https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 20:07:27 +0000 https://vulnerability.circl.lu/vuln/cve-2026-94447 <p><strong>Affected:</strong> Go toolchain cmd/go</p> <p>Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.</p> <p><strong>Affected:</strong> Go toolchain cmd/go</p> <p>Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can bypass the intended checksum. We now ensure that golang.org/toolchain always goes to the network for the canonical checksum.</p> https://vulnerability.circl.lu/vuln/cve-2026-94447