VDB
GO-2026-4981
GO-2026-4981
PUBLISHED
CVSS 8.699999809265137 HIGH
Record from OSV · Published May 7, 2026
Crash when handling long CNAME response in net
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| crossplane-provider-aws-opensearch | Chainguard | 2.5.0-r3 |
| crossplane-provider-azure-relay | Chainguard | 2.5.0-r2 |
| newrelic-k8s-metrics-adapter-fips | Chainguard | 0.20.3-r2 |
| pluto-fips | Chainguard | 5.24.0-r1 |
| kyverno-1.15 | Chainguard | 1.15.3-r15 |
| go-1.26 | Chainguard | 1.26.3-r0 |
| crossplane-provider-aws-backup | Chainguard | 2.5.0-r8 |
| crossplane-fips-2.2 | Chainguard | 2.2.1-r1 |
| grafana-fips-13.0 | Chainguard | 13.0.1-r1 |
| crossplane-provider-aws-efs | Chainguard | 2.5.0-r9 |
| prometheus-adapter | Chainguard | 0.12.0-r25 |
| knative-net-istio-1.20 | Chainguard | 1.20.4-r2 |
88 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | crossplane-provider-aws-opensearch | 0 |
| chainguard | crossplane-provider-azure-relay | 0 |
| chainguard | addon-resizer-fips | * |
| chainguard | newrelic-k8s-metrics-adapter-fips | 0 |
| chainguard | pluto-fips | 0 |
| chainguard | kyverno-1.15 | 0 |
| chainguard | go-1.26 | 0 |
| chainguard | crossplane-provider-aws-backup | 0 |
| chainguard | crossplane-fips-2.2 | 0 |
| chainguard | nri-mysql-fips | * |
| chainguard | grafana-fips-13.0 | 0 |
| chainguard | crossplane-provider-aws-efs | 0 |
| chainguard | prometheus-adapter | 0 |
| chainguard | knative-net-istio-1.20 | 0 |
| chainguard | nri-consul-fips | * |
| chainguard | ratify | 0 |
| chainguard | cluster-autoscaler-fips-1.31 | 0 |
| chainguard | descheduler-fips | 0 |
| chainguard | gitlab-runner-fips-18.10 | 0 |
| chainguard | step-ca | 0 |
…and 1906 more
Timeline
- May 7, 2026 CVE Published
- Aug 31, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GO-2026-4981
vulnetix vdb fixes GO-2026-4981Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GO-2026-4981/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart