VDB
GO-2026-4348
GO-2026-4348
PUBLISHED
CVSS 8.699999809265137 HIGH
Client DoS via malformed server response in github.com/theupdateframework/go-tuf
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | ko | 0, 0, 0 |
| wolfi | skaffold | 0, 0, 0 |
| chainguard | rekor-fips | 0, 0, 0 |
| chainguard | kyverno-fips-1.16 | 0, 0, 0 |
| wolfi | gitsign | 0, 0, 0 |
| wolfi | zarf | 0, 0, 0 |
| wolfi | kubescape | 0, 0, 0 |
| chainguard | cloudbeat-8.17 | 0, 0, 0 |
| wolfi | slsa-verifier | 0, 0, 0 |
| github.com | theupdateframework/go-tuf/v2 | 0, 0, 0 |
| chainguard | rekor | 0, 0, 0 |
| chainguard | tekton-chains | 0, 0, 0 |
| chainguard | chainctl | 0, 0, 0 |
| chainguard | skaffold-fips | 0, 0, 0 |
| chainguard | image-factory | 0, 0, 0 |
| chainguard | cloudbeat-fips-9.2 | 0, 0, 0 |
| chainguard | cosign-fips | 0, 0, 0 |
| wolfi | aactl | 0, 0, 0 |
| chainguard | policy-controller-fips | 0, 0, 0 |
| chainguard | kyverno-1.14 | 0, 0, 0 |
…and 100 more
Timeline
- Feb 2, 2026 CVE Published
- Aug 7, 2026 CVE Updated