wchj-qjhp\n * GO-2026-4734 CVE-2026-2578 GHSA-3rhr-jr63-hwq5\n * GO-2026-4735 CVE-2026-2463 GHSA-fx49-m253-27jj\n * GO-2026-4737 GHSA-594f-3595-c47v\n * GO-2026-4740 GHSA-h9q6-hc68-35rp\n * GO-2026-4742 CVE-2026-32811 GHSA-r8x2-fhmf-6mxp\n * GO-2026-4743 CVE-2026-33066 GHSA-4663-4mpg-879v\n * GO-2026-4744 CVE-2026-21386 GHSA-5mr9-crcg-8wh2\n * GO-2026-4745 CVE-2026-24692 GHSA-cwfj-642j-gfh4\n * GO-2026-4746 CVE-2026-2455 GHSA-gqv7-j2j8-qmwq\n * GO-2026-4747 CVE-2026-33067 GHSA-mvpm-v6q4-m2pf\n * GO-2026-4748 CVE-2026-33081 GHSA-qwxp-6qf9-wr4m\n * GO-2026-4749 CVE-2026-4265 GHSA-xpvf-6qcc-9jqc\n * GO-2026-4750 CVE-2026-32937 GHSA-6g43-577r-wf4x\n * GO-2026-4751 CVE-2026-33132 GHSA-g2pf-ww5m-2r9m\n * GO-2026-4752 CVE-2026-33203 GHSA-3g9h-9hp4-654v\n * GO-2026-4754 CVE-2026-33063 GHSA-4jrw-92fg-4jwx\n * GO-2026-4755 CVE-2026-33192 GHSA-5rvc-5cwx-g5x8\n * GO-2026-4756 CVE-2026-33062 GHSA-7c47-xr7q-p6hg\n * GO-2026-4757 CVE-2026-33064 GHSA-7g27-v5wj-jr75\n * GO-2026-4758 CVE-2026-33065 GHSA-958m-gxmc-mccm\n * GO-2026-4759 CVE-2026-33221 GHSA-g9f6-9775-hffm\n * GO-2026-4763 CVE-2026-33191 GHSA-p9hg-pq3q-v9gv\n * GO-2026-4765 GHSA-vccx-p757-pv6h\n * GO-2026-4766 CVE-2026-33194 GHSA-vm69-h85x-8p85\n * GO-2026-4768 CVE-2026-33320 GHSA-4fcp-jxh7-23x8\n * GO-2026-4769 CVE-2026-32691 GHSA-gfgr-6hrj-85ww\n * GO-2026-4770 GHSA-q382-vc8q-7jhj\n * GO-2026-4773 CVE-2026-33252 GHSA-89xv-2j6f-qhc8\n * GO-2026-4774 CVE-2026-30924 GHSA-h8vw-ph9r-xpch\n * GO-2026-4775 CVE-2026-30836 GHSA-q4r8-xm5f-56gw\n * GO-2026-4776 CVE-2026-33283 GHSA-3366-gw57-fcm5\n * GO-2026-4777 CVE-2026-32693 GHSA-439w-v2p7-pggc\n * GO-2026-4778 CVE-2026-32694 GHSA-5cj2-rqqf-hx9p\n * GO-2026-4779 CVE-2026-33322 GHSA-5cx5-wh4m-82fh\n * GO-2026-4780 CVE-2026-33282 GHSA-826q-wrq4-p23x\n * GO-2026-4781 CVE-2026-32692 GHSA-89x7-5m5m-mcmm\n * GO-2026-4782 CVE-2026-2461 GHSA-hf8w-x9h5-5gf9\n * GO-2026-4783 CVE-2026-33281 GHSA-q669-4gmv-g8mf\n * GO-2026-4784 CVE-2026-2476 GHSA-4ppj-6chv-5pgc\n * GO-2026-4785 CVE-2026-33344 GHSA-ph8x-4jfv-v9v8\n * GO-2026-4786 CVE-2026-22545 GHSA-rv67-7w2g-7976\n * GO-2026-4788 CVE-2026-33353 GHSA-xgxp-f695-6vrp\n * GO-2026-4791 CVE-2026-29794 GHSA-m547-hp4w-j6jx\n * GO-2026-4792 CVE-2026-32595 GHSA-g3hg-j4jv-cwfr\n * GO-2026-4793 CVE-2026-32305 GHSA-wvvq-wgcr-9q48\n * GO-2026-4794 CVE-2026-33315 GHSA-47cr-f226-r4pq\n * GO-2026-4795 CVE-2026-33312 GHSA-564f-wx8x-878h\n * GO-2026-4796 CVE-2026-4342 GHSA-f53h-mxv9-cp98\n * GO-2026-4797 CVE-2026-33313 GHSA-mr3j-p26x-72x4\n * GO-2026-4798 CVE-2026-33316 GHSA-vq4q-79hh-q767\n * GO-2026-4799 CVE-2026-33496 GHSA-4mq7-pvjg-xp2r\n * GO-2026-4800 CVE-2026-33505 GHSA-c38g-mx2c-9wf2\n * GO-2026-4801 CVE-2026-33503 GHSA-hgx2-28f8-6g2r\n * GO-2026-4802 CVE-2026-33476 GHSA-hhgj-gg9h-rjp7\n * GO-2026-4803 CVE-2026-33419 GHSA-jv87-32hw-hh99\n * GO-2026-4804 CVE-2026-33494 GHSA-p224-6x5r-fjpm\n * GO-2026-4805 CVE-2026-33473 GHSA-p747-qc5p-773r\n * GO-2026-4807 CVE-2026-33504 GHSA-r9w3-57w2-gch2\n * GO-2026-4809 CVE-2026-33481 GHSA-rjcw-vg7j-m9rc\n * GO-2026-4810 CVE-2026-33495 GHSA-vhr5-ggp3-qq85\n * GO-2026-4811 CVE-2026-33474 GHSA-wc83-79hj-hpmq\n * GO-2026-4812 CVE-2026-26304 GHSA-4pmx-622h-x359\n * GO-2026-4813 CVE-2026-32879 GHSA-5353-f8fq-65vc\n * GO-2026-4814 CVE-2026-30886 GHSA-f35r-v9x5-r8mc\n * GO-2026-4815 CVE-2026-33809\n * GO-2026-4816 CVE-2026-3864 GHSA-2mjq-54qg-7w6j\n * GO-2026-4817 CVE-2026-33528 GHSA-4753-cmc8-8j9v\n * GO-2026-4818 CVE-2026-33525 GHSA-gmfg-3v4q-9qr4\n * GO-2026-4820 GHSA-7789-65hx-f26w\n * GO-2026-4821 CVE-2026-33621 GHSA-j65m-hv65-r264\n * GO-2026-4822 CVE-2026-33620 GHSA-mrqc-3276-74f8\n * GO-2026-4823 CVE-2026-33623 GHSA-p8mm-644p-phmh\n * GO-2026-4824 CVE-2026-33622 GHSA-w5pc-m664-r62v\n * GO-2026-4825 CVE-2026-33619 GHSA-xqq2-4j46-vwp7\n * GO-2026-4826 CVE-2026-33249 GHSA-8m2x-3m6q-6w8j\n * GO-2026-4827 CVE-2026-33247 GHSA-x6g4-f6q3-fqvv\n * GO-2026-4828 CVE-2026-33248 GHSA-3f24-pcvm-5jqc\n * GO-2026-4829 CVE-2026-29785 GHSA-52jh-2xxh-pwh6\n * GO-2026-4830 CVE-2026-33246 GHSA-55h8-8g96-x4hj\n * GO-2026-4831 CVE-2026-33219 GHSA-8r68-gvr4-jh7j\n * GO-2026-4832 CVE-2026-33222 GHSA-9983-vrx2-fg9c\n * GO-2026-4833 CVE-2026-33215 GHSA-fcjp-h8cc-6879\n * GO-2026-4834 CVE-2026-33217 GHSA-jxxm-27vp-c3m5\n * GO-2026-4835 CVE-2026-33223 GHSA-pwx7-fx9r-hr4h\n * GO-2026-4836 CVE-2026-33216 GHSA-v722-jcv5-w7mc\n * GO-2026-4837 CVE-2026-33218 GHSA-vprv-35vv-q339\n * GO-2026-4838 CVE-2026-33638 GHSA-m983-7426-5hrj\n * GO-2026-4841 CVE-2026-27889 GHSA-pq2q-rcw4-3hr6\n * GO-2026-4842 CVE-2026-33669 GHSA-34xj-66v3-6j83\n * GO-2026-4843 CVE-2026-33670 GHSA-xmw9-6r43-x9ww\n * GO-2026-4844 CVE-2026-33529 GHSA-7pq3-326h-f8q9\n * GO-2026-4845 CVE-2026-4404 GHSA-hj7x-hmf2-hc2p\n * GO-2026-4846 CVE-2026-33677 GHSA-7c2g-p23p-4jg3\n * GO-2026-4847 CVE-2026-33676 GHSA-8cmm-j6c4-rr8v\n * GO-2026-4848 CVE-2026-33680 GHSA-8hp8-9fhr-pfm9\n * GO-2026-4849 CVE-2026-33668 GHSA-94xm-jj8x-3cr4\n * GO-2026-4850 CVE-2026-33700 GHSA-f95f-77jx-fcjc\n * GO-2026-4851 CVE-2026-33675 GHSA-g66v-54v9-52pr\n * GO-2026-4852 CVE-2026-33679 GHSA-g9xj-752q-xh63\n * GO-2026-4853 CVE-2026-33678 GHSA-jfmm-mjcp-8wq2\n * GO-2026-4854 CVE-2026-24516 GHSA-fh3m-562m-w4f6\n * GO-2026-4855 GHSA-2pv8-4c52-mf8j\n * GO-2026-4856 CVE-2026-33726 GHSA-hxv8-4j4r-cqgv\n * GO-2026-4857 CVE-2026-33729 GHSA-h6c8-cww8-35hf\n * GO-2026-4860 CVE-2026-33757 GHSA-7q7g-x6vg-xpc3\n * GO-2026-4861 CVE-2019-8400 GHSA-7v6r-w4r6-mhch\n * GO-2026-4862 CVE-2026-33758 GHSA-cpj3-3r2f-xj59\n- Update to version 0.0.20260317T205859 2026-03-17T20:58:59Z.\n * GO-2026-4360 CVE-2026-0528 GHSA-w2gr-585j-r428\n * GO-2026-4513\n * GO-2026-4514\n * GO-2026-4518\n * GO-2026-4526\n * GO-2026-4549 CVE-2026-24005 GHSA-9fj4-3849-rv9g\n * GO-2026-4550 CVE-2026-1229 GHSA-q9hv-hpm4-hj6x\n * GO-2026-4551 CVE-2026-27575 GHSA-3ccg-x393-96v8\n * GO-2026-4552 CVE-2026-27116 GHSA-4qgr-4h56-8895\n * GO-2026-4553 CVE-2026-27616 GHSA-7jp5-298q-jg98\n * GO-2026-4554 CVE-2026-27730 GHSA-p2v6-84h2-5x4r\n * GO-2026-4556 CVE-2026-27819 GHSA-42wg-38gx-85rh\n * GO-2026-4557 CVE-2026-26186 GHSA-49xw-vfc4-7p43\n * GO-2026-4558 CVE-2026-27808 GHSA-mpf7-p9x7-96r3\n * GO-2026-4560 CVE-2026-27465 GHSA-2v6m-6xw3-6467\n * GO-2026-4561 CVE-2026-25963 GHSA-5jvp-m9h4-253h\n * GO-2026-4562 CVE-2026-27900 GHSA-5rc7-2jj6-mp64\n * GO-2026-4563 CVE-2026-24004 GHSA-9pm7-6g36-6j78\n * GO-2026-4564 CVE-2026-23999 GHSA-ppwx-5jq7-px2w\n * GO-2026-4565 CVE-2026-22728 GHSA-465p-v42x-3fmj\n * GO-2026-4566 CVE-2026-27899 GHSA-5rmx-256w-8mj9\n * GO-2026-4567 CVE-2026-27965 GHSA-8g8j-r87h-p36x\n * GO-2026-4568 GHSA-gj6x-q8rh-wj6x\n * GO-2026-4569 CVE-2026-27896 GHSA-wvj2-96wp-fq3f\n * GO-2026-4570 CVE-2026-27969 GHSA-r492-hjgh-c9gw\n * GO-2026-4571 CVE-2026-27734 GHSA-phwh-4f42-gwf3\n * GO-2026-4572 CVE-2026-27946 GHSA-282g-fhmx-xf54\n * GO-2026-4573 CVE-2026-27840 GHSA-6mq3-xmgp-pjm5\n * GO-2026-4574 CVE-2026-27945 GHSA-7777-fhq9-592v\n * GO-2026-4575 CVE-2026-28268 GHSA-rfjg-6m84-crj2\n * GO-2026-4576 CVE-2026-28280 GHSA-4rv8-5cmm-2r22\n * GO-2026-4577 CVE-2026-28407 GHSA-945p-3jhm-6rcp\n * GO-2026-4578 CVE-2025-14443 GHSA-gxvv-45f6-3ch8\n * GO-2026-4579 CVE-2026-28279 GHSA-rchw-322g-f7rm\n * GO-2026-4580 CVE-2026-28406 GHSA-6rxq-q92g-4rmf\n * GO-2026-4581 GHSA-xfx2-prg5-jq3g\n * GO-2026-4583 GHSA-54p8-x2m9-c593\n * GO-2026-4584 CVE-2026-28342 GHSA-pc8g-78pf-4xrp\n * GO-2026-4585 CVE-2026-28492 GHSA-mr74-928f-rw69\n * GO-2026-4586 CVE-2026-28789 GHSA-45m3-398w-m2m9\n * GO-2026-4587 CVE-2026-28790 GHSA-4fqm-6fmh-82mq\n * GO-2026-4588 CVE-2026-29049 GHSA-7rp8-r62p-q6wc\n * GO-2026-4589 CVE-2021-25320 GHSA-gqf8-rvrh-g7w6\n * GO-2026-4590 GHSA-hwm2-4ph6-w6m5\n * GO-2026-4591 CVE-2025-62879 GHSA-wj3p-5h3x-c74q\n * GO-2026-4592 CVE-2026-29073 GHSA-jqwg-75qf-vmf9\n * GO-2026-4593 CVE-2026-26998 GHSA-fw45-f5q2-2p4x\n * GO-2026-4594 CVE-2026-26999 GHSA-xw98-5q62-jx94\n * GO-2026-4595 CVE-2026-3351 GHSA-crmg-9m86-636r\n * GO-2026-4596 CVE-2026-29183 GHSA-6865-qjcf-286f\n * GO-2026-4597 CVE-2026-29054 GHSA-92mv-8f8w-wq52\n * GO-2026-4598 CVE-2026-29042 GHSA-95fj-3w7g-4r27\n * GO-2026-4599 CVE-2026-27137\n * GO-2026-4600 CVE-2026-27138\n * GO-2026-4601 CVE-2026-25679\n * GO-2026-4602 CVE-2026-27139\n * GO-2026-4603 CVE-2026-27142\n * GO-2026-4604 CVE-2026-29193 GHSA-25rw-g6ff-fmg8\n * GO-2026-4605 CVE-2026-29192 GHSA-6rx5-m2rc-hmf7\n * GO-2026-4606 CVE-2026-29188 GHSA-79pf-vx4x-7jmm\n * GO-2026-4607 CVE-2026-29191 GHSA-pr34-2v5x-6qjq\n * GO-2026-4608 CVE-2026-29771 GHSA-rhr9-hgcm-x289\n * GO-2026-4609 CVE-2026-29781 GHSA-hx52-cv84-jr5v\n * GO-2026-4610 CVE-2025-15558 GHSA-p436-gjf2-799p\n * GO-2026-4612 CVE-2026-28683 GHSA-3c22-5j5m-4jq7\n * GO-2026-4613 CVE-2026-28682 GHSA-c36c-7pc2-f2ph\n * GO-2026-4614 CVE-2026-27944 GHSA-g9w5-qffc-6762\n * GO-2026-4615 CVE-2026-29060 GHSA-m2hx-wjxc-9fp4\n * GO-2026-4616 CVE-2026-25921 GHSA-cj4v-437j-jq4c\n * GO-2026-4617 CVE-2026-26194 GHSA-v9vm-r24h-6rqm\n * GO-2026-4618 CVE-2026-26195 GHSA-vgvf-m4fw-938j\n * GO-2026-4619 CVE-2026-26196 GHSA-x9p5-w45c-7ffc\n * GO-2026-4620 CVE-2026-26022 GHSA-xrcr-gmf5-2r8j\n * GO-2026-4621 GHSA-fwhj-785h-43hh\n * GO-2026-4622 CVE-2026-30223 GHSA-g962-2j28-3cg9\n * GO-2026-4623 CVE-2026-30224 GHSA-gq2m-77hf-vwgh\n * GO-2026-4624 CVE-2026-29084 GHSA-hcff-qv74-7hr4\n * GO-2026-4625 CVE-2026-30225 GHSA-p443-p7w5-2f7f\n * GO-2026-4626 CVE-2026-29061 GHSA-q658-hfpg-35qc\n * GO-2026-4627 CVE-2026-26276 GHSA-vgjm-2cpf-4g7c\n * GO-2026-4628 CVE-2026-30247 GHSA-595m-wc8g-6qgc\n * GO-2026-4629 CVE-2026-30233 GHSA-jf73-858c-54pg\n * GO-2026-4630 CVE-2026-26017 GHSA-c9v3-4pv7-87pr\n * GO-2026-4631 CVE-2026-30834 GHSA-rw8p-c6hf-q3pg\n * GO-2026-4634 CVE-2026-30832 GHSA-3fvx-xrxq-8jvv\n * GO-2026-4635 CVE-2026-26018 GHSA-h75p-j8xm-m278\n * GO-2026-4636 CVE-2026-29064 GHSA-hcm4-6hpj-vghm\n * GO-2026-4637 CVE-2026-30859 GHSA-2f4c-vrjq-rcgv\n * GO-2026-4638 CVE-2026-30856 GHSA-67q9-58vj-32qx\n * GO-2026-4639 CVE-2026-30851 GHSA-7r4p-vjf4-gxv4\n * GO-2026-4640 CVE-2026-30857 GHSA-8rf9-c59g-f82f\n * GO-2026-4641 CVE-2026-30860 GHSA-8w32-6mrw-q5wv\n * GO-2026-4642 CVE-2026-30855 GHSA-ccj6-79j6-cq5q\n * GO-2026-4643 CVE-2026-30858 GHSA-h6gw-8f77-mmmp\n * GO-2026-4644 CVE-2026-30852 GHSA-m2w3-8f23-hxxf\n * GO-2026-4645 CVE-2026-30861 GHSA-r55h-3rwj-hcmg\n * GO-2026-4646 CVE-2026-30869 GHSA-2h2p-mvfx-868w\n * GO-2026-4647 GHSA-qr2g-p6q7-w82m\n * GO-2026-4651 CVE-2026-29196 GHSA-4hgg-c4rr-6h7f\n * GO-2026-4652 CVE-2026-29773 GHSA-6r7f-3fwq-hq74\n * GO-2026-4653 CVE-2026-28512 GHSA-9h33-g3ww-mqff\n * GO-2026-4654 CVE-2026-29195 GHSA-ch3w-9456-38v3\n * GO-2026-4655 CVE-2026-29194 GHSA-hmqr-wjmj-376c\n * GO-2026-4656 CVE-2026-28513 GHSA-qh6q-598w-w6m2\n * GO-2026-4658 CVE-2026-30926 GHSA-f9cq-v43p-v523\n * GO-2026-4659 CVE-2026-30933 GHSA-525j-95gf-766f\n * GO-2026-4660 CVE-2026-30934 GHSA-r633-fcgp-m532\n * GO-2026-4661 GHSA-xv8g-fj9h-6gmv\n * GO-2026-4667 CVE-2026-31807 GHSA-5hc8-qmg8-pw27\n * GO-2026-4668 CVE-2026-31801 GHSA-85jx-fm8m-x8c6\n * GO-2026-4669 CVE-2026-31809 GHSA-pmc9-f5qr-2pcr\n * GO-2026-4670 CVE-2026-31817 GHSA-364q-w7vh-vhpc\n * GO-2026-4671 CVE-2026-31959 GHSA-7q3q-5px6-4c5p\n * GO-2026-4672 CVE-2026-31960 GHSA-g32c-4pvp-769g\n * GO-2026-4673 GHSA-j443-wcqq-xprh\n * GO-2026-4674 CVE-2026-31866 GHSA-rmrf-g9r3-73pm\n * GO-2026-4675 CVE-2026-31961 GHSA-xj69-m9qq-8m94\n * GO-2026-4677 GHSA-54gx-3cgr-7mfm\n * GO-2026-4678 CVE-2026-28229 GHSA-56px-hm34-xqj5\n * GO-2026-4679 CVE-2026-29777 GHSA-8q2w-wr49-whqj\n * GO-2026-4680 CVE-2026-31863 GHSA-vv3h-7qwr-722v\n * GO-2026-4681 CVE-2026-31892 GHSA-3wf5-g532-rcrr\n * GO-2026-4683 CVE-2026-32102 GHSA-228v-wc5r-j8m7\n * GO-2026-4684 GHSA-4hjq-9h5c-252j\n * GO-2026-4685 CVE-2026-32110 GHSA-56cv-c5p2-j2wg\n * GO-2026-4686 CVE-2026-32136 GHSA-5fg6-wrq4-w5gh\n * GO-2026-4687 GHSA-xx6g-43w2-9g6g\n * GO-2026-4688 CVE-2026-32246 GHSA-3q28-qjrv-qr39\n * GO-2026-4689 CVE-2026-32245 GHSA-xg2q-62g2-cvcm\n * GO-2026-4690 CVE-2026-2808 GHSA-cpfq-66p2-336j\n * GO-2026-4691 CVE-2026-32320 GHSA-j478-p7vq-3347\n * GO-2026-4692 CVE-2026-32319 GHSA-m9pm-w3gv-c68f\n * GO-2026-4693 CVE-2026-31886 GHSA-m4q3-457p-hh2x\n * GO-2026-4694 CVE-2026-32614 GHSA-5xxp-2vrj-x855\n * GO-2026-4695 CVE-2026-30961 GHSA-45vh-rpc8-hxpp\n * GO-2026-4696 CVE-2026-30943 GHSA-j6jp-78w8-34x6\n * GO-2026-4697 CVE-2026-30915 GHSA-m83q-5wr4-4gfp\n * GO-2026-4698 CVE-2026-30955 GHSA-qwc6-vc2v-2ggj\n * GO-2026-4699 CVE-2026-30914 GHSA-x8qh-7475-c5mp\n- Update to version 0.0.20260226T182644 2026-02-26T18:26:44Z.\n * GO-2025-4259 CVE-2025-13767 GHSA-fmqf-pmcm-8cx9\n * GO-2025-4260 CVE-2025-64641 GHSA-vww6-79rv-3j4x\n * GO-2026-4282 CVE-2017-18873 GHSA-x6mw-hf2j-vqpc\n * GO-2026-4305 CVE-2017-18903 GHSA-fcwg-45jh-5qhf\n * GO-2026-4325 CVE-2025-14822 GHSA-9r42-rhw3-2222\n * GO-2026-4326 CVE-2025-14435 GHSA-mx8m-v8qm-xwr8\n * GO-2026-4332 CVE-2026-23644 GHSA-2657-3c98-63jq\n * GO-2026-4348 CVE-2026-23991 GHSA-846p-jg2w-w324\n * GO-2026-4349 CVE-2026-23992 GHSA-fphv-w9fq-2525\n * GO-2026-4377 CVE-2026-24686 GHSA-jqc5-w2xx-5vq4\n * GO-2026-4410 CVE-2026-25140 GHSA-f4w5-5xv9-85f6\n * GO-2026-4502 CVE-2026-25766 GHSA-pgvm-wxw2-hrv9\n * GO-2026-4534 CVE-2026-25899 GHSA-2mr3-m5q5-wgp6\n * GO-2026-4535 CVE-2026-27585 GHSA-4xrr-hq4w-6vf4\n * GO-2026-4536 CVE-2026-27590 GHSA-5r3v-vc8m-m96g\n * GO-2026-4537 CVE-2026-27589 GHSA-879p-475x-rqh2\n * GO-2026-4538 CVE-2026-27587 GHSA-g7pc-pc7g-h8jh\n * GO-2026-4539 CVE-2026-27586 GHSA-hffm-g8v7-wrv7\n * GO-2026-4540 CVE-2026-25891 GHSA-m3c2-496v-cw3v\n * GO-2026-4541 CVE-2026-27588 GHSA-x76f-jf84-rqj8\n * GO-2026-4543 CVE-2026-25882 GHSA-mrq8-rjmw-wpq3\n * GO-2026-4559 CVE-2026-27141\n- Update to version 0.0.20260225T230704 2026-02-25T23:07:04Z.\n * GO-2026-4358 CVE-2026-24137 GHSA-fcv2-xgw5-pqxf\n * GO-2026-4361 GHSA-c32p-wcqj-j677\n * GO-2026-4394 CVE-2026-24051 GHSA-9h8m-3fm2-qjrq\n * GO-2026-4399 CVE-2026-25518 GHSA-gx3x-vq4p-mhhv\n * GO-2026-4507 CVE-2026-26314 GHSA-2gjw-fg97-vg3r\n * GO-2026-4508 CVE-2026-26313 GHSA-689v-6xwf-5jf3\n * GO-2026-4509 CVE-2026-27017 GHSA-7m29-f4hw-g2vx\n * GO-2026-4511 CVE-2026-26315 GHSA-m6j8-rg6r-7mv8\n * GO-2026-4512 CVE-2026-26995 GHSA-rrxv-pmq9-x67r\n * GO-2026-4531 CVE-2026-25591 GHSA-w6x6-9fp7-fqm4\n * GO-2026-4532 CVE-2026-25802 GHSA-299v-8pq9-5gjq\n * GO-2026-4533 CVE-2026-27571 GHSA-qrvq-68c2-7grw\n * GO-2026-4542 CVE-2026-27598 GHSA-6v48-fcq6-ff23\n * GO-2026-4545 CVE-2025-50180 GHSA-3c9r-837r-qqm4\n * GO-2026-4546 CVE-2026-27611 GHSA-8vrh-3pm2-v4v6\n * GO-2026-4547 CVE-2026-27626 GHSA-49gm-hh7w-wfvf\n * GO-2026-4548 GHSA-2phg-qgmm-r638\n- Update to version 0.0.20260223T182315 2026-02-23T18:23:15Z.\n * GO-2026-4392 CVE-2026-24845 GHSA-9m43-p3cx-w8j5\n * GO-2026-4434 CVE-2023-43635 GHSA-4jvr-vj2c-8q37\n * GO-2026-4435 CVE-2023-43636 GHSA-5h7v-g49c-h887\n * GO-2026-4436 CVE-2023-43637 GHSA-g7vp-j25f-h34p\n * GO-2026-4442 GHSA-x9p2-77v6-6vhf\n * GO-2026-4444 CVE-2026-23989 GHSA-9j2f-3rj3-wgpg\n * GO-2026-4445 CVE-2026-25760 GHSA-2286-hxv5-cmp2\n * GO-2026-4446 CVE-2026-24851 GHSA-jq9f-gm9w-rwm9\n * GO-2026-4447 GHSA-vf5j-r2hw-2hrw\n * GO-2026-4448 CVE-2025-64111 GHSA-gg64-xxr9-qhjp\n * GO-2026-4449 CVE-2025-64175 GHSA-p6x6-9mx6-26wj\n * GO-2026-4450 CVE-2026-23632 GHSA-5qhx-gwfj-6jqr\n * GO-2026-4451 CVE-2026-22592 GHSA-cr88-6mqm-4g57\n * GO-2026-4452 CVE-2026-24135 GHSA-jp7c-wj6q-3qf2\n * GO-2026-4453 CVE-2026-23633 GHSA-mrph-w4hh-gx3g\n * GO-2026-4454 GHSA-26gq-grmh-6xm6\n * GO-2026-4455 CVE-2025-70963 GHSA-9f8m-9547-2gqm\n * GO-2026-4456 CVE-2025-13523 GHSA-ffx7-34p2-vm3w\n * GO-2026-4457 CVE-2025-65852 GHSA-rjv5-9px2-fqw6\n * GO-2026-4458 CVE-2026-25793 GHSA-69x3-g4r3-p962\n * GO-2026-4459 CVE-2017-18907 GHSA-42x9-rr3c-gr59\n * GO-2026-4460 CVE-2017-18918 GHSA-5ghq-28r7-qwfj\n * GO-2026-4461 CVE-2026-25804 GHSA-86x4-wp9f-wrr9\n * GO-2026-4462 CVE-2017-18915 GHSA-hxxj-8phw-74vw\n * GO-2026-4463 CVE-2017-18917 GHSA-jxc4-w54c-qv5r\n * GO-2026-4464 CVE-2017-18911 GHSA-m462-mqw4-2c8m\n * GO-2026-4465 GHSA-vhvq-fv9f-wh4q\n * GO-2026-4466 CVE-2026-25791 GHSA-wxrw-gvg8-fqjp\n * GO-2026-4467 CVE-2017-18916 GHSA-x33g-375j-jhf7\n * GO-2026-4471 CVE-2025-66630 GHSA-68rr-p4fp-j59v\n * GO-2026-4473 CVE-2026-25934 GHSA-37cx-329c-33x3\n * GO-2026-4474 CVE-2026-25890 GHSA-4mh3-h929-w968\n * GO-2026-4475 CVE-2026-25889 GHSA-hxw8-4h9j-hq2r\n * GO-2026-4476 CVE-2017-18908 GHSA-34cx-hvm4-vx7j\n * GO-2026-4477 CVE-2017-18906 GHSA-fpcr-4rr5-hpcp\n * GO-2026-4478 CVE-2017-18909 GHSA-r6j5-fqx9-7qv9\n * GO-2026-4479 CVE-2026-26014 GHSA-9f3f-wv7r-qc8r\n * GO-2026-4480 CVE-2026-25935 GHSA-m4g2-2q66-vc9v\n * GO-2026-4481 CVE-2026-26190 GHSA-7ppg-37fh-vcr6\n * GO-2026-4483 CVE-2026-21438 GHSA-2f2x-8mwp-p2gc\n * GO-2026-4484 CVE-2026-25949 GHSA-89p3-4642-cr2w\n * GO-2026-4485 CVE-2026-21434 GHSA-g6x7-jq8p-6q9q\n * GO-2026-4486 CVE-2026-24895 GHSA-g966-83w7-6w38\n * GO-2026-4487 CVE-2017-18912 GHSA-m2ch-x2q7-2284\n * GO-2026-4488 CVE-2026-21435 GHSA-px4r-g4p3-hhqv\n * GO-2026-4489 CVE-2026-24894 GHSA-r3xh-3r3w-47gp\n * GO-2026-4490 CVE-2025-67860 GHSA-3c9m-gq32-g4jx\n * GO-2026-4491 CVE-2026-26055 GHSA-965m-v4cc-6334\n * GO-2026-4493 CVE-2026-26056 GHSA-wj8p-jj64-h7ff\n * GO-2026-4494 CVE-2026-26187 GHSA-699m-4v95-rmpm\n * GO-2026-4495 CVE-2026-20796 GHSA-2xf7-hmf6-p64j\n * GO-2026-4496 CVE-2026-22892 GHSA-9pj7-jh2r-87g8\n * GO-2026-4497 GHSA-hr7j-63v7-vj7g\n * GO-2026-4498 CVE-2026-25232 GHSA-2c6v-8r3v-gh6p\n * GO-2026-4499 CVE-2026-25229 GHSA-cv22-72px-f4gh\n * GO-2026-4500 CVE-2026-25242 GHSA-fc3h-92p8-h36f\n * GO-2026-4501 CVE-2026-25120 GHSA-jj5m-h57j-5gv7\n * GO-2026-4503 CVE-2026-26958\n * GO-2026-4504 CVE-2026-26201 GHSA-f5p9-j34q-pwcc\n * GO-2026-4505 CVE-2026-26957 GHSA-wgm6-9rvv-3438\n * GO-2026-4506 CVE-2026-26205 GHSA-9f29-v6mm-pw6w\n * GO-2026-4515 CVE-2026-27111 GHSA-5vvm-67pj-72g4\n * GO-2026-4516 CVE-2026-27112 GHSA-7g9x-cp9g-92mr\n * GO-2026-4517 CVE-2026-24834 GHSA-wwj6-vghv-5p64\n * GO-2026-4519 CVE-2026-0997 GHSA-2phx-frhf-xr55\n * GO-2026-4520 CVE-2026-0999 GHSA-3c9r-7f29-qp32\n * GO-2026-4521 CVE-2025-14350 GHSA-57cc-2pf4-mhmx\n * GO-2026-4522 CVE-2026-26963 GHSA-5r23-prx4-mqg3\n * GO-2026-4523 CVE-2025-14573 GHSA-cgjg-p2m2-qm4p\n * GO-2026-4524 CVE-2025-13821 GHSA-pp9j-pf5c-659x\n * GO-2026-4525 CVE-2026-0998 GHSA-w65c-fvp5-fvc5\n * GO-2026-4527 GHSA-6qr9-g2xw-cw92\n * GO-2026-4528 GHSA-j9wf-6r2x-hqmx\n * GO-2026-4529 CVE-2026-24122 GHSA-wfqv-66vq-46rm\n * GO-2026-4530 GHSA-gv8r-9rw9-9697\n- Update to version 0.0.20260205T172317 2026-02-05T17:23:17Z.\n * GO-2026-4337 CVE-2025-68121\n * GO-2026-4357 CVE-2026-23954 GHSA-7f67-crqm-jgh7\n * GO-2026-4359 CVE-2026-23953 GHSA-x6jc-phwx-hp32\n * GO-2026-4395 CVE-2026-25499 GHSA-gwch-7m8v-7544\n * GO-2026-4396 CVE-2026-25059 GHSA-qmj2-8r24-xxcq\n * GO-2026-4397 CVE-2026-25060 GHSA-wf93-3ghh-h389\n * GO-2026-4398 GHSA-grh9-37g7-53mj\n * GO-2026-4403 CVE-2025-22873\n * GO-2026-4404 CVE-2025-70849 GHSA-mw8w-q3f7-2v85\n * GO-2026-4405 CVE-2026-25121 GHSA-5g94-c2wx-8pxw\n * GO-2026-4406 CVE-2026-25122 GHSA-6p9p-q6wh-9j89\n * GO-2026-4407 CVE-2026-24843 GHSA-qxx2-7h4c-83f4\n * GO-2026-4408 CVE-2026-24844 GHSA-vqqr-rmpc-hhg2\n * GO-2026-4409 CVE-2026-25145 GHSA-2w4f-9fgg-q2v9\n * GO-2026-4411 CVE-2026-25579 GHSA-hrr4-3wgr-68x3\n * GO-2026-4412 CVE-2026-25143 GHSA-rf4g-89h5-crcr\n * GO-2026-4413 CVE-2026-25578 GHSA-rh3r-8pxm-hg4w\n * GO-2026-4414 CVE-2026-25160 GHSA-8jmm-3xwx-w974\n * GO-2026-4415 CVE-2026-25161 GHSA-x4q4-7phh-42j9\n * GO-2026-4416 CVE-2026-25538 GHSA-8wpc-j9q9-j5m2\n * GO-2026-4417 CVE-2026-24514 GHSA-2pf9-vr92-6h3v\n * GO-2026-4418 CVE-2023-43631 GHSA-3mq9-xhgq-r7gj\n * GO-2026-4419 CVE-2026-24513 GHSA-4g2f-xcph-2335\n * GO-2026-4421 CVE-2026-24735 GHSA-5w5r-8xc6-2xhw\n * GO-2026-4422 CVE-2023-43632 GHSA-6jp5-grgh-jw42\n * GO-2026-4423 CVE-2026-1580 GHSA-9h3p-52vh-959w\n * GO-2026-4425 CVE-2025-62878 GHSA-jr3w-9vfr-c746\n * GO-2026-4426 CVE-2026-24512 GHSA-jx8c-56mg-h6vp\n * GO-2026-4428 CVE-2023-43633 GHSA-4c4v-42hc-72p6\n * GO-2026-4430 CVE-2023-43630 GHSA-phcg-h58r-gmcq\n * GO-2026-4432 CVE-2023-43634 GHSA-wc42-fcjp-v8vq\n * GO-2026-4433 CVE-2025-61732\n * GO-2026-4440 CVE-2025-47911\n * GO-2026-4441 CVE-2025-58190\n- Update to version 0.0.20260204T190754 2026-02-04T19:07:54Z.\n * GO-2026-4324 CVE-2026-23645 GHSA-pcjq-j3mq-jv5j\n * GO-2026-4327 CVE-2026-23742 GHSA-cc8m-98fm-rc9g\n * GO-2026-4329 CVE-2026-21696 GHSA-2497-gp99-2m74\n * GO-2026-4330 CVE-2026-22822 GHSA-77v3-r3jw-j2v2\n * GO-2026-4331 CVE-2025-69199 GHSA-8w7m-w749-rx98\n * GO-2026-4333 CVE-2026-23829 GHSA-54wq-72mp-cq7c\n * GO-2026-4334 CVE-2026-23517 GHSA-4r5r-ccr6-q6f6\n * GO-2026-4335 CVE-2026-23518 GHSA-63m5-974w-448v\n * GO-2026-4336 CVE-2026-22808 GHSA-gfpw-jgvr-cw4j\n * GO-2026-4343 CVE-2026-23847 GHSA-w836-5gpm-7r93\n * GO-2026-4344 CVE-2026-23849 GHSA-43mm-m3h2-3prc\n * GO-2026-4345 CVE-2026-23845 GHSA-6jxm-fv7w-rw5j\n * GO-2026-4346 CVE-2026-23851 GHSA-94c7-g2fj-7682\n * GO-2026-4347 CVE-2026-23850 GHSA-cv54-7wv7-qxcw\n * GO-2026-4350 CVE-2026-23960 GHSA-cv78-6m8q-ph82\n * GO-2026-4351 CVE-2026-23990 GHSA-4xh5-jcj2-ch8q\n * GO-2026-4352 GHSA-r92c-9c7f-3pj8\n * GO-2026-4353 CVE-2026-24058 GHSA-pchf-49fh-w34r\n * GO-2026-4354 CVE-2026-23831 GHSA-273p-m2cw-6833\n * GO-2026-4355 CVE-2026-24117 GHSA-4c4x-jm2x-pf9j\n * GO-2026-4356 CVE-2026-24124 GHSA-j8hf-cp34-g4j7\n * GO-2026-4362 CVE-2026-20800 GHSA-2vgv-hgv4-22mh\n * GO-2026-4363 CVE-2026-20897 GHSA-393c-qgvj-3xph\n * GO-2026-4364 CVE-2026-20912 GHSA-4xx9-vc8v-87hv\n * GO-2026-4365 CVE-2026-0798 GHSA-8fwc-qjw5-rvgp\n * GO-2026-4366 CVE-2026-20888 GHSA-9cgq-wp42-4rpq\n * GO-2026-4367 CVE-2026-20736 GHSA-hgr3-x44x-33hx\n * GO-2026-4368 CVE-2026-20883 GHSA-j8xr-c56q-m8jj\n * GO-2026-4369 CVE-2026-20904 GHSA-qqgv-v353-cv8p\n * GO-2026-4370 CVE-2026-20750 GHSA-rw22-5hhq-pfpf\n * GO-2026-4378 CVE-2026-24470 GHSA-mxxc-p822-2hx9\n * GO-2026-4379 CVE-2026-24738 GHSA-j49h-6577-5xwq\n * GO-2026-4380 CVE-2026-24740 GHSA-m855-r557-5rc5\n * GO-2026-4381 CVE-2026-22039 GHSA-8p9x-46gm-qfx2\n * GO-2026-4382 CVE-2026-23881 GHSA-r2rj-wwm5-x6mq\n * GO-2026-4384 CVE-2025-14525 GHSA-25mh-hp8x-cgrv\n * GO-2026-4385 CVE-2026-24748 GHSA-w5wv-wvrp-v5m5\n * GO-2026-4386 GHSA-f72r-2h5j-7639\n * GO-2026-4387 GHSA-c4jr-5q7w-f6r9\n * GO-2026-4388 CVE-2026-1237 GHSA-j477-6vpg-6c8x\n * GO-2026-4390 CVE-2025-69820 GHSA-73jg-4qh6-3f4g\n * GO-2026-4391 CVE-2026-24846 GHSA-923j-vrcg-hxwh\n * GO-2026-4393 CVE-2025-67601 GHSA-mc24-7m59-4q5p\n- Update to version 0.0.20260128T190828 2026-01-28T19:08:28Z.\n * GO-2026-4338 CVE-2025-68119 CVE-2025-68119\n * GO-2026-4339 CVE-2025-61731 CVE-2025-61731\n * GO-2026-4340 CVE-2025-61730 CVE-2025-61730\n * GO-2026-4341 CVE-2025-61726 CVE-2025-61726\n * GO-2026-4342 CVE-2025-61728 CVE-2025-61728\n- Update to version 0.0.20260123T022811 2026-01-23T02:28:11Z.\n * GO-2025-3764 CVE-2024-44905 GHSA-6xp3-p59p-q4fj\n * GO-2025-4188 CVE-2025-65637 GHSA-4f99-4q7p-p3gh\n * GO-2025-4252 CVE-2025-68383 GHSA-2mj3-6grc-px38\n * GO-2025-4253 CVE-2025-68388 GHSA-fj69-23m4-ccvv\n * GO-2026-4310 CVE-2026-22689 GHSA-524m-q5m7-79mm\n * GO-2026-4311 CVE-2026-22772 GHSA-59jp-pj84-45mr\n * GO-2026-4312 CVE-2026-22771 GHSA-xrwg-mqj6-6m22\n * GO-2026-4313 CVE-2026-22786 GHSA-3558-j79f-vvm6\n * GO-2026-4314 CVE-2026-22868 GHSA-mq3p-rrmp-79jg\n * GO-2026-4315 CVE-2026-22862 GHSA-mr7q-c9w9-wh4h\n * GO-2026-4316 GHSA-mqqf-5wvp-8fh8\n * GO-2026-4317 CVE-2017-18892 GHSA-wj5w-qghh-gvqp\n * GO-2026-4318 CVE-2025-66292 GHSA-vh2x-fw87-4fxq\n * GO-2026-4319 CVE-2026-23511 GHSA-pvm5-9frx-264r\n * GO-2026-4320 CVE-2026-23520 GHSA-gjqq-6r35-w3r8\n * GO-2026-4321 CVE-2025-68671 GHSA-f2ph-gc9m-q55f\n * GO-2026-4322 CVE-2026-22045 GHSA-cwjm-3f7h-9hwq\n- Update to version 0.0.20260114T191543 2026-01-14T19:15:43Z.\n * GO-2025-4248 CVE-2025-62690 GHSA-q66g-q98c-q454\n * GO-2025-4251 CVE-2025-63389 GHSA-f6mr-38g8-39rg\n * GO-2026-4273 CVE-2025-14987 GHSA-hmhp-gh8m-c8xp\n- Update to version 0.0.20260113T164240 2026-01-13T16:42:40Z.\n * GO-2025-4269 CVE-2025-15107 GHSA-43h9-hc38-qph5\n * GO-2025-4272 CVE-2025-14986 GHSA-p2gr-hm8g-q772\n * GO-2026-4274 CVE-2025-69413 GHSA-pc73-rj2c-wvf9\n * GO-2026-4275 CVE-2025-14273 GHSA-qvmc-92vg-6r35\n * GO-2026-4277 CVE-2026-21483 GHSA-jmr4-p576-v565\n * GO-2026-4278 CVE-2024-6717 GHSA-5mqx-rpxv-mvxj\n * GO-2026-4279 GHSA-4c5f-9mj4-m247\n * GO-2026-4280 GHSA-hjr9-wj7v-7hv8\n * GO-2026-4281 CVE-2025-62877 GHSA-6g8q-hp2j-gvwv\n * GO-2026-4283 CVE-2025-68954 GHSA-8c39-xppg-479c\n * GO-2026-4284 CVE-2026-21859 GHSA-8v65-47jx-7mfr\n * GO-2026-4285 GHSA-gg4x-fgg2-h9w9\n * GO-2026-4286 CVE-2026-0650 GHSA-rwp9-5g7q-73q3\n * GO-2026-4287 CVE-2026-21885 GHSA-xwh2-742g-w3wp\n * GO-2026-4289 CVE-2025-68151 GHSA-527x-5wrf-22m2\n * GO-2026-4290 CVE-2026-22253 GHSA-6jm8-x3g6-r33j\n * GO-2026-4292 CVE-2026-22688 GHSA-78h3-63c4-5fqc\n * GO-2026-4293 CVE-2026-22687 GHSA-pcwc-3fw3-8cqv\n * GO-2026-4295 CVE-2017-18895 GHSA-h742-xx59-r9pq\n * GO-2026-4296 CVE-2017-18893 GHSA-887v-xh2x-47cm\n * GO-2026-4297 CVE-2017-18894 GHSA-gg42-mwr6-p82c\n * GO-2026-4298 CVE-2017-18891 GHSA-vrh2-rprg-rgc6\n * GO-2026-4299 CVE-2017-18896 GHSA-63wg-qmrv-7q66\n * GO-2026-4300 CVE-2017-18898 GHSA-9589-mq83-f749\n * GO-2026-4301 CVE-2017-18897 GHSA-f7c3-7vp3-44p6\n * GO-2026-4302 CVE-2017-18904 GHSA-8pff-p3gx-w4jf\n * GO-2026-4303 CVE-2017-18900 GHSA-8q4v-35v6-g8wr\n * GO-2026-4304 CVE-2017-18901 GHSA-c253-8hr4-r8v9\n * GO-2026-4306 CVE-2017-18905 GHSA-g24c-fx4v-xg9w\n * GO-2026-4308 CVE-2025-60538 GHSA-mw8h-g64c-rxv4\n * GO-2026-4309 CVE-2026-22703 GHSA-whqx-f9j3-ch6m\n- Update to version 0.0.20251230T014957 2025-12-30T01:49:57Z.\n * GO-2025-4249 CVE-2025-68120 CVE-2025-68120\n * GO-2025-4254 CVE-2025-62190 GHSA-gmx5-frv9-9m9f\n * GO-2025-4255 CVE-2025-12689 GHSA-j5vq-62gr-8v3r\n * GO-2025-4256 CVE-2025-13324 GHSA-x3r8-2hmh-89f5\n * GO-2025-4257 CVE-2025-68476 GHSA-c4p6-qg4m-9jmr\n * GO-2025-4258 CVE-2025-68938 GHSA-cm54-pfmc-xrwx\n * GO-2025-4261 CVE-2025-68939 GHSA-263q-5cv3-xq9g\n * GO-2025-4262 CVE-2025-68945 GHSA-7xq4-mwcp-q8fx\n * GO-2025-4263 CVE-2025-68942 GHSA-898p-hh3p-hf9r\n * GO-2025-4264 CVE-2025-68944 GHSA-f85h-c7m6-cfpm\n * GO-2025-4265 CVE-2025-68946 GHSA-hq57-c72x-4774\n * GO-2025-4266 CVE-2025-68943 GHSA-jhx5-4vr4-f327\n * GO-2025-4267 CVE-2025-68940 GHSA-rrcw-5rjv-vj26\n * GO-2025-4268 CVE-2025-68941 GHSA-xfq3-qj7j-4565\n- Update to version 0.0.20251222T181535 2025-12-22T18:15:35Z.\n * GO-2025-4241 CVE-2025-11393 GHSA-cc8c-28gj-px38\n * GO-2025-4242 CVE-2025-13888 GHSA-pcqx-8qww-7f4v\n * GO-2025-4243 GHSA-wh6m-h6f4-rjf4\n * GO-2025-4244 CVE-2025-68274 GHSA-c623-f998-8hhv\n * GO-2025-4245 CVE-2025-68156 GHSA-cfpf-hrx2-8rv6\n * GO-2025-4247 CVE-2025-13352 GHSA-jf5h-xfw4-p8gp\n * GO-2025-4250 CVE-2025-14764 GHSA-3g75-q268-r9r6\n- Update to version 0.0.20251216T193914 2025-12-16T19:39:14Z.\n * GO-2025-4239 CVE-2025-68113 GHSA-6gvq-jcmp-8959\n * GO-2025-4240 CVE-2025-13281 GHSA-r6j8-c6r2-37rr\n- Update to version 0.0.20251216T162327 2025-12-16T16:23:27Z.\n * GO-2024-3036 CVE-2024-41265 GHSA-vw7g-3cc7-7rmh\n * GO-2024-3057 CVE-2024-41260 GHSA-9v35-4xcr-w9ph\n * GO-2025-3437 GHSA-274v-mgcv-cm8j\n * GO-2025-3465 CVE-2025-0426 GHSA-jgfp-53c3-624w\n * GO-2025-3829 CVE-2025-54410 GHSA-4vq8-7jfc-9cvp\n * GO-2025-4116 CVE-2025-47913\n * GO-2025-4122 CVE-2025-11777 GHSA-mqcj-8c2g-h97q\n * GO-2025-4178 CVE-2025-13870 GHSA-58w6-w55x-6wq8\n- Update to version 0.0.20251215T203741 2025-12-15T20:37:41Z.\n * GO-2025-4136 CVE-2025-64708 GHSA-ch7q-53v8-73pc\n * GO-2025-4137 CVE-2025-64521 GHSA-xr73-jq5p-ch8r\n * GO-2025-4148 CVE-2017-18874 GHSA-8qg8-c7mw-6fj7\n * GO-2025-4154 CVE-2025-62155 GHSA-9f46-w24h-69w4\n * GO-2025-4161 CVE-2025-65942 GHSA-66jq-2c23-2xh5\n * GO-2025-4162 CVE-2025-60633 GHSA-3j9f-7w24-pcqg\n * GO-2025-4167 CVE-2025-64715 GHSA-38pp-6gcp-rqvm\n * GO-2025-4168 CVE-2025-12419 GHSA-3x39-62h4-f8j6\n * GO-2025-4169 CVE-2025-12559 GHSA-4g87-9x45-cx2h\n * GO-2025-4170 CVE-2025-12421 GHSA-mp6x-97xj-9x62\n * GO-2025-4173 CVE-2025-10543 GHSA-32fw-gq77-f2f2\n * GO-2025-4191 CVE-2017-18878 GHSA-h564-6gc2-fcc6\n * GO-2025-4199 CVE-2017-18887 GHSA-35c4-5qfp-wxj6\n * GO-2025-4200 CVE-2017-18885 GHSA-g78f-6xq7-rrhq\n * GO-2025-4201 CVE-2017-18889 GHSA-jp57-4x34-5v94\n * GO-2025-4202 CVE-2017-18890 GHSA-m497-hq5x-6jcv\n * GO-2025-4203 CVE-2017-18888 GHSA-v2vm-hq26-5jv6\n * GO-2025-4204 CVE-2017-18886 GHSA-wvjg-33p9-938h\n * GO-2025-4205 CVE-2025-66491 GHSA-7vww-mvcr-x6vj\n * GO-2025-4206 CVE-2025-66490 GHSA-gm3x-23wp-hc2c\n * GO-2025-4207 CVE-2025-66508 GHSA-7cqv-qcq2-r765\n * GO-2025-4208 CVE-2025-66565 GHSA-m98w-cqp3-qcqr\n * GO-2025-4209 CVE-2025-66507 GHSA-qmg5-v42x-qqhq\n * GO-2025-4210 CVE-2025-67494 GHSA-7wfc-4796-gmg5\n * GO-2025-4211 GHSA-m6wq-66p2-c8pc\n * GO-2025-4212 GHSA-pfrf-9r5f-73f5\n * GO-2025-4213 CVE-2025-67495 GHSA-v959-qxv6-6f8p\n * GO-2025-4214 GHSA-4rmq-mc2c-r495\n * GO-2025-4215 CVE-2025-65796 GHSA-8jcj-g9f4-qx42\n * GO-2025-4216 CVE-2025-65798 GHSA-8p44-g572-557h\n * GO-2025-4217 CVE-2025-65795 GHSA-mg56-wc4q-rw4w\n * GO-2025-4218 CVE-2025-65799 GHSA-qgjp-5g5x-vhq2\n * GO-2025-4219 GHSA-4r66-7rcv-x46x\n * GO-2025-4220 CVE-2025-65797 GHSA-99m2-qwx6-2w6f\n * GO-2025-4221 CVE-2025-67488 GHSA-gqfv-g4v7-m366\n * GO-2025-4222 CVE-2025-67499 GHSA-jv3w-x3r3-g6rm\n * GO-2025-4223 CVE-2025-66626 GHSA-xrqc-7xgx-c9vh\n * GO-2025-4224 GHSA-mjcp-gpgx-ggcg\n * GO-2025-4225 CVE-2025-8110 GHSA-mq8m-42gh-wq7r\n * GO-2025-4226 CVE-2025-67713 GHSA-wqv2-4wpg-8hc9\n * GO-2025-4227 CVE-2025-67717 GHSA-f4cf-9rvr-2rcx\n * GO-2025-4228 CVE-2025-65754 GHSA-8jqm-8qm3-qgqm\n * GO-2025-4229 CVE-2025-34410 GHSA-rpr2-4hqj-hc4q\n * GO-2025-4230 CVE-2025-34430 GHSA-5xpq-2vmc-5cqp\n * GO-2025-4231 CVE-2025-34429 GHSA-wrvc-x3wf-j5f5\n * GO-2025-4232 CVE-2025-67508 GHSA-fw33-qpx7-rhx2\n * GO-2025-4233 CVE-2025-64702 GHSA-g754-hx8w-x2g6\n * GO-2025-4235 CVE-2025-66001 GHSA-4jj9-cgqc-x9h5\n * GO-2025-4236 GHSA-4jmp-x7mh-rgmr\n * GO-2025-4237 CVE-2025-67818 GHSA-7v39-2hx7-7c43\n * GO-2025-4238 CVE-2025-67819 GHSA-hmmh-292h-3364\n- Update to version 0.0.20251209T172047 2025-12-09T17:20:47Z.\n * GO-2025-4006 CVE-2025-61725 CVE-2025-61725\n * GO-2025-4176 CVE-2025-65105 GHSA-j3rw-fx6g-q46j\n * GO-2025-4177 CVE-2025-64750 GHSA-wwrx-w7c9-rf87\n * GO-2025-4179 CVE-2025-64443 GHSA-46gc-mwh4-cc5r\n * GO-2025-4180 CVE-2025-44005 GHSA-h8cp-697h-8c8p\n * GO-2025-4181 CVE-2025-66406 GHSA-j7c9-79x7-8hpr\n * GO-2025-4182 CVE-2025-66411 GHSA-jf75-p25m-pw74\n * GO-2025-4183 CVE-2017-18870 GHSA-9j9j-mm2r-9rfm\n * GO-2025-4184 CVE-2017-18871 GHSA-jc6w-8r7f-vmp5\n * GO-2025-4185 CVE-2017-18902 GHSA-jwfv-5hwq-f97r\n * GO-2025-4186 CVE-2017-18875 GHSA-9rr5-q43r-ccv4\n * GO-2025-4187 CVE-2017-18876 GHSA-hjqh-j6rj-gh8q\n * GO-2025-4189 CVE-2017-18879 GHSA-498j-wxww-j897\n * GO-2025-4190 CVE-2017-18877 GHSA-9x8x-w6g5-hx4w\n * GO-2025-4192 CVE-2025-66564 GHSA-4qg8-fj49-pxjh\n * GO-2025-4193 CVE-2025-66506 GHSA-f83f-xpx7-ffpw\n * GO-2025-4197 CVE-2017-18884 GHSA-876j-jfqf-m7j7\n * GO-2025-4198 CVE-2017-18883 GHSA-w8cc-3h7q-jhc3\n- Update to version 0.0.20251203T174324 2025-12-03T17:43:24Z.\n * GO-2025-4155 CVE-2025-61729 CVE-2025-61729\n * GO-2025-4163 CVE-2025-60638 GHSA-f2hj-vpp9-6vm2\n * GO-2025-4164 CVE-2025-60632 GHSA-vgq7-9r5r-j9v3\n * GO-2025-4171 CVE-2025-66410 GHSA-jrhg-82w2-vvj7\n * GO-2025-4172 CVE-2025-12756 GHSA-p6gj-jc38-x2m7\n * GO-2025-4174 CVE-2025-13353 GHSA-69jw-4jj8-fcxm\n * GO-2025-4175 CVE-2025-61727\n- Update to version 0.0.20251125T181218 2025-11-25T18:12:18Z.\n * GO-2025-4133 CVE-2025-55074 GHSA-9hh7-6558-qfp2\n * GO-2025-4138 CVE-2025-65025 GHSA-h3mw-4f23-gwpw\n * GO-2025-4139 CVE-2025-65026 GHSA-hcpf-qv9m-vfgp\n * GO-2025-4146 CVE-2018-21258 GHSA-5mh6-p63g-3mv5\n * GO-2025-4147 GHSA-6xvf-4vh9-mw47\n * GO-2025-4149 CVE-2025-13425 GHSA-f786-75f3-74xj\n * GO-2025-4150 CVE-2025-64751 GHSA-2c64-vmv2-hgfc\n * GO-2025-4151 CVE-2025-65111 GHSA-9m7r-g8hg-x3vr\n * GO-2025-4152 CVE-2025-13357 GHSA-gmm6-j2g5-r52m\n * GO-2025-4153 CVE-2025-41115 GHSA-w62r-7c53-fmc5\n * GO-2025-4156 CVE-2025-64761 GHSA-7ff4-jw48-3436\n * GO-2025-4157 GHSA-2fcv-qww3-9v6h\n * GO-2025-4158 GHSA-rj4j-2jph-gg43\n * GO-2025-4159 GHSA-xq4h-wqm2-668w\n * GO-2025-4160 CVE-2025-65965 GHSA-6gxw-85q2-q646\n- Update to version 0.0.20251120T220319 2025-11-20T22:03:19Z.\n * GO-2023-2331 CVE-2023-47108 GHSA-8pgv-569h-w5rw\n * GO-2024-2587 CVE-2022-45786 GHSA-6p5q-h963-pwwf\n * GO-2025-3770 GHSA-vrw8-fxc6-2r93\n * GO-2025-4007 CVE-2025-58187 CVE-2025-58187\n * GO-2025-4134 CVE-2025-58181 GHSA-j5w8-q4qc-rx2x\n * GO-2025-4135 CVE-2025-47914 GHSA-f6x5-jh6r-wrfv\n- Update to version 0.0.20251118T154415 2025-11-18T15:44:15Z.\n * GO-2025-4025 GHSA-hrhf-2vcr-ghch\n * GO-2025-4090 CVE-2025-64179 GHSA-h238-5mwf-8xw8\n * GO-2025-4091 CVE-2025-64178 GHSA-xc93-q32j-cpcg\n * GO-2025-4093 CVE-2025-64171 GHSA-gf93-xccm-5g6j\n * GO-2025-4094 CVE-2025-64323 GHSA-4766-x535-jw3r\n * GO-2025-4095 GHSA-5pmx-7r6r-wfqq\n * GO-2025-4096 CVE-2025-31133 GHSA-9493-h29p-rfm2\n * GO-2025-4097 CVE-2025-52565 GHSA-qw9x-cqr3-wc7r\n * GO-2025-4098 CVE-2025-52881 GHSA-cgrx-mc8f-2prm\n * GO-2025-4099 CVE-2025-64431 GHSA-cpf4-pmr4-w6cx\n * GO-2025-4100 CVE-2024-25621 GHSA-pwhc-rpq9-4c8w\n * GO-2025-4101 GHSA-w2jf-268q-mrvh\n * GO-2025-4102 CVE-2025-64437 GHSA-2r4r-5x78-mvqf\n * GO-2025-4103 CVE-2025-64432 GHSA-38jw-g2qx-4286\n * GO-2025-4104 CVE-2025-64436 GHSA-7xgm-5prm-v5gc\n * GO-2025-4105 CVE-2025-64435 GHSA-9m94-w2vq-hcf9\n * GO-2025-4106 CVE-2025-64494 GHSA-fv2r-r8mp-pg48\n * GO-2025-4107 CVE-2025-64434 GHSA-ggp9-c99x-54gp\n * GO-2025-4108 CVE-2025-64329 GHSA-m6hq-p25p-ffr2\n * GO-2025-4109 CVE-2025-64433 GHSA-qw6q-3pgr-5cwq\n * GO-2025-4110 CVE-2025-64324 GHSA-46xp-26xh-hpqh\n * GO-2025-4111 CVE-2025-64522 GHSA-vwq2-jx9q-9h9f\n * GO-2025-4112 CVE-2025-64186 GHSA-88h9-77c7-p6w4\n * GO-2025-4113 CVE-2025-64484 GHSA-vjrc-mh2v-45x6\n * GO-2025-4114 CVE-2025-64513 GHSA-mhjq-8c7m-3f7p\n * GO-2025-4115 CVE-2025-64507 GHSA-56mx-8g9f-5crf\n * GO-2025-4117 CVE-2025-64523 GHSA-6cqf-cfhv-659g\n * GO-2025-4118 GHSA-6jqf-mv7m-3q7p\n * GO-2025-4119 GHSA-7wq2-32h4-9hc9\n * GO-2025-4120 CVE-2025-64529 GHSA-pm3x-jrhh-qcr7\n * GO-2025-4121 GHSA-3g2j-vm47-x4mj\n * GO-2025-4123 CVE-2025-63811 GHSA-9mj6-hxhv-w67j\n * GO-2025-4124 CVE-2025-64717 GHSA-j4g7-v4m4-77px\n * GO-2025-4125 CVE-2025-2843 GHSA-mj6p-p843-x5wc\n * GO-2025-4126 CVE-2025-11776 GHSA-j6gg-r5jc-47cm\n * GO-2025-4127 CVE-2024-21635 GHSA-mr34-8733-grr2\n * GO-2025-4128 CVE-2025-55070 GHSA-xpg8-8xpv-948p\n * GO-2025-4129 CVE-2025-55073 GHSA-ff85-qw3h-g9vp\n * GO-2025-4130 CVE-2025-11794 GHSA-mqp8-pgg5-7x7m\n * GO-2025-4131 CVE-2025-41436 GHSA-x3hx-ch7p-8xgg\n- Update to version 0.0.20251113T211203 2025-11-13T21:12:03Z.\n- Update to version 0.0.20251105T184115 2025-11-05T18:41:15Z.\n * GO-2025-3987 CVE-2025-10954 GHSA-fmjh-f678-cv3x\n * GO-2025-3988 CVE-2025-59937 GHSA-wpwj-69cm-q9c5\n * GO-2025-3999 CVE-2025-54289 GHSA-3g72-chj4-2228\n * GO-2025-4000 CVE-2025-54293 GHSA-472f-vmf2-pr3h\n * GO-2025-4001 CVE-2025-54288 GHSA-7232-97c6-j525\n * GO-2025-4002 CVE-2025-54290 GHSA-p3x5-mvmp-5f35\n * GO-2025-4003 CVE-2025-54286 GHSA-p8hw-rfjg-689h\n * GO-2025-4004 CVE-2025-54287 GHSA-w2hg-2v4p-vmh6\n * GO-2025-4005 CVE-2025-54291 GHSA-xch9-h8qw-85c7\n * GO-2025-4017 CVE-2025-59530 GHSA-47m2-4cr7-mhcw\n * GO-2025-4020 CVE-2025-11579 GHSA-rwvp-r38j-9rgg\n * GO-2025-4021 CVE-2025-59836 GHSA-4p3p-cr38-v5xp\n * GO-2025-4022 CVE-2025-61688 GHSA-77r9-w39m-9xh5\n * GO-2025-4023 CVE-2025-62156 GHSA-p84v-gxvw-73pf\n * GO-2025-4024 CVE-2025-62157 GHSA-c2hv-4pfj-mm2r\n * GO-2025-4026 CVE-2025-61524 GHSA-5m9m-j5p7-m7f9\n * GO-2025-4027 GHSA-fr8m-434r-g3xp\n * GO-2025-4028 CVE-2025-62375 GHSA-72c7-4g63-hpw5\n * GO-2025-4029 CVE-2025-41410 GHSA-3q4q-wqm6-hvf3\n * GO-2025-4030 CVE-2025-10545 GHSA-424h-xj87-m937\n * GO-2025-4031 CVE-2025-41443 GHSA-7cr3-38jm-6p45\n * GO-2025-4032 CVE-2025-58073 GHSA-6q7m-p8cc-998r\n * GO-2025-4033 CVE-2025-61581 GHSA-9m49-p2j3-c6xm\n * GO-2025-4034 CVE-2025-62506 GHSA-jjjj-jwhf-8rgr\n * GO-2025-4035 CVE-2025-58075 GHSA-r6qj-894f-5hr2\n * GO-2025-4036 CVE-2025-54499 GHSA-xr3w-rmvj-f6m7\n * GO-2025-4038 CVE-2025-26625 GHSA-6pvw-g552-53c5\n * GO-2025-4039 CVE-2025-59043 GHSA-g46h-2rq9-gw5m\n * GO-2025-4040 CVE-2025-10678 GHSA-g3j4-58mp-3x25\n * GO-2025-4041 GHSA-8pfh-j44r-f654\n * GO-2025-4042 CVE-2025-54469 GHSA-c8g6-qrwh-m3vp\n * GO-2025-4043 CVE-2025-54471 GHSA-h773-7gf7-9m2x\n * GO-2025-4044 CVE-2025-54470 GHSA-qqj3-g7mx-5p4w\n * GO-2025-4045 CVE-2016-11063 GHSA-cffj-7w5c-jqjh\n * GO-2025-4046 CVE-2016-11067 GHSA-ffcc-qr2v-3qmv\n * GO-2025-4047 CVE-2016-11066 GHSA-r93j-3mmp-px57\n * GO-2025-4048 CVE-2016-11068 GHSA-7vmw-6c7h-rrrv\n * GO-2025-4049 CVE-2025-62513 GHSA-ghfh-fmx4-26h8\n * GO-2025-4050 CVE-2016-11070 GHSA-h8qw-xqm9-q66j\n * GO-2025-4051 CVE-2016-11069 GHSA-qrf6-h5fc-7m96\n * GO-2025-4052 CVE-2025-62705 GHSA-rc54-2g2c-g36g\n * GO-2025-4053 CVE-2016-11079 GHSA-2j9c-76pp-xc5q\n * GO-2025-4054 CVE-2016-11076 GHSA-379p-37xc-q963\n * GO-2025-4055 CVE-2016-11072 GHSA-43m6-wvc8-2m7j\n * GO-2025-4056 CVE-2016-11073 GHSA-9jrx-fgrm-96qh\n * GO-2025-4057 CVE-2016-11078 GHSA-9w4v-9c99-hv7r\n * GO-2025-4058 CVE-2016-11071 GHSA-h3qg-w9j5-wh3m\n * GO-2025-4059 CVE-2016-11074 GHSA-j26g-95ph-2mwv\n * GO-2025-4060 CVE-2016-11077 GHSA-mj8v-773w-5qhj\n * GO-2025-4061 CVE-2016-11075 GHSA-q3g9-hgrx-hwhx\n * GO-2025-4062 CVE-2016-11081 GHSA-5q37-9874-qxcw\n * GO-2025-4063 CVE-2016-11080 GHSA-g3f3-p9rc-775p\n * GO-2025-4064 CVE-2016-11082 GHSA-m78r-2x6w-qqjp\n * GO-2025-4065 CVE-2016-11083 GHSA-rm24-25xm-9454\n * GO-2025-4066 CVE-2016-11084 GHSA-vw57-55f8-c73q\n * GO-2025-4067 CVE-2025-59048 GHSA-jp7h-4f3c-9rc7\n * GO-2025-4068 CVE-2025-62820 GHSA-x6fh-7qmf-69xh\n * GO-2025-4070 CVE-2025-11621 GHSA-9g4h-h484-3578\n * GO-2025-4071 CVE-2025-12044 GHSA-vp5w-xcfc-73wf\n * GO-2025-4072 CVE-2025-62714 GHSA-5qjg-9mjh-4r92\n * GO-2025-4073 CVE-2023-32199 GHSA-j4vr-pcmw-hx59\n * GO-2025-4074 CVE-2024-58269 GHSA-mw39-9qc2-f7mg\n * GO-2025-4075 CVE-2017-18872 GHSA-hgrp-fgm8-56g8\n * GO-2025-4076 CVE-2025-58356 GHSA-hq76-6gh2-5g4q\n * GO-2025-4077 CVE-2025-62725 GHSA-gv8h-7v7w-r22q\n * GO-2025-4078 GHSA-f5p4-p5q5-jv3h\n * GO-2025-4079 CVE-2025-27093 GHSA-q8j9-34qf-7vq7\n * GO-2025-4081 CVE-2025-11374 GHSA-7g3r-8c6v-hfmr\n * GO-2025-4082 CVE-2025-11375 GHSA-qh7p-pfq3-677h\n * GO-2025-4083 CVE-2025-64103 GHSA-cfjq-28r2-4jv5\n * GO-2025-4084 CVE-2025-64101 GHSA-mwmh-7px9-4c23\n * GO-2025-4085 CVE-2025-64102 GHSA-xrw9-r35x-x878\n * GO-2025-4086 GHSA-cf57-c578-7jvv\n * GO-2025-4087 GHSA-fj2x-735w-74vq\n * GO-2025-4088 CVE-2025-61141 GHSA-f9f4-5859-29mf\n- Update to version 0.0.20251029T215107 2025-10-29T21:51:07Z.\n * GO-2025-4008 CVE-2025-58189 CVE-2025-58189\n * GO-2025-4009 CVE-2025-61723 CVE-2025-61723\n * GO-2025-4010 CVE-2025-47912 CVE-2025-47912\n * GO-2025-4011 CVE-2025-58185 CVE-2025-58185\n * GO-2025-4012 CVE-2025-58186 CVE-2025-58186\n * GO-2025-4013 CVE-2025-58188 CVE-2025-58188\n * GO-2025-4014 CVE-2025-58183 CVE-2025-58183\n * GO-2025-4015 CVE-2025-61724 CVE-2025-61724\n- Update to version 0.0.20251023T162509 2025-10-23T16:25:09Z.\n * GO-2025-3979 CVE-2025-59824 GHSA-hqrf-67pm-wgfq\n * GO-2025-3981 CVE-2025-59823 GHSA-227x-7mh8-3cf6\n * GO-2025-3982 CVE-2025-54468 GHSA-mjcp-rj3c-36fr\n * GO-2025-3983 CVE-2024-58260 GHSA-q82v-h4rq-5c86\n * GO-2025-3984 CVE-2024-58267 GHSA-v3vj-5868-2ch2\n * GO-2025-3985 GHSA-q6hv-wcjr-wp8h\n * GO-2025-3986 CVE-2025-59163 GHSA-6q9c-m9fr-865m\n * GO-2025-3989 CVE-2025-59941 GHSA-7pq9-rf9p-wcrf\n * GO-2025-3990 CVE-2025-59942 GHSA-g99p-47x7-mq88\n * GO-2025-3991 CVE-2025-59956 GHSA-w64r-2g3w-w8w4\n * GO-2025-3992 CVE-2025-23266 GHSA-vmg3-7v43-9g23\n * GO-2025-3994 CVE-2025-55191 GHSA-g88p-r42r-ppp9\n * GO-2025-3995 CVE-2025-59538 GHSA-gpx4-37g2-c8pv\n * GO-2025-3997 CVE-2025-61595 GHSA-qwvm-wqq8-8j69\n * GO-2025-3998 CVE-2025-23267 GHSA-67jc-hmvg-q4c7\n * GO-2025-4018 CVE-2025-61926 GHSA-33f4-mjch-7fpr\n * GO-2025-4019 GHSA-xc79-566c-j4qx\n- Update to version 0.0.20250924T192141 2025-09-24T19:21:41Z.\n * GO-2025-3962 CVE-2025-59341 GHSA-49pv-gwxp-532r\n * GO-2025-3963 CVE-2025-59348 GHSA-2qgr-gfvj-qpcr\n * GO-2025-3964 CVE-2025-59349 GHSA-8425-8r2f-mrv6\n * GO-2025-3965 CVE-2025-59345 GHSA-89vc-vf32-ch59\n * GO-2025-3966 CVE-2025-59347 GHSA-98x5-jw98-6c97\n * GO-2025-3967 CVE-2025-59342 GHSA-g2h5-cvvr-7gmw\n * GO-2025-3968 CVE-2025-59346 GHSA-g2rq-jv54-wcpr\n * GO-2025-3969 CVE-2025-59353 GHSA-255v-qv84-29p5\n * GO-2025-3970 CVE-2025-59351 GHSA-4mhv-8rh3-4ghw\n * GO-2025-3971 CVE-2025-59352 GHSA-79hx-3fp8-hj66\n * GO-2025-3972 CVE-2025-59350 GHSA-c2fc-9q9c-5486\n * GO-2025-3973 CVE-2025-59354 GHSA-hx2h-vjw2-8r54\n * GO-2025-3974 CVE-2025-59410 GHSA-mcvp-rpgg-9273\n * GO-2025-3976 CVE-2025-10630 GHSA-g4rr-88fc-26fj\n * GO-2025-3977 CVE-2025-9079 GHSA-qx3f-6vq3-8j8m\n * GO-2025-3978 CVE-2025-9081 GHSA-f72g-52v7-mg3p\n- Update to version 0.0.20250922T204835 2025-09-22T20:48:35Z.\n * GO-2025-3955 CVE-2025-47910 CVE-2025-47910\n- Update to version 0.0.20250918T182144 2025-09-18T18:21:44Z.\n * GO-2025-3915 CVE-2025-5187 GHSA-4x4m-3c2p-qppc\n * GO-2025-3956 CVE-2025-47906 CVE-2025-47906\n- Update to version 0.0.20250917T170349 2025-09-17T17:03:49Z.\n * GO-2025-3922 CVE-2025-58058 GHSA-jc7w-c686-c4v9\n * GO-2025-3926 CVE-2025-58158 GHSA-w469-hj2f-jpr5\n * GO-2025-3929 CVE-2025-58157 GHSA-9fvj-xqr2-xwg8\n * GO-2025-3938 CVE-2025-58437 GHSA-j6xf-jwrj-v5qp\n * GO-2025-3939 CVE-2025-7445 GHSA-rcw7-pqfp-735x\n * GO-2025-3940 CVE-2025-58445 GHSA-xh7v-965r-23f7\n * GO-2025-3941 CVE-2025-58450 GHSA-p46v-f2x8-qp98\n * GO-2025-3942 CVE-2025-58063 GHSA-93mf-426m-g6x9\n * GO-2025-3943 CVE-2025-58430 GHSA-rf24-wg77-gq7w\n * GO-2025-3944 CVE-2025-54123 GHSA-r4h8-hfp2-ggmf\n * GO-2025-3945 CVE-2025-54376 GHSA-jxmr-2h4q-rhxp\n * GO-2025-3949 CVE-2025-59361 GHSA-2gcv-3qpf-c5qr\n * GO-2025-3950 CVE-2025-9076 GHSA-3vcm-c42p-3hhf\n * GO-2025-3951 CVE-2025-59358 GHSA-2gg8-85m5-8r2p\n * GO-2025-3952 CVE-2025-59359 GHSA-369h-6j28-wwcg\n * GO-2025-3953 CVE-2025-8396 GHSA-p768-c3pr-6459\n * GO-2025-3954 CVE-2025-59360 GHSA-xv9f-728h-9jgv\n * GO-2025-3958 CVE-2025-9072 GHSA-69j8-prx2-vx98\n * GO-2025-3959 CVE-2025-9078 GHSA-9p92-x77w-9fw2\n * GO-2025-3960 CVE-2025-9084 GHSA-hm95-jx66-g2gh\n * GO-2025-3961 CVE-2025-4953 GHSA-m68q-4hqr-mc6f\n- Update to version 0.0.20250908T141310 2025-09-08T14:13:10Z.\n * GO-2025-3916 CVE-2025-51667 GHSA-f2m2-4q6r-cwc4\n * GO-2025-3917 CVE-2025-53884 GHSA-8ff6-pc43-jwv3\n * GO-2025-3918 CVE-2025-8077 GHSA-8pxw-9c75-6w56\n * GO-2025-3919 CVE-2025-54467 GHSA-w54x-xfxg-4gxq\n * GO-2025-3920 GHSA-vxg3-w9rv-rhr2\n * GO-2025-3921 GHSA-3rw9-wmc8-8948\n * GO-2025-3923 CVE-2024-58259 GHSA-4h45-jpvh-6p5j\n * GO-2025-3924 CVE-2025-6203 GHSA-8f82-53h8-2p34\n * GO-2025-3925 GHSA-v2ch-c8v8-fgr7\n * GO-2025-3927 CVE-2024-52284 GHSA-6h9x-9j5v-7w9h\n * GO-2025-3930 CVE-2025-58355 GHSA-33pr-m977-5w97\n * GO-2025-3934 CVE-2025-55190 GHSA-786q-9hcg-v9ff\n * GO-2025-3935 CVE-2025-9566 GHSA-wp3j-xq48-xpjw\n * GO-2025-3936 CVE-2025-56760 GHSA-78j5-8vq7-jxv5\n * GO-2025-3937 CVE-2025-56761 GHSA-cgrg-86m5-xm4w\n- Update to version 0.0.20250829T154226 2025-08-29T15:42:26Z.\n * GO-2025-3884\n * GO-2025-3892\n * GO-2025-3893\n * GO-2025-3894\n * GO-2025-3895\n * GO-2025-3896\n * GO-2025-3897\n * GO-2025-3900\n * GO-2025-3901\n * GO-2025-3902\n * GO-2025-3903\n * GO-2025-3904\n * GO-2025-3905\n * GO-2025-3906\n * GO-2025-3907\n * GO-2025-3909\n * GO-2025-3910\n * GO-2025-3911\n * GO-2025-3912\n * GO-2025-3913\n- Update to version 0.0.20250820T174735 2025-08-20T17:47:35Z.\n * GO-2025-3783 CVE-2025-52894 GHSA-prpj-rchp-9j5h\n- Update to version 0.0.20250818T190335 2025-08-18T19:03:35Z.\n * GO-2023-2385 CVE-2023-26154 GHSA-5844-q3fc-56rh\n * GO-2025-3861 CVE-2025-48731 GHSA-cmpr-8prq-w5p5\n * GO-2025-3862 CVE-2025-49221 GHSA-rfg4-2m63-fw2q\n * GO-2025-3863 CVE-2025-44001 GHSA-vpcr-fqpc-386h\n * GO-2025-3864 CVE-2025-53857 GHSA-42m6-5vm7-fjv2\n * GO-2025-3865 CVE-2025-44004 GHSA-6ff3-jgxh-vffj\n * GO-2025-3866 CVE-2025-54463 GHSA-gjpm-6w34-ppvf\n * GO-2025-3867 CVE-2025-54458 GHSA-j66h-xhpr-7q5g\n * GO-2025-3868 CVE-2025-8285 GHSA-qjrx-j8wm-xf83\n * GO-2025-3869 CVE-2025-53910 GHSA-v6c8-g53h-mc2h\n * GO-2025-3870 CVE-2025-52931 GHSA-vc77-c2hx-h5x2\n * GO-2025-3871 CVE-2025-53514 GHSA-w92j-c6gr-hj8r\n * GO-2025-3872 CVE-2025-54525 GHSA-3cg3-3mmr-w8hj\n * GO-2025-3873 GHSA-jhmr-57cj-q6g9\n * GO-2025-3874 GHSA-q355-h244-969h\n * GO-2025-3875 CVE-2025-54478 GHSA-qpjq-c5hr-7925\n * GO-2025-3885 CVE-2025-55196 GHSA-fcxq-v2r3-cc8h\n * GO-2025-3886 CVE-2025-50946 GHSA-p3qf-84rg-jxfc\n * GO-2025-3887 CVE-2025-55199 GHSA-9h84-qmv7-982p\n * GO-2025-3888 CVE-2025-55198 GHSA-f9f8-9pmf-xv68\n * GO-2025-3891 CVE-2025-9039 GHSA-wm7x-ww72-r77q\n","status":"published","published":"2026-07-30T09:09:47Z","modified":"2026-07-31T18:24:10.643528544Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21824-1","title":"Security update for containerized-data-importer1.65","description":"This update for containerized-data-importer1.65 fixes the following issues:\n\n- CVE-2025-22869: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322).\n- CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238699).\n- CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during\n  DOM construction (bsc#1241838).\n- CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents\n  (bsc#1251495).\n- CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or\n  (bsc#1253506).\n- CVE-2025-47914: non validated message size can cause a panic due to an out of bounds read (bsc#1253967).\n- CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory (bsc#1248946).\n- CVE-2025-58181: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253784).\n- CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially\n  crafted input (bsc#1251689).\n- CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues\n  when parsing HTML files (bsc#1267176).\n- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-\n  header (bsc#1260295).\n- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE\n  (bsc#1265799).\n- CVE-2026-34986: github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of\n  service (bsc#1262952).\n- CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service\n  (bsc#1262269).\n- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation\n  bypass and privilege escalation (bsc#1266639).\n- CVE-2026-39827,CVE-2026-39828,CVE-2026-39829,CVE-2026-39830,CVE-2026-39831,CVE-2026-39832,CVE-2026-39833,\n  CVE-2026-39834,CVE-2026-39835,CVE-2026-42508,CVE-2026-46595,CVE-2026-46597,\n  CVE-2026-46598: multiple issues in golang.org/x/crypto/ssh (bsc#1266179).\n- CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS\n  via oversized inputs (bsc#1276687).\n- CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272064).\n- CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the\n  crypto/ssh library (bsc#1278621).\n- CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization\n  policies via mixed-case or canonical-case header matches (bsc#1279315).\n- CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279234).\n","status":"published","published":"2026-09-09T15:12:11Z","modified":"2026-09-12T18:23:08.1084477Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2025:4526-1","title":"Security update for buildah","description":"This update for buildah fixes the following issues:\n\n- CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated \n  message size (bsc#1254054)\n- CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving \n  an unexpected message type in response to a key listing or signing request (bsc#1253598)\n","status":"published","published":"2025-12-26T12:24:16Z","modified":"2026-03-23T04:51:50.742125Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4536-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\n- CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed SSH Agent that could cause a panic due to an out-of-bounds read\n  with non-validated message sizes (bsc#1253993)\n","status":"published","published":"2025-12-31T10:35:17Z","modified":"2026-03-23T04:50:26.017718Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0014-1","title":"Security update for buildah","description":"This update for buildah fixes the following issues:\n\n- CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated \n  message size (bsc#1254054)\n- CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving \n  an unexpected message type in response to a key listing or signing request (bsc#1253598)\n","status":"published","published":"2026-01-05T10:39:01Z","modified":"2026-03-23T04:51:51.176402Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0067-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\n  - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an\n  out-of-bounds read with non validated message size (bsc#1253993)\n","status":"published","published":"2026-01-08T12:22:16Z","modified":"2026-03-23T04:51:54.943206Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0125-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\n  - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an\n  out-of-bounds read with non validated message size (bsc#1253993)\n","status":"published","published":"2026-01-14T16:57:37Z","modified":"2026-03-23T04:51:56.845886Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0439-1","title":"Security update for apptainer","description":"This update for apptainer fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2024-45310: Fixed runc being tricked into creating empty \n  files/directories on host (bsc#1257432)\n- CVE-2025-65105: Fixed security bypass due to disabling security \n  options (bsc#1255462)\n- CVE-2025-47914: Fixed malformed constraint may cause denial of \n  service in golang.org/x/crypto/ssh/agent (bsc#1253967)\n- CVE-2025-58181: Fixed unbounded memory consumption in \n  golang.org/x/crypto/ssh (bsc#1253784)\n- CVE-2025-47913: Fixed potential denial of service in \n  golang.org/x/crypto/ssh/agent (bsc#1253506)\n- CVE-2025-22872: Fixed incorrect Neutralization of Input During \n  Web Page Generation in x/net (bsc#1241710)\n- CVE-2025-22870: Fixed HTTP Proxy bypass using IPv6 Zone IDs in \n  golang.org/x/net (bsc#1238611)\n- CVE-2025-22869: Fixed potential denial of service in \n  golang.org/x/crypto (bsc#1239322)\n- CVE-2025-27144: Fixed DoS in go-jose Parsing in \n  github.com/go-jose/go-jose (bsc#1237608)\n- CVE-2025-8556: Fixed missing and wrong validation can lead \n  to incorrect results in github.com/cloudflare/circl\n\nOther fixes:\n\n- Update to 1.4.5\n","status":"published","published":"2026-02-11T09:30:02Z","modified":"2026-03-23T04:52:14.592142Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:20035-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\n- CVE-2025-47914: lack of message size validation when SSH Agent server is processing new identity requests can lead to\n  out-of-bounds read and an application panic (bsc#1253993).\n- CVE-2025-47913: receiving an `SSH_AGENT_SUCCESS` reply when the SSH client is expecting a typed response can lead to\n  the early termination of the client process (bsc#1253542).\n","status":"published","published":"2025-12-30T20:16:23Z","modified":"2026-03-23T04:52:30.449917Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20123-1","title":"Security update for buildah","description":"This update for buildah fixes the following issues:\n\n- CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed non validated message size causing a panic due to an out\n  of bounds read (bsc#1254054)\n- CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected\n  message type in response to a key listing or signing request (bsc#1253598)\n- CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc\n  files (bsc#1253096)\n\nOther fixes:\n\n- Updated to version 1.39.5.\n","status":"published","published":"2026-01-22T13:01:23Z","modified":"2026-03-23T04:51:47.142749Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20176-1","title":"Security update for elemental-register, elemental-toolkit","description":"This update for elemental-register, elemental-toolkit fixes the following issues:\n\nelemental-register was updated to 1.8.1:\n\nChanges on top of v1.8.1:\n\n  * Update headers to 2026\n  * Update questions to include SL Micro 6.2\n\nUpdate to v1.8.1:\n\n  * Install yip config files in before-install step\n  * Bump github.com/rancher-sandbox/go-tpm and its dependencies\n    This includes few CVE fixes:\n    * bsc#1241826 (CVE-2025-22872)\n    * bsc#1241857 (CVE-2025-22872)\n    * bsc#1251511 (CVE-2025-47911)\n    * bsc#1251679 (CVE-2025-58190)\n\nelemental-toolkit was updated to v2.3.2:\n\n  * Bump golang.org/x/crypto library\n    This includes few CVE fixes:\n    * bsc#1241826 (CVE-2025-22872)\n    * bsc#1241857 (CVE-2025-22872)\n    * bsc#1251511 (CVE-2025-47911)\n    * bsc#1251679 (CVE-2025-58190)\n    * bsc#1253581 (CVE-2025-47913)\n    * bsc#1253901 (CVE-2025-58181)\n    * bsc#1254079 (CVE-2025-47914)\n","status":"published","published":"2026-01-29T15:32:26Z","modified":"2026-03-23T04:52:40.586211Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20244-1","title":"Security update for elemental-toolkit, elemental-operator","description":"This update for elemental-toolkit, elemental-operator fixes the following issues:\n\nelemental-operator:\n\n  - Update to version 1.6.10:\n\n    * Remove 'latest' tag as this overlaps with the latest branch\n    * Bump github.com/rancher-sandbox/go-tpm and its dependencies\n      This bump includes fixes to some CVEs:\n      * bsc#1241826 (CVE-2025-22872)\n      * bsc#1241857 (CVE-2025-22872)\n      * bsc#1251511 (CVE-2025-47911)\n      * bsc#1251679 (CVE-2025-58190)\n\nelemental-toolkit:\n\n  - Update to version 2.1.5:\n\n    * Update headers for new year 2026\n    * Disable selinux in installer media\n\n  - Update to version 2.1.4:\n\n    * Remove leftovers in installer integration test\n    * Bump to build against go 1.24\n    * Bump golang.org/x/crypto library\n      This bump includes fixes to some CVEs:\n\n      * bsc#1241826 (CVE-2025-22872)\n      * bsc#1241857 (CVE-2025-22872)\n      * bsc#1251511 (CVE-2025-47911)\n      * bsc#1251679 (CVE-2025-58190)\n      * bsc#1253581 (CVE-2025-47913)\n      * bsc#1253901 (CVE-2025-58181)\n      * bsc#1254079 (CVE-2025-47914)\n\n","status":"published","published":"2026-01-15T11:08:38Z","modified":"2026-03-23T04:52:46.899583Z","updated_at":"2026-11-02T15:54:01.610851Z"}]},"sources_more":{"osv":21}}