VDB
GO-2026-4341
GO-2026-4341
PUBLISHED
CVSS 8.699999809265137 HIGH
Memory exhaustion in query parameter parsing in net/url
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | telegraf-1.36 | 0, 0, 0 |
| chainguard | tekton-pipelines-1.6 | *, * |
| chainguard | clickhouse-operator-fips | 0, 0 |
| wolfi | azure-ipam | *, *, * |
| wolfi | wgcf | 0, 0, 0 |
| chainguard | gostatsd | 0, 0 |
| chainguard | gitlab-workhorse-ce-fips-18.5 | 0, 0 |
| chainguard | prometheus-2.51 | 0, 0, 0 |
| wolfi | stakater-reloader | 0, 0, 0 |
| chainguard | nri-jmx | 0, 0, 0 |
| wolfi | blobfuse2 | 0, 0, 0 |
| chainguard | contour-1.32 | 0, 0 |
| chainguard | monstache | 0, 0, 0 |
| wolfi | dex | 0, 0, 0 |
| chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.21 | 0, 0 |
| wolfi | gatus | 0, 0, 0 |
| chainguard | dapr-fips-1.14 | 0, 0 |
| chainguard | apm-server-fips-8.19 | 0, 0 |
| chainguard | karma-fips | 0, 0, 0 |
| wolfi | tfsec | 0, 0, 0 |
…and 1391 more
Timeline
- Jan 28, 2026 CVE Published
- Aug 14, 2026 CVE Updated