VDB
GO-2026-4753
GO-2026-4753
PUBLISHED
Loop Variable Capture Signature Bypass in goxmldsig in github.com/russellhaering/goxmldsig
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | dex-fips | 0 |
| chainguard | teleport-operator-fips-18 | 0 |
| chainguard | mattermost-11.5 | 0 |
| chainguard | mattermost-fips-11.1 | 0 |
| chainguard | rancher-agent-2.13 | 0 |
| chainguard | mattermost-11.4 | 0 |
| chainguard | zitadel-3 | 0 |
| chainguard | teleport-18 | 0 |
| wolfi | dex | 0 |
| chainguard | gotrue-fips | 0 |
| chainguard | teleport-operator-fips-16 | 0 |
| chainguard | commercial-grafana-12.3 | 0 |
| chainguard | rancher-agent-2.11 | 0 |
| chainguard | neuvector-fips | 0 |
| chainguard | commercial-grafana-11.6 | 0 |
| chainguard | rancher-2.12 | 0 |
| chainguard | mattermost-fips-11.5 | 0 |
| chainguard | rancher-2.10 | 0 |
| chainguard | neuvector | 0 |
| wolfi | mattermost-11.5 | 0 |
…and 26 more
Timeline
- Mar 27, 2026 CVE Published
- Mar 30, 2026 CVE Updated