VDB
GO-2026-4550
GO-2026-4550
PUBLISHED
CIRCL has an incorrect calculation in secp384r1 CombinedMult in github.com/cloudflare/circl
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | vault-1.21 | 0, 0, 0 |
| chainguard | flux-fips-2.8 | 0, 0, 0 |
| chainguard | opentofu-1.9 | 0, 0, 0 |
| chainguard | policy-controller | 0, 0, 0 |
| wolfi | lazygit | 0, 0, 0 |
| chainguard | lazygit | 0, 0, 0 |
| chainguard | argo-cd-fips-2.14 | 0, 0, 0 |
| chainguard | gitlab-runner-18.7 | 0, 0, 0 |
| chainguard | image-factory | 0, 0, 0 |
| wolfi | helm-4 | 0, 0, 0 |
| chainguard | reports-server | 0, 0, 0 |
| wolfi | crossplane-2.2 | 0, 0, 0 |
| chainguard | crossplane-provider-aws-sqs-fips | 0, 0, 0 |
| chainguard | crossplane-provider-aws-iam-fips | 0, 0, 0 |
| wolfi | gitlab-runner-18.8 | 0, 0, 0 |
| chainguard | gitlab-rails-ce-18.6 | 0, 0, 0 |
| chainguard | ratify-fips | 0, 0, 0 |
| wolfi | guac | 0, 0, 0 |
| wolfi | opentofu-1.9 | 0, 0, 0 |
| wolfi | crossplane-provider-aws-kinesis | 0, 0, 0 |
…and 435 more
Timeline
- Feb 27, 2026 CVE Published
- Mar 9, 2026 CVE Updated
- May 1, 2026 Security Advisory