<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent vulnerabilities from the Google CNA root</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Latest vulnerabilities published by the CNAs operating under the Google root of the CVE Program.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 18 Aug 2026 17:18:59 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-15623 (GoogleCloud)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-15623</link>
      <description>Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query Service</description>
      <content:encoded>Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query Service</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-15623</guid>
      <pubDate>Mon, 17 Aug 2026 06:27:00 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-46603 (Go)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-46603</link>
      <description>Excessive memory allocation during VP8L decoding in golang.org/x/image</description>
      <content:encoded>Excessive memory allocation during VP8L decoding in golang.org/x/image</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-46603</guid>
      <pubDate>Fri, 14 Aug 2026 16:38:16 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-56860 (Go)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-56860</link>
      <description>Avoid quadratic complexity in resolvePath in net/url</description>
      <content:encoded>Avoid quadratic complexity in resolvePath in net/url</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-56860</guid>
      <pubDate>Thu, 13 Aug 2026 21:58:53 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-56864 (Go)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-56864</link>
      <description>Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb</description>
      <content:encoded>Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-56864</guid>
      <pubDate>Thu, 13 Aug 2026 21:58:53 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-56865 (Go)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-56865</link>
      <description>Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog</description>
      <content:encoded>Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-56865</guid>
      <pubDate>Thu, 13 Aug 2026 21:58:53 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-56858 (Go)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-56858</link>
      <description>Fix Javascript regexp context tracking in html/template</description>
      <content:encoded>Fix Javascript regexp context tracking in html/template</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-56858</guid>
      <pubDate>Thu, 13 Aug 2026 21:58:53 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-56862 (Go)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-56862</link>
      <description>Limit handshake messages we are willing to accept post-handshake in crypto/tls</description>
      <content:encoded>Limit handshake messages we are willing to accept post-handshake in crypto/tls</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-56862</guid>
      <pubDate>Thu, 13 Aug 2026 21:58:53 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-56853 (Go)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-56853</link>
      <description>Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http</description>
      <content:encoded>Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-56853</guid>
      <pubDate>Thu, 13 Aug 2026 21:58:53 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-56859 (Go)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-56859</link>
      <description>Add recursion depth guard during decode in encoding/xml</description>
      <content:encoded>Add recursion depth guard during decode in encoding/xml</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-56859</guid>
      <pubDate>Thu, 13 Aug 2026 21:58:52 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-33818 (Go)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-33818</link>
      <description>Enforce maximum recursion depth in encoding/asn1</description>
      <content:encoded>Enforce maximum recursion depth in encoding/asn1</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-33818</guid>
      <pubDate>Thu, 13 Aug 2026 21:58:52 +0000</pubDate>
    </item>
  </channel>
</rss>
