VDB
GO-2026-4986
GO-2026-4986
PUBLISHED
Quadratic string concatentation in consumeComment in net/mail
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | prometheus-3.11 | 0 |
| chainguard | crossplane-provider-aws-elb-fips | 0 |
| chainguard | envoy-ai-gateway-fips | * |
| chainguard | haproxy-ingress-fips-0.15 | * |
| chainguard | amazon-cloudwatch-agent-operator-fips | * |
| chainguard | ceph-csi-operator-fips | 0 |
| chainguard | dynamic-localpv-provisioner-fips | * |
| chainguard | gomplate-4 | * |
| chainguard | rancher-security-scan-fips-0.8 | * |
| chainguard | prometheus-nats-exporter-fips | * |
| chainguard | consul-k8s-fips-1.5 | * |
| chainguard | atlantis | 0 |
| chainguard | nvidia-nsight-compute-13.3 | 0 |
| chainguard | consul-k8s-1.7 | * |
| chainguard | sops-fips | * |
| chainguard | aactl | 0 |
| wolfi | govulncheck | * |
| chainguard | migrate | * |
| wolfi | karma | * |
| chainguard | cloud-provider-azure-fips-1.33 | 0 |
…and 1906 more
Timeline
- May 7, 2026 CVE Published
- Aug 31, 2026 CVE Updated