VDB
GO-2026-5039
GO-2026-5039
PUBLISHED
Arbitrary inputs are included in errors without any escaping in net/textproto
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | memstress-fips | * |
| chainguard | gitlab-pages-fips-19.0 | 0 |
| wolfi | zarf | 0 |
| wolfi | act | 0 |
| chainguard | cloudbeat-fips-9.2 | 0 |
| chainguard | harbor-registry | 0 |
| chainguard | crossplane-provider-aws-kendra-fips | 0 |
| chainguard | velero-fips | * |
| chainguard | harbor-fips-2.12 | 0 |
| chainguard | flux-fips-2.5 | 0 |
| wolfi | flux-2.7 | 0 |
| wolfi | aws-flb-kinesis | 0 |
| chainguard | multus-cni | 0 |
| chainguard | kube-conformance-1.34 | 0 |
| chainguard | hcledit | * |
| chainguard | zarf | 0 |
| chainguard | rancher-security-scan-0.9 | * |
| chainguard | crossplane-provider-aws-sagemaker | 0 |
| chainguard | envoy-ai-gateway-fips | 0 |
| wolfi | aactl | 0 |
…and 1575 more
Timeline
- Jun 2, 2026 CVE Published
- Aug 31, 2026 CVE Updated