VDB
GO-2026-4984
GO-2026-4984
PUBLISHED
Malicious module proxy can bypass checksum database in cmd/go
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | caddy-fips | 0 |
| chainguard | nri-kafka-fips | 0 |
| wolfi | redpanda-25.3 | 0, 0 |
| chainguard | longhorn-backing-image-manager-fips-1.9 | 0 |
| chainguard | kueue-fips-0.16 | 0 |
| chainguard | volcano-fips | 0 |
| chainguard | nginx-prometheus-exporter-fips | 0 |
| chainguard | azuredisk-csi-fips-1.33 | 0 |
| chainguard | dcgm-exporter-fips | 0 |
| chainguard | paranoia | 0 |
| wolfi | consul-k8s-1.9 | 0 |
| wolfi | splunk-otel-collector | 0 |
| chainguard | prometheus-elasticsearch-exporter | 0 |
| chainguard | zabbix-agent2-6.0 | 0 |
| chainguard | crossplane-provider-aws-guardduty-fips | 0 |
| chainguard | rqlite-fips | 0 |
| chainguard | nri-memcached-fips | 0 |
| chainguard | cilium-envoy-fips-1.17 | 0 |
| chainguard | helmfile | 0 |
| wolfi | kubernetes-1.34 | 0 |
…and 1902 more
Timeline
- May 7, 2026 CVE Published
- Aug 31, 2026 CVE Updated