VDB
GO-2026-4339
GO-2026-4339
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Arbitrary file write using cgo pkg-config directive in cmd/go
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | blobfuse2 | 0 |
| chainguard | cluster-api-fips-1.7 | 0 |
| chainguard | loki-fips-2.9 | 0 |
| chainguard | gitlab-rails-ce-fips-18.5 | 0 |
| wolfi | runc | 0 |
| chainguard | jupyterhub-k8s-image-awaiter-fips | 0 |
| chainguard | kapp | 0 |
| chainguard | step | 0 |
| wolfi | spqr | 0 |
| wolfi | nri-memcached | 0 |
| chainguard | bank-vaults | 0 |
| chainguard | cluster-autoscaler-fips-1.33 | 0 |
| chainguard | telegraf-1.37 | 0 |
| chainguard | beats-fips-8.18 | 0 |
| wolfi | nerdctl | 0 |
| chainguard | external-secrets-operator-fips-1.1 | 0 |
| chainguard | custom-pod-autoscaler | 0 |
| chainguard | newrelic-fluent-bit-output-fips | 0 |
| chainguard | metallb-fips | 0 |
| wolfi | steampipe | 0 |
…and 1396 more
Timeline
- Jan 28, 2026 CVE Published
- Aug 5, 2026 CVE Updated