VDB
GO-2026-4961
GO-2026-4961
PUBLISHED
Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | mattermost-11.5 | 0 |
| chainguard | mattermost-11.4 | 0 |
| chainguard | kubescape | 0 |
| chainguard | mattermost-fips-11.7 | 0 |
| wolfi | glab | * |
| wolfi | mattermost-11.4 | 0 |
| chainguard | seaweedfs-operator-fips | 0 |
| chainguard | gitlab-workhorse-ce-18.10 | * |
| chainguard | gitlab-workhorse-ce-fips-18.10 | * |
| chainguard | ollama-fips | 0 |
| chainguard | gitlab-workhorse-ce-18.11 | * |
| chainguard | rclone-fips | 0 |
| chainguard | gitlab-workhorse-ce-fips-18.11 | * |
| chainguard | bento-fips | 0 |
| chainguard | rclone | 0 |
| chainguard | mattermost-fips-11.6 | 0 |
| chainguard | mattermost-fips-11.1 | 0 |
| wolfi | mattermost-11.7 | 0 |
| chainguard | gitea-fips | 0 |
| chainguard | tailscale | * |
…and 43 more
Timeline
- Apr 21, 2026 CVE Published
- Jun 25, 2026 CVE Updated
References
- https://go.dev/cl/759860 patch
- https://go.dev/cl/780860 patch
- https://go.dev/issue/78407 report