{
  "affected": [
    {
      "affectedData": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "newDNSConstraints"
            },
            {
              "name": "dnsConstraints.query"
            },
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "security@golang.org"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:/a:redhat:cryostat:4::el9"
          ],
          "defaultStatus": "affected",
          "product": "Cryostat 4 on RHEL 9",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:edge_manager:1.0::el9"
          ],
          "defaultStatus": "affected",
          "product": "RHEM 1.0 for RHEL 9",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openstack:17.1",
            "cpe:/a:redhat:openstack:17.1::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenStack Platform 17.1",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6.19::el9",
            "cpe:/a:redhat:satellite_capsule:6.19::el9",
            "cpe:/a:redhat:satellite_maintenance:6.19::el9",
            "cpe:/a:redhat:satellite_utils:6.19::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Satellite 6.19 for RHEL 9",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux_eus:10.0"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux AppStream (v. 10)",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::appstream"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.6::appstream"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux AppStream (v. 9)",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
          ],
          "defaultStatus": "affected",
          "product": "HawtIO HawtIO 4.4.0",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:6.0::el9"
          ],
          "defaultStatus": "affected",
          "product": "Logging Subsystem for Red Hat OpenShift 6.0",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:6.4::el9"
          ],
          "defaultStatus": "affected",
          "product": "Logging Subsystem for Red Hat OpenShift 6.4",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
          ],
          "defaultStatus": "affected",
          "product": "Multicluster Global Hub 1.4.5",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
          ],
          "defaultStatus": "affected",
          "product": "Multicluster Global Hub 1.5.4",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
          ],
          "defaultStatus": "affected",
          "product": "Multicluster Global Hub 1.6.2",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
          ],
          "defaultStatus": "affected",
          "product": "OpenShift API for Data Protection 1.4",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
          ],
          "defaultStatus": "affected",
          "product": "OpenShift API for Data Protection 1.5",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_compliance_operator:1::el9"
          ],
          "defaultStatus": "affected",
          "product": "OpenShift Compliance Operator 1",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Ansible Automation Platform 2.6",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:edge_manager:1.0::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Edge Manager 1.0",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.6::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift Builds 1.6.5",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_builds:1.7::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift Builds 1.7.4",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_devspaces:3.28::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift Dev Spaces 3.28",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift distributed tracing 3.9.3",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Trusted Artifact Signer 1.3",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:webterminal:1.11::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Web Terminal 1.11",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:webterminal:1.12::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Web Terminal 1.12",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:webterminal:1.13::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Web Terminal 1.13",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:webterminal:1.14::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Web Terminal 1.14",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:webterminal:1.15::el9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Web Terminal 1.15",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:assisted_installer:2"
          ],
          "defaultStatus": "affected",
          "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:cert_manager:1"
          ],
          "defaultStatus": "affected",
          "product": "cert-manager Operator for Red Hat OpenShift",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:confidential_compute_attestation:1"
          ],
          "defaultStatus": "affected",
          "product": "Confidential Compute Attestation",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:deployment_validator_operator"
          ],
          "defaultStatus": "affected",
          "product": "Deployment Validation Operator",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:workload_availability_far:0"
          ],
          "defaultStatus": "affected",
          "product": "Fence Agents Remediation Operator",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_file_integrity_operator:1"
          ],
          "defaultStatus": "affected",
          "product": "File Integrity Operator",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:gatekeeper:3"
          ],
          "defaultStatus": "affected",
          "product": "Gatekeeper 3",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5"
          ],
          "defaultStatus": "affected",
          "product": "Logging Subsystem for Red Hat OpenShift",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:workload_availability_mdr:0"
          ],
          "defaultStatus": "affected",
          "product": "Machine Deletion Remediation Operator",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhmt:1"
          ],
          "defaultStatus": "affected",
          "product": "Migration Toolkit for Containers",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:mirror_registry:1"
          ],
          "defaultStatus": "affected",
          "product": "mirror registry for Red Hat OpenShift",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:multicluster_engine"
          ],
          "defaultStatus": "affected",
          "product": "Multicluster Engine for Kubernetes",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:ocp_tools"
          ],
          "defaultStatus": "affected",
          "product": "OpenShift Developer Tools and Services",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_pipelines:1"
          ],
          "defaultStatus": "affected",
          "product": "OpenShift Pipelines",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:serverless:1"
          ],
          "defaultStatus": "affected",
          "product": "OpenShift Serverless",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:red_hat_3scale_amp:2"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat 3scale API Management Platform 2",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:certifications:9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:connectivity_link:1"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Connectivity Link 1",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:enterprise_linux_ai:3"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_ai"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift AI (RHOAI)",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_cluster_manager_cli:1"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift Cluster Manager CLI",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_data_foundation:4"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Openshift Data Foundation 4",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:devworkspace"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift Dev Workspaces Operator",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_gitops:1"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift GitOps",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_service_on_aws:1"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift on AWS",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenShift Virtualization 4",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openstack:16.2"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenStack Platform 16.2",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openstack:18.0"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat OpenStack Platform 18.0",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:quay:3"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Quay 3",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:satellite:6"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Satellite 6",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:service_interconnect:2"
          ],
          "defaultStatus": "affected",
          "product": "Red Hat Service Interconnect 2",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_security_profiles_operator:1"
          ],
          "defaultStatus": "affected",
          "product": "Security Profiles Operator",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
          ],
          "defaultStatus": "unaffected",
          "product": "Custom Metric Autoscaler operator for Red Hat Openshift",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:external_secrets_operator:1"
          ],
          "defaultStatus": "unaffected",
          "product": "External Secrets Operator for Red Hat OpenShift",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:ext_dns_optr:1"
          ],
          "defaultStatus": "unaffected",
          "product": "ExternalDNS Operator",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:lvms:4"
          ],
          "defaultStatus": "unaffected",
          "product": "Logical Volume Manager Storage",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:migration_toolkit_applications:8"
          ],
          "defaultStatus": "unaffected",
          "product": "Migration Toolkit for Applications 8",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:mirror_registry:2"
          ],
          "defaultStatus": "unaffected",
          "product": "mirror registry for Red Hat OpenShift 2",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:network_observ_optr:1"
          ],
          "defaultStatus": "unaffected",
          "product": "Network Observability Operator",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:workload_availability_nhc:0"
          ],
          "defaultStatus": "unaffected",
          "product": "Node HealthCheck Operator",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_lightspeed"
          ],
          "defaultStatus": "unaffected",
          "product": "OpenShift Lightspeed",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:service_mesh:2"
          ],
          "defaultStatus": "unaffected",
          "product": "OpenShift Service Mesh 2",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:service_mesh:3"
          ],
          "defaultStatus": "unaffected",
          "product": "OpenShift Service Mesh 3",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_power_monitoring"
          ],
          "defaultStatus": "unaffected",
          "product": "Power monitoring for Red Hat OpenShift",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:acm:2"
          ],
          "defaultStatus": "unaffected",
          "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:advanced_cluster_security:4"
          ],
          "defaultStatus": "unaffected",
          "product": "Red Hat Advanced Cluster Security 4",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3"
          ],
          "defaultStatus": "unaffected",
          "product": "Red Hat AI Inference Server",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "unaffected",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhdh:1"
          ],
          "defaultStatus": "unaffected",
          "product": "Red Hat Developer Hub",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:windows_machine_config"
          ],
          "defaultStatus": "unaffected",
          "product": "Red Hat OpenShift for Windows Containers",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:service_interconnect:1"
          ],
          "defaultStatus": "unaffected",
          "product": "Red Hat Service Interconnect 1",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:stf:1.5"
          ],
          "defaultStatus": "unaffected",
          "product": "Service Telemetry Framework 1.5",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:amq_streams:3"
          ],
          "defaultStatus": "unaffected",
          "product": "streams for Apache Kafka 3",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
          ],
          "defaultStatus": "unaffected",
          "product": "Zero Trust Workload Identity Manager",
          "vendor": "Red Hat"
        },
        {
          "cpes": [
            "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
          ],
          "defaultStatus": "unaffected",
          "product": "Zero Trust Workload Identity Manager - Tech Preview",
          "vendor": "Red Hat"
        }
      ],
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "39FE9BAF-55E9-43AA-B14E-239E7EF1D65D",
              "versionEndExcluding": "1.26.2",
              "versionStartIncluding": "1.26.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool."
    }
  ],
  "id": "CVE-2026-33810",
  "lastModified": "2026-07-09T13:16:59.470",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 4.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.3,
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-33810",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-13T17:48:57.879958Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-08T02:16:03.950",
  "references": [
    {
      "source": "security@golang.org",
      "tags": [
        "Patch"
      ],
      "url": "https://go.dev/cl/763763"
    },
    {
      "source": "security@golang.org",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://go.dev/issue/78332"
    },
    {
      "source": "security@golang.org",
      "tags": [
        "Mailing List",
        "Release Notes"
      ],
      "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
    },
    {
      "source": "security@golang.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://pkg.go.dev/vuln/GO-2026-4866"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2026/04/19/4"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2026/04/20/1"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:10155"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:10158"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:13545"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:14391"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:19135"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:19144"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:19353"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:19719"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:19720"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:19721"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:21769"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:21772"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:22347"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:22485"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:22862"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:22958"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:22959"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:22960"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:22961"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:22962"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:23345"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:24478"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:25089"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:26568"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:26571"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:26585"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:28047"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:29854"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:34365"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:36651"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:36796"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:7291"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/errata/RHSA-2026:9385"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
    },
    {
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json"
    }
  ],
  "sourceIdentifier": "security@golang.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-1289"
        }
      ],
      "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2026-33810"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-1289",
      "CWE-295"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-08T02:16:03Z",
    "severity": "HIGH"
  },
  "details": "When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.",
  "id": "GHSA-fv83-x2xw-2j55",
  "modified": "2026-07-09T15:31:58Z",
  "published": "2026-04-08T03:32:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:10155"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:24478"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:25089"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:26568"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:26571"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:26585"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:28047"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:29854"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:34365"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:36651"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:36796"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:7291"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:9385"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
    },
    {
      "type": "WEB",
      "url": "https://go.dev/cl/763763"
    },
    {
      "type": "WEB",
      "url": "https://go.dev/issue/78332"
    },
    {
      "type": "WEB",
      "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
    },
    {
      "type": "WEB",
      "url": "https://pkg.go.dev/vuln/GO-2026-4866"
    },
    {
      "type": "WEB",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:10158"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:13545"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:14391"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19135"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19144"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19353"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19719"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19720"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19721"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:21769"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:21772"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22347"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22485"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22862"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22958"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22959"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22960"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22961"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22962"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:23345"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2026/04/19/4"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2026/04/20/1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33810.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509",
    "tracking": {
      "current_release_date": "2026-04-14T14:47:37.000Z",
      "generator": {
        "date": "2026-04-15T07:32:45.880Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-33810",
      "initial_release_date": "2026-04-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-04-11T01:10:17.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2026-04-14T14:47:37.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 golang 1.25.8-1",
                "product": {
                  "name": "\u003cazl3 golang 1.25.8-1",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 golang 1.25.8-1",
                "product": {
                  "name": "azl3 golang 1.25.8-1",
                  "product_id": "21113"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 golang 1.26.1-1",
                "product": {
                  "name": "\u003cazl3 golang 1.26.1-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 golang 1.26.1-1",
                "product": {
                  "name": "azl3 golang 1.26.1-1",
                  "product_id": "21116"
                }
              }
            ],
            "category": "product_name",
            "name": "golang"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 golang 1.25.8-1 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 golang 1.25.8-1 as a component of Azure Linux 3.0",
          "product_id": "21113-17084"
        },
        "product_reference": "21113",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 golang 1.26.1-1 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 golang 1.26.1-1 as a component of Azure Linux 3.0",
          "product_id": "21116-17084"
        },
        "product_reference": "21116",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33810",
      "notes": [
        {
          "category": "general",
          "text": "Go",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "21113-17084",
          "21116-17084"
        ],
        "known_affected": [
          "17084-2",
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33810.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-11T01:10:17.000Z",
          "details": "1.25.9-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-2"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2026-04-11T01:10:17.000Z",
          "details": "1.26.2-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "title": "Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for go1.26",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for go1.26 fixes the following issues:\n\n- Update to version go1.26.2 (bsc#1255111).\n- CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653).\n- CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination (bsc#1261654).\n- CVE-2026-27144: cmd/compile: no-op interface conversion bypasses overlap checking (bsc#1261655).\n- CVE-2026-32280: crypto/x509: unexpected work during chain building (bsc#1261656).\n- CVE-2026-32281: crypto/x509: inefficient policy validation (bsc#1261657).\n- CVE-2026-32282: os: Root.Chmod can follow symlinks out of the root on Linux (bsc#1261658).\n- CVE-2026-32283: crypto/tls: multiple key update handshake messages can cause connection to deadlock (bsc#1261659).\n- CVE-2026-32288: archive/tar: unbounded allocation when parsing old format GNU sparse map (bsc#1261660).\n- CVE-2026-32289: html/template: JS template literal context incorrectly tracked (bsc#1261661).\n- CVE-2026-33810: crypto/x509: excluded DNS constraints not properly applied to wildcard domains (bsc#1261662).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-595",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20571-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1255111",
        "url": "https://bugzilla.suse.com/1255111"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261653",
        "url": "https://bugzilla.suse.com/1261653"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261654",
        "url": "https://bugzilla.suse.com/1261654"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261655",
        "url": "https://bugzilla.suse.com/1261655"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261656",
        "url": "https://bugzilla.suse.com/1261656"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261657",
        "url": "https://bugzilla.suse.com/1261657"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261658",
        "url": "https://bugzilla.suse.com/1261658"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261659",
        "url": "https://bugzilla.suse.com/1261659"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261660",
        "url": "https://bugzilla.suse.com/1261660"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261661",
        "url": "https://bugzilla.suse.com/1261661"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261662",
        "url": "https://bugzilla.suse.com/1261662"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27140 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27140/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27143 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27144 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27144/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-32280 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-32280/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-32281 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-32281/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-32282 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-32282/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-32283 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-32283/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-32288 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-32288/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-32289 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-32289/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33810 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33810/"
      }
    ],
    "title": "Security update for go1.26",
    "tracking": {
      "current_release_date": "2026-04-20T14:07:00Z",
      "generator": {
        "date": "2026-04-20T14:07:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:20571-1",
      "initial_release_date": "2026-04-20T14:07:00Z",
      "revision_history": [
        {
          "date": "2026-04-20T14:07:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.26-1.26.2-160000.1.1.aarch64",
                "product": {
                  "name": "go1.26-1.26.2-160000.1.1.aarch64",
                  "product_id": "go1.26-1.26.2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-doc-1.26.2-160000.1.1.aarch64",
                "product": {
                  "name": "go1.26-doc-1.26.2-160000.1.1.aarch64",
                  "product_id": "go1.26-doc-1.26.2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-libstd-1.26.2-160000.1.1.aarch64",
                "product": {
                  "name": "go1.26-libstd-1.26.2-160000.1.1.aarch64",
                  "product_id": "go1.26-libstd-1.26.2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-race-1.26.2-160000.1.1.aarch64",
                "product": {
                  "name": "go1.26-race-1.26.2-160000.1.1.aarch64",
                  "product_id": "go1.26-race-1.26.2-160000.1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.26-1.26.2-160000.1.1.ppc64le",
                "product": {
                  "name": "go1.26-1.26.2-160000.1.1.ppc64le",
                  "product_id": "go1.26-1.26.2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-doc-1.26.2-160000.1.1.ppc64le",
                "product": {
                  "name": "go1.26-doc-1.26.2-160000.1.1.ppc64le",
                  "product_id": "go1.26-doc-1.26.2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-race-1.26.2-160000.1.1.ppc64le",
                "product": {
                  "name": "go1.26-race-1.26.2-160000.1.1.ppc64le",
                  "product_id": "go1.26-race-1.26.2-160000.1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.26-1.26.2-160000.1.1.s390x",
                "product": {
                  "name": "go1.26-1.26.2-160000.1.1.s390x",
                  "product_id": "go1.26-1.26.2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-doc-1.26.2-160000.1.1.s390x",
                "product": {
                  "name": "go1.26-doc-1.26.2-160000.1.1.s390x",
                  "product_id": "go1.26-doc-1.26.2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-race-1.26.2-160000.1.1.s390x",
                "product": {
                  "name": "go1.26-race-1.26.2-160000.1.1.s390x",
                  "product_id": "go1.26-race-1.26.2-160000.1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.26-1.26.2-160000.1.1.x86_64",
                "product": {
                  "name": "go1.26-1.26.2-160000.1.1.x86_64",
                  "product_id": "go1.26-1.26.2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-doc-1.26.2-160000.1.1.x86_64",
                "product": {
                  "name": "go1.26-doc-1.26.2-160000.1.1.x86_64",
                  "product_id": "go1.26-doc-1.26.2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-libstd-1.26.2-160000.1.1.x86_64",
                "product": {
                  "name": "go1.26-libstd-1.26.2-160000.1.1.x86_64",
                  "product_id": "go1.26-libstd-1.26.2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.26-race-1.26.2-160000.1.1.x86_64",
                "product": {
                  "name": "go1.26-race-1.26.2-160000.1.1.x86_64",
                  "product_id": "go1.26-race-1.26.2-160000.1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-1.26.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64"
        },
        "product_reference": "go1.26-1.26.2-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-1.26.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le"
        },
        "product_reference": "go1.26-1.26.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-1.26.2-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x"
        },
        "product_reference": "go1.26-1.26.2-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-1.26.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64"
        },
        "product_reference": "go1.26-1.26.2-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-doc-1.26.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64"
        },
        "product_reference": "go1.26-doc-1.26.2-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-doc-1.26.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le"
        },
        "product_reference": "go1.26-doc-1.26.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-doc-1.26.2-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x"
        },
        "product_reference": "go1.26-doc-1.26.2-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-doc-1.26.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64"
        },
        "product_reference": "go1.26-doc-1.26.2-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-libstd-1.26.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64"
        },
        "product_reference": "go1.26-libstd-1.26.2-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-libstd-1.26.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64"
        },
        "product_reference": "go1.26-libstd-1.26.2-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-race-1.26.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64"
        },
        "product_reference": "go1.26-race-1.26.2-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-race-1.26.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le"
        },
        "product_reference": "go1.26-race-1.26.2-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-race-1.26.2-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x"
        },
        "product_reference": "go1.26-race-1.26.2-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.26-race-1.26.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        },
        "product_reference": "go1.26-race-1.26.2-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-27140",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27140"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SWIG file names containing \u0027cgo\u0027 and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27140",
          "url": "https://www.suse.com/security/cve/CVE-2026-27140"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261653 for CVE-2026-27140",
          "url": "https://bugzilla.suse.com/1261653"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-27140"
    },
    {
      "cve": "CVE-2026-27143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27143",
          "url": "https://www.suse.com/security/cve/CVE-2026-27143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261654 for CVE-2026-27143",
          "url": "https://bugzilla.suse.com/1261654"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-27143"
    },
    {
      "cve": "CVE-2026-27144",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27144"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27144",
          "url": "https://www.suse.com/security/cve/CVE-2026-27144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261655 for CVE-2026-27144",
          "url": "https://bugzilla.suse.com/1261655"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27144"
    },
    {
      "cve": "CVE-2026-32280",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-32280"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-32280",
          "url": "https://www.suse.com/security/cve/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261656 for CVE-2026-32280",
          "url": "https://bugzilla.suse.com/1261656"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-32280"
    },
    {
      "cve": "CVE-2026-32281",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-32281"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-32281",
          "url": "https://www.suse.com/security/cve/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261657 for CVE-2026-32281",
          "url": "https://bugzilla.suse.com/1261657"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-32281"
    },
    {
      "cve": "CVE-2026-32282",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-32282"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-32282",
          "url": "https://www.suse.com/security/cve/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261658 for CVE-2026-32282",
          "url": "https://bugzilla.suse.com/1261658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-32282"
    },
    {
      "cve": "CVE-2026-32283",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-32283"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-32283",
          "url": "https://www.suse.com/security/cve/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261659 for CVE-2026-32283",
          "url": "https://bugzilla.suse.com/1261659"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-32283"
    },
    {
      "cve": "CVE-2026-32288",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-32288"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the \"old GNU sparse map\" format.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-32288",
          "url": "https://www.suse.com/security/cve/CVE-2026-32288"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261660 for CVE-2026-32288",
          "url": "https://bugzilla.suse.com/1261660"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-32288"
    },
    {
      "cve": "CVE-2026-32289",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-32289"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template actions within JS template literals did not properly track the brace depth, leading to incorrect escaping being applied. These issues could cause actions within JS template literals to be incorrectly or improperly escaped, leading to XSS vulnerabilities.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-32289",
          "url": "https://www.suse.com/security/cve/CVE-2026-32289"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261661 for CVE-2026-32289",
          "url": "https://bugzilla.suse.com/1261661"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-32289"
    },
    {
      "cve": "CVE-2026-33810",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33810"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
          "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33810",
          "url": "https://www.suse.com/security/cve/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261662 for CVE-2026-33810",
          "url": "https://bugzilla.suse.com/1261662"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-doc-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-libstd-1.26.2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.s390x",
            "openSUSE Leap 16.0:go1.26-race-1.26.2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-20T14:07:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33810"
    }
  ]
}