RHSA-2026:86203

Vulnerability from csaf_redhat - Published: 2026-10-20 22:02 - Updated: 2026-10-21 06:38
Summary
Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update
Severity
Important
Notes
Topic: An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.10+1 [rhel-8.10.z] (JIRA:RHEL-287193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-78667

A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-78669

A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 31 products, the same list as for CVE-2026-78667
Threats
Impact Important
CVE-2026-97031

A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 31 products, the same list as for CVE-2026-78667
Threats
Impact Important
CVE-2026-111943

A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.

6.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 31 products, the same list as for CVE-2026-78667
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:86203 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2548334 external
https://bugzilla.redhat.com/show_bug.cgi?id=2548336 external
https://bugzilla.redhat.com/show_bug.cgi?id=2548344 external
https://bugzilla.redhat.com/show_bug.cgi?id=2556068 external
https://issues.redhat.com/browse/RHEL-287193 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-78667 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548334 external
https://www.cve.org/CVERecord?id=CVE-2026-78667 external
https://nvd.nist.gov/vuln/detail/CVE-2026-78667 external
https://go.dev/cl/847309 external
https://go.dev/issue/81858 external
https://groups.google.com/g/golang-announce/c/U2f… external
https://pkg.go.dev/vuln/GO-2026-6609 external
https://access.redhat.com/security/cve/CVE-2026-78669 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548344 external
https://www.cve.org/CVERecord?id=CVE-2026-78669 external
https://nvd.nist.gov/vuln/detail/CVE-2026-78669 external
https://go.dev/cl/847186 external
https://go.dev/cl/847308 external
https://go.dev/issue/81742 external
https://groups.google.com/g/golang-announce/c/ZPw… external
https://pkg.go.dev/vuln/GO-2026-6611 external
https://access.redhat.com/security/cve/CVE-2026-97031 self
https://bugzilla.redhat.com/show_bug.cgi?id=2548336 external
https://www.cve.org/CVERecord?id=CVE-2026-97031 external
https://nvd.nist.gov/vuln/detail/CVE-2026-97031 external
https://go.dev/cl/847312 external
https://go.dev/issue/81855 external
https://pkg.go.dev/vuln/GO-2026-6607 external
https://access.redhat.com/security/cve/CVE-2026-111943 self
https://bugzilla.redhat.com/show_bug.cgi?id=2556068 external
https://www.cve.org/CVERecord?id=CVE-2026-111943 external
https://nvd.nist.gov/vuln/detail/CVE-2026-111943 external
https://github.com/golang/go/issues/82345 external
https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nSecurity Fix(es):\n\n* net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)\n\n* crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031)\n\n* net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669)\n\n* golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943)\n\nBug Fix(es) and Enhancement(s):\n\n* Update Go to version 1.26.10+1 [rhel-8.10.z] (JIRA:RHEL-287193)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:86203",
        "url": "https://access.redhat.com/errata/RHSA-2026:86203"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2548334",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548334"
      },
      {
        "category": "external",
        "summary": "2548336",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548336"
      },
      {
        "category": "external",
        "summary": "2548344",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
      },
      {
        "category": "external",
        "summary": "2556068",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556068"
      },
      {
        "category": "external",
        "summary": "RHEL-287193",
        "url": "https://issues.redhat.com/browse/RHEL-287193"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_86203.json"
      }
    ],
    "title": "Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2026-10-21T06:38:41+00:00",
      "generator": {
        "date": "2026-10-21T06:38:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:86203",
      "initial_release_date": "2026-10-20T22:02:52+00:00",
      "revision_history": [
        {
          "date": "2026-10-20T22:02:52+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-20T22:02:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-21T06:38:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
                "product": {
                  "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src (go-toolset:rhel8)",
                  "product_id": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=src\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
                "product": {
                  "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src (go-toolset:rhel8)",
                  "product_id": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=src\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
                "product": {
                  "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64 (go-toolset:rhel8)",
                  "product_id": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=aarch64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
                "product": {
                  "name": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64 (go-toolset:rhel8)",
                  "product_id": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve-debugsource@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=aarch64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
                "product": {
                  "name": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64 (go-toolset:rhel8)",
                  "product_id": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve-debuginfo@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=aarch64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
                "product": {
                  "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64 (go-toolset:rhel8)",
                  "product_id": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=aarch64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
                "product": {
                  "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64 (go-toolset:rhel8)",
                  "product_id": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-bin@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=aarch64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
                "product": {
                  "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64 (go-toolset:rhel8)",
                  "product_id": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/go-toolset@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=aarch64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
                "product": {
                  "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64 (go-toolset:rhel8)",
                  "product_id": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-race@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=aarch64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
                "product": {
                  "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le (go-toolset:rhel8)",
                  "product_id": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=ppc64le\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
                "product": {
                  "name": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le (go-toolset:rhel8)",
                  "product_id": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve-debugsource@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=ppc64le\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
                "product": {
                  "name": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le (go-toolset:rhel8)",
                  "product_id": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve-debuginfo@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=ppc64le\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
                "product": {
                  "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le (go-toolset:rhel8)",
                  "product_id": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=ppc64le\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
                "product": {
                  "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le (go-toolset:rhel8)",
                  "product_id": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-bin@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=ppc64le\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
                "product": {
                  "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le (go-toolset:rhel8)",
                  "product_id": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/go-toolset@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=ppc64le\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
                "product": {
                  "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le (go-toolset:rhel8)",
                  "product_id": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-race@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=ppc64le\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
                "product": {
                  "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64 (go-toolset:rhel8)",
                  "product_id": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=x86_64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
                "product": {
                  "name": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64 (go-toolset:rhel8)",
                  "product_id": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve-debugsource@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=x86_64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
                "product": {
                  "name": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64 (go-toolset:rhel8)",
                  "product_id": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/delve-debuginfo@1.26.1-1.module%2Bel8.10.0%2B24516%2B40554724?arch=x86_64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
                "product": {
                  "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64 (go-toolset:rhel8)",
                  "product_id": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=x86_64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
                "product": {
                  "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64 (go-toolset:rhel8)",
                  "product_id": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-bin@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=x86_64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
                "product": {
                  "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64 (go-toolset:rhel8)",
                  "product_id": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/go-toolset@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=x86_64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
                "product": {
                  "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64 (go-toolset:rhel8)",
                  "product_id": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-race@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=x86_64\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
                "product": {
                  "name": "golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch (go-toolset:rhel8)",
                  "product_id": "golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-docs@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=noarch\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
                "product": {
                  "name": "golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch (go-toolset:rhel8)",
                  "product_id": "golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-misc@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=noarch\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
                "product": {
                  "name": "golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch (go-toolset:rhel8)",
                  "product_id": "golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-tests@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=noarch\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
                "product": {
                  "name": "golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch (go-toolset:rhel8)",
                  "product_id": "golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-src@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=noarch\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
                "product": {
                  "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x (go-toolset:rhel8)",
                  "product_id": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=s390x\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
                "product": {
                  "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x (go-toolset:rhel8)",
                  "product_id": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-bin@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=s390x\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
                "product": {
                  "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x (go-toolset:rhel8)",
                  "product_id": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/go-toolset@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=s390x\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
                "product": {
                  "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x (go-toolset:rhel8)",
                  "product_id": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/golang-race@1.26.10-1.module%2Bel8.10.0%2B25107%2B6b50279c?arch=s390x\u0026rpmmod=go-toolset:rhel8:8100020261020054335:a3795dee"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8"
        },
        "product_reference": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8"
        },
        "product_reference": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8"
        },
        "product_reference": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8"
        },
        "product_reference": "delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8"
        },
        "product_reference": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8"
        },
        "product_reference": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8"
        },
        "product_reference": "delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8"
        },
        "product_reference": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8"
        },
        "product_reference": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8"
        },
        "product_reference": "delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8"
        },
        "product_reference": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8"
        },
        "product_reference": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8"
        },
        "product_reference": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8"
        },
        "product_reference": "go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8"
        },
        "product_reference": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8"
        },
        "product_reference": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8"
        },
        "product_reference": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8"
        },
        "product_reference": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8"
        },
        "product_reference": "golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8"
        },
        "product_reference": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8"
        },
        "product_reference": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8"
        },
        "product_reference": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8"
        },
        "product_reference": "golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
        },
        "product_reference": "golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
        },
        "product_reference": "golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8"
        },
        "product_reference": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8"
        },
        "product_reference": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8"
        },
        "product_reference": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8"
        },
        "product_reference": "golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
        },
        "product_reference": "golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
        },
        "product_reference": "golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-78667",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:51.418048+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548334"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity for Red Hat products because an unauthenticated remote attacker can exhaust server compute resources over the network, leading to a complete service outage. Across Red Hat enterprise environments, Go is widely deployed in container runtimes, monitoring daemons, and OpenShift infrastructure components. However, exploitation is restricted to applications that actively listen on the network and serve content using standard library HTTP handlers that process multi-range requests. CLI utilities and server components that do not handle byte-range requests from untrusted clients remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548334",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548334"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78667",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847309",
          "url": "https://go.dev/cl/847309"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81858",
          "url": "https://go.dev/issue/81858"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6609",
          "url": "https://pkg.go.dev/vuln/GO-2026-6609"
        }
      ],
      "release_date": "2026-10-08T22:53:59.148000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-20T22:02:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:86203"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers"
    },
    {
      "cve": "CVE-2026-78669",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:01:28.964317+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548344"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go net/http package and the golang.org/x/net/http2 module. A malicious HTTP/2 peer can cause excessive CPU consumption by opening a large number of HTTP/2 streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. Each SETTINGS frame forces the server or client to iterate over all open streams to adjust their flow-control windows, resulting in quadratic CPU usage and denial of service.\n\nThis vulnerability affects all Go programs that serve or consume HTTP/2 traffic using net/http or golang.org/x/net/http2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548344",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-78669",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847186",
          "url": "https://go.dev/cl/847186"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847308",
          "url": "https://go.dev/cl/847308"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81742",
          "url": "https://go.dev/issue/81742"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs",
          "url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6611",
          "url": "https://pkg.go.dev/vuln/GO-2026-6611"
        }
      ],
      "release_date": "2026-10-08T22:53:59.530000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-20T22:02:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:86203"
        },
        {
          "category": "workaround",
          "details": "In case you consume HTTP2, upgrade to a patched version of the http module.\n\nVerify:\n```\ngo version\ngo list -m golang.org/x/net\ngovulncheck ./...\n```",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames"
    },
    {
      "cve": "CVE-2026-97031",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-08T23:00:59.284728+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2548336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can trigger memory exhaustion and crash server processes without requiring privileges or user interaction. Go applications that terminate TLS connections and accept Encrypted Client Hello configurations are vulnerable to resource amplification during the initial handshake. While the flaw does not facilitate arbitrary code execution or compromise data confidentiality, the resulting denial of service can disrupt critical network services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "RHBZ#2548336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97031",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/847312",
          "url": "https://go.dev/cl/847312"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/81855",
          "url": "https://go.dev/issue/81855"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
          "url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6607",
          "url": "https://pkg.go.dev/vuln/GO-2026-6607"
        }
      ],
      "release_date": "2026-10-08T22:53:58.775000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-20T22:02:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:86203"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references"
    },
    {
      "cve": "CVE-2026-111943",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-10-20T09:38:36.160000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556068"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important because Go applications validating TLS certificates could accept unauthorized certificates issued by distrusted intermediate Certificate Authorities, potentially compromising the integrity and confidentiality of secure network communications. Any Go-based client or server relying on standard certificate verification may be exposed to man-in-the-middle attacks if an attacker intercepts traffic using certificates derived from these intermediate keys. Exploitation requires specific network positioning and certificates generated by the untrusted intermediate authorities, limiting opportunistic widespread abuse.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
          "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556068",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556068"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-111943",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/go/issues/82345",
          "url": "https://github.com/golang/go/issues/82345"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU",
          "url": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU"
        }
      ],
      "release_date": "2026-10-20T02:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-20T22:02:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:86203"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debuginfo-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:delve-debugsource-0:1.26.1-1.module+el8.10.0+24516+40554724.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:go-toolset-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.src::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-bin-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-docs-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-misc-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.aarch64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.ppc64le::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.s390x::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-race-0:1.26.10-1.module+el8.10.0+25107+6b50279c.x86_64::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-src-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8",
            "AppStream-8.10.0.Z.MAIN.EUS:golang-tests-0:1.26.10-1.module+el8.10.0+25107+6b50279c.noarch::go-toolset:rhel8"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.