{"id":"EUVD-2026-95420","enisaUuid":"302e0508-25e4-36c9-a8fe-a9c488ec6c8a","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).","datePublished":"Oct 8, 2026, 10:53:58 PM","dateUpdated":"Oct 9, 2026, 3:36:01 PM","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://go.dev/cl/847305\nhttps://go.dev/issue/81739\nhttps://groups.google.com/g/golang-announce/c/U2fTuyDJznI\nhttps://pkg.go.dev/vuln/GO-2026-6604\n","aliases":"CVE-2026-56857\nGHSA-c3q7-m35p-9qq7\n","assigner":"Go","epss":0.55,"enisaIdProduct":[{"id":"3f3495c9-1961-3379-858d-79de615eef9e","product":{"name":"internal/syscall/windows","vendor":{"name":"Go standard library"}},"product_version":"1.27.0-0 \u003c1.27.2"},{"id":"5871ae32-4402-33d7-bc50-323106e5f261","product":{"name":"internal/syscall/windows","vendor":{"name":"Go standard library"}},"product_version":"0 \u003c1.26.9"},{"id":"982bf9b6-24b2-3461-a832-c1287a4a3830","product":{"name":"os","vendor":{"name":"Go standard library"}},"product_version":"0 \u003c1.26.9"},{"id":"cf98fe7f-4729-3a36-ba67-49bb1172ac8b","product":{"name":"os","vendor":{"name":"Go standard library"}},"product_version":"1.27.0-0 \u003c1.27.2"}],"enisaIdVendor":[{"id":"ed385922-5779-35e0-b694-ae4985790e71","vendor":{"name":"Go standard library"}}],"enisaIdVulnerability":[{"id":"0bfae155-ee2a-3f81-add5-2ad35b53ec96","vulnerability":{"id":"CVE-2026-56857","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).","datePublished":"Oct 8, 2026, 10:53:58 PM","dateUpdated":"Oct 9, 2026, 3:36:01 PM","status":"PUBLISHED","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://go.dev/cl/847305\nhttps://go.dev/issue/81739\nhttps://groups.google.com/g/golang-announce/c/U2fTuyDJznI\nhttps://pkg.go.dev/vuln/GO-2026-6604\n","enisa_id":"EUVD-2026-95420\n","assigner":"Go","epss":0.55,"dataProcessed":"Oct 30, 2026, 7:17:17 AM","vulnerabilityProduct":[{"id":"000b2d08-823a-37f5-85c3-0a2fda483b66","product":{"name":"internal/syscall/windows","vendor":{"name":"Go standard library"}},"product_version":"0 \u003c1.26.9"},{"id":"82bcbd0e-f12d-3a5d-b836-5d1441af41e7","product":{"name":"os","vendor":{"name":"Go standard library"}},"product_version":"0 \u003c1.26.9"},{"id":"98f63d56-1455-372c-a14a-83b86d199774","product":{"name":"os","vendor":{"name":"Go standard library"}},"product_version":"1.27.0-0 \u003c1.27.2"},{"id":"fe07949b-cef9-35f9-8aaf-1d6f9d03ca79","product":{"name":"internal/syscall/windows","vendor":{"name":"Go standard library"}},"product_version":"1.27.0-0 \u003c1.27.2"}],"vulnerabilityVendor":[{"id":"6e1b0f28-0653-36d0-8719-7a484987fc79","vendor":{"name":"Go standard library"}}]}},{"id":"a690f4fa-c020-3344-ba62-6148fe66b3d8","vulnerability":{"id":"GHSA-c3q7-m35p-9qq7","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).","datePublished":"Oct 9, 2026, 12:31:47 AM","dateUpdated":"Oct 9, 2026, 6:31:34 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-56857\nhttps://go.dev/cl/847305\nhttps://go.dev/issue/81739\nhttps://groups.google.com/g/golang-announce/c/U2fTuyDJznI\nhttps://pkg.go.dev/vuln/GO-2026-6604\n","enisa_id":"EUVD-2026-95420\n","aliases":"CVE-2026-56857\nGHSA-c3q7-m35p-9qq7\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:02:26 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"6a6fc43e-1d1e-33e8-a0aa-66a9eac3d1a6","advisory":{"id":"openSUSE-SU-2026:22093-1","description":"Security update for go1.27","summary":"Security update for go1.27","datePublished":"Oct 13, 2026, 12:02:27 PM","dateUpdated":"Oct 21, 2026, 11:53:39 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22093-1.json\nhttps://bugzilla.suse.com/1272545\nhttps://bugzilla.suse.com/1284766\nhttps://bugzilla.suse.com/1284767\nhttps://bugzilla.suse.com/1284768\nhttps://bugzilla.suse.com/1284769\nhttps://bugzilla.suse.com/1284770\nhttps://bugzilla.suse.com/1284771\nhttps://bugzilla.suse.com/1284772\nhttps://bugzilla.suse.com/1284773\nhttps://bugzilla.suse.com/1284774\nhttps://bugzilla.suse.com/1284775\nhttps://bugzilla.suse.com/1284776\nhttps://bugzilla.suse.com/1284777\nhttps://bugzilla.suse.com/1284778\nhttps://bugzilla.suse.com/1284779\nhttps://bugzilla.suse.com/1284780\nhttps://www.suse.com/security/cve/CVE-2026-56857/\nhttps://www.suse.com/security/cve/CVE-2026-56866/\nhttps://www.suse.com/security/cve/CVE-2026-78659/\nhttps://www.suse.com/security/cve/CVE-2026-78660/\nhttps://www.suse.com/security/cve/CVE-2026-78663/\nhttps://www.suse.com/security/cve/CVE-2026-78667/\nhttps://www.suse.com/security/cve/CVE-2026-78669/\nhttps://www.suse.com/security/cve/CVE-2026-94439/\nhttps://www.suse.com/security/cve/CVE-2026-94440/\nhttps://www.suse.com/security/cve/CVE-2026-94444/\nhttps://www.suse.com/security/cve/CVE-2026-94447/\nhttps://www.suse.com/security/cve/CVE-2026-94448/\nhttps://www.suse.com/security/cve/CVE-2026-97030/\nhttps://www.suse.com/security/cve/CVE-2026-97031/\nhttps://www.suse.com/security/cve/CVE-2026-97032/\n","aliases":"CVE-2026-56857\nCVE-2026-56866\nCVE-2026-78659\nCVE-2026-78660\nCVE-2026-78663\nCVE-2026-78667\nCVE-2026-78669\nCVE-2026-94439\nCVE-2026-94440\nCVE-2026-94444\nCVE-2026-94447\nCVE-2026-94448\nCVE-2026-97030\nCVE-2026-97031\nCVE-2026-97032\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"00131409-b6d7-3154-abe9-29856b8453d9","product":{"name":"go1.27-race-0:1.27.2-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"169bae25-83ac-32e7-9f31-9760ebbc4f4c","product":{"name":"go1.27-0:1.27.2-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4fa36687-59cf-3a12-ab63-5fd251b37454","product":{"name":"go1.27-0:1.27.2-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"574d7fdf-e85b-3407-8513-cac5b312062a","product":{"name":"go1.27-doc-0:1.27.2-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"75c4a87a-7c72-37c1-bea4-d7a6bc955b8f","product":{"name":"go1.27-doc-0:1.27.2-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"77096993-aaef-380d-bfc8-a031c38d2fad","product":{"name":"go1.27-race-0:1.27.2-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7f118319-7af6-3eaf-b6cf-0445cdddd8ce","product":{"name":"go1.27-doc-0:1.27.2-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9e40bb0b-eb53-3fc1-b167-8510e56f3ab5","product":{"name":"go1.27-race-0:1.27.2-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"aed525cc-ddfd-3d44-a2f3-d4f270bbc025","product":{"name":"go1.27-0:1.27.2-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b89b0f7e-d755-3f05-a523-bc2fa53ee16f","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"c4dd6721-c352-3cc4-ba3d-63c791bbaf64","product":{"name":"go1.27-0:1.27.2-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c5d1fd7d-e43e-30b7-ab76-66bd0c8e195f","product":{"name":"go1.27-doc-0:1.27.2-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e29d6081-cca3-3b17-9832-7df7b4bbdb61","product":{"name":"go1.27-race-0:1.27.2-160000.1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"75a955d6-3226-3cd1-abfb-323bda6bf5b2","advisory":{"id":"SUSE-SU-2026:24237-1","description":"Security update for go1.27","summary":"Security update for go1.27","datePublished":"Oct 13, 2026, 12:03:33 PM","dateUpdated":"Oct 21, 2026, 11:50:16 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24237-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624237-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624237-1/\nhttps://bugzilla.suse.com/1272545\nhttps://bugzilla.suse.com/1284766\nhttps://bugzilla.suse.com/1284767\nhttps://bugzilla.suse.com/1284768\nhttps://bugzilla.suse.com/1284769\nhttps://bugzilla.suse.com/1284770\nhttps://bugzilla.suse.com/1284771\nhttps://bugzilla.suse.com/1284772\nhttps://bugzilla.suse.com/1284773\nhttps://bugzilla.suse.com/1284774\nhttps://bugzilla.suse.com/1284775\nhttps://bugzilla.suse.com/1284776\nhttps://bugzilla.suse.com/1284777\nhttps://bugzilla.suse.com/1284778\nhttps://bugzilla.suse.com/1284779\nhttps://bugzilla.suse.com/1284780\nhttps://www.suse.com/security/cve/CVE-2026-56857/\nhttps://www.suse.com/security/cve/CVE-2026-56866/\nhttps://www.suse.com/security/cve/CVE-2026-78659/\nhttps://www.suse.com/security/cve/CVE-2026-78660/\nhttps://www.suse.com/security/cve/CVE-2026-78663/\nhttps://www.suse.com/security/cve/CVE-2026-78667/\nhttps://www.suse.com/security/cve/CVE-2026-78669/\nhttps://www.suse.com/security/cve/CVE-2026-94439/\nhttps://www.suse.com/security/cve/CVE-2026-94440/\nhttps://www.suse.com/security/cve/CVE-2026-94444/\nhttps://www.suse.com/security/cve/CVE-2026-94447/\nhttps://www.suse.com/security/cve/CVE-2026-94448/\nhttps://www.suse.com/security/cve/CVE-2026-97030/\nhttps://www.suse.com/security/cve/CVE-2026-97031/\nhttps://www.suse.com/security/cve/CVE-2026-97032/\n","aliases":"CVE-2026-56857\nCVE-2026-56866\nCVE-2026-78659\nCVE-2026-78660\nCVE-2026-78663\nCVE-2026-78667\nCVE-2026-78669\nCVE-2026-94439\nCVE-2026-94440\nCVE-2026-94444\nCVE-2026-94447\nCVE-2026-94448\nCVE-2026-97030\nCVE-2026-97031\nCVE-2026-97032\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"09724cb6-80b1-3957-8203-b9a58b77843a","product":{"name":"go1.27-0:1.27.2-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0d870c41-4eaa-301a-86e9-e417ba949776","product":{"name":"go1.27-0:1.27.2-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"158cf18d-72a6-3528-b757-b698f7c609f2","product":{"name":"go1.27-0:1.27.2-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"1bce30c8-29df-3977-be64-ddc114b54554","product":{"name":"go1.27-doc-0:1.27.2-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"26745c27-70c3-3d3a-9080-fbd1a5940f2e","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"2a396e33-16f8-3a0b-ae48-a22422de3665","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"3cb929e6-e206-38d6-a3fe-55d8a298b863","product":{"name":"go1.27-race-0:1.27.2-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"51eff2da-a8f9-3b07-b4da-584766ec0ce4","product":{"name":"go1.27-doc-0:1.27.2-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7976a0bd-2e03-3c0d-b150-4fca11b9031a","product":{"name":"go1.27-race-0:1.27.2-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9eb5dbfc-74af-312b-9100-4b5880192d2b","product":{"name":"go1.27-race-0:1.27.2-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a408b68e-aec3-3810-b767-1ea9150f0e42","product":{"name":"go1.27-doc-0:1.27.2-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"cf591e9a-9a17-3e36-8703-ba4f4cde89cb","product":{"name":"go1.27-0:1.27.2-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"de226c8b-df86-3ecf-af50-81f81e2ee962","product":{"name":"go1.27-doc-0:1.27.2-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"fb02c229-8106-34ad-9997-090534b1edff","product":{"name":"go1.27-race-0:1.27.2-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"7d76328e-94cb-34f6-a28d-ddf99c14fe56","advisory":{"id":"openSUSE-SU-2026:12101-1","description":"go1.27-1.27.2-1.1 on GA media","summary":"go1.27-1.27.2-1.1 on GA media","datePublished":"Oct 10, 2026, 12:00:00 AM","dateUpdated":"Oct 21, 2026, 11:52:42 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12101-1.json\nhttps://www.suse.com/security/cve/CVE-2026-56857/\nhttps://www.suse.com/security/cve/CVE-2026-56866/\nhttps://www.suse.com/security/cve/CVE-2026-78659/\nhttps://www.suse.com/security/cve/CVE-2026-78660/\nhttps://www.suse.com/security/cve/CVE-2026-78663/\nhttps://www.suse.com/security/cve/CVE-2026-78667/\nhttps://www.suse.com/security/cve/CVE-2026-78669/\nhttps://www.suse.com/security/cve/CVE-2026-94439/\nhttps://www.suse.com/security/cve/CVE-2026-94440/\nhttps://www.suse.com/security/cve/CVE-2026-94444/\nhttps://www.suse.com/security/cve/CVE-2026-94447/\nhttps://www.suse.com/security/cve/CVE-2026-94448/\nhttps://www.suse.com/security/cve/CVE-2026-97030/\nhttps://www.suse.com/security/cve/CVE-2026-97031/\nhttps://www.suse.com/security/cve/CVE-2026-97032/\n","aliases":"CVE-2026-56857\nCVE-2026-56866\nCVE-2026-78659\nCVE-2026-78660\nCVE-2026-78663\nCVE-2026-78667\nCVE-2026-78669\nCVE-2026-94439\nCVE-2026-94440\nCVE-2026-94444\nCVE-2026-94447\nCVE-2026-94448\nCVE-2026-97030\nCVE-2026-97031\nCVE-2026-97032\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"2028c88c-6ce7-3824-ad28-d05adb5b61a7","product":{"name":"go1.27-race-0:1.27.2-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"21a6b77b-9333-3d3e-969e-ca31aa600a9a","product":{"name":"go1.27-doc-0:1.27.2-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"22ed6fdc-ce9a-3961-b76c-9eb2d747fe8a","product":{"name":"go1.27-race-0:1.27.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"25f34ad5-12f0-3d25-b76f-965da9d59914","product":{"name":"go1.27-0:1.27.2-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"330f0f54-c974-3686-9f73-130d21230ff1","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"35288c97-e03b-324c-a215-ef646c265020","product":{"name":"go1.27-race-0:1.27.2-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"55e6497a-e6cc-302b-bc87-7825399ac385","product":{"name":"go1.27-doc-0:1.27.2-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"acfda158-c3cd-3552-96f0-e5a07636f617","product":{"name":"go1.27-doc-0:1.27.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b4b7166c-e606-3cbd-97f6-6472f69e1f04","product":{"name":"go1.27-doc-0:1.27.2-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c40fe299-6d4a-3958-b5db-350dee75ea8e","product":{"name":"go1.27-race-0:1.27.2-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c7c0095b-b123-3d15-8142-0e0edd3225dc","product":{"name":"go1.27-0:1.27.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c991b154-085b-3bcb-8561-63720fbec273","product":{"name":"go1.27-0:1.27.2-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"fdcd447c-96e3-3bf6-8e6f-fbfb6f6b4b7f","product":{"name":"go1.27-0:1.27.2-1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"7f7a3012-cb61-3bf3-b5a9-c9e9ba1d975d","advisory":{"id":"WID-SEC-W-2026-3841","description":"Golang Go: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Daten zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.","datePublished":"Oct 8, 2026, 10:00:00 PM","dateUpdated":"Oct 28, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3841.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3841\n","aliases":"CVE-2026-56857\nCVE-2026-56866\nCVE-2026-78659\nCVE-2026-78660\nCVE-2026-78663\nCVE-2026-78667\nCVE-2026-78669\nCVE-2026-94439\nCVE-2026-94440\nCVE-2026-94444\nCVE-2026-94447\nCVE-2026-94448\nCVE-2026-97030\nCVE-2026-97031\nCVE-2026-97032\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"55659e04-6427-39ad-b6da-f9bd63325821","product":{"name":"azl3","vendor":{"name":"Microsoft"}}},{"id":"68c355e6-83f1-3c18-9575-3332a8093f91","product":{"name":"Go","vendor":{"name":"ecies"}}},{"id":"6b12e1c3-d592-35c0-aa9d-50fb0e41ed0a","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"7cdb3a30-8a8e-366b-bbae-34e69af08feb","product":{"name":"SUSE openSUSE","vendor":{"name":"SUSE"}}},{"id":"8c9b223b-22a0-3e1c-b093-d8ace9e6d342","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"c0658fc8-03b3-3df3-8e75-084e0e063791","product":{"name":"RESF Rocky Linux","vendor":{"name":"RESF"}}},{"id":"c2639a56-ca45-3e05-8128-085c2f8923ac","product":{"name":"1.27.2","vendor":{"name":"golang"}}},{"id":"cddc85fb-4890-3b66-b350-844c1aa6d519","product":{"name":"Amazon Linux 2","vendor":{"name":"Amazon"}}},{"id":"d80a16f7-1eba-363f-82d4-7723109e1b93","product":{"name":"SUSE Linux","vendor":{"name":"SUSE"}}},{"id":"d884aa36-c2ac-37f9-9bd0-1cfa4c31ca2c","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"de941af5-179f-3376-913d-ae5dc7e68745","product":{"name":"1.26.9","vendor":{"name":"golang"}}}]}},{"id":"c255eac8-5f95-3c4e-aef7-5eadd8a3a6c7","advisory":{"id":"msrc_CVE-2026-56857","description":"Root.Mkdir(All) can follow junctions out of the root on Windows in os","datePublished":"Oct 11, 2026, 1:54:56 AM","dateUpdated":"Oct 16, 2026, 1:51:20 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-56857.json\n","aliases":"CVE-2026-56857\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"170aea62-31c1-3eec-af24-c41055b2e0d8","product":{"name":"azl3 golang 0:1.26.7-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"39de9da2-c83d-3833-a6b4-faee3c005c73","product":{"name":"azl3 golang 0:1.27.1-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"59ce759c-c788-32f3-8e07-a471d312e60c","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"68f37452-8470-3577-aab7-042bac631935","product":{"name":"GoLang","vendor":{"name":"Go Programming Language"}}},{"id":"6a26e2ab-4aa8-334f-b768-09e138b5fb34","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}}]}},{"id":"c7d8943a-ad85-3d3f-a783-e86fff7c94dc","advisory":{"id":"openSUSE-SU-2026:22095-1","description":"Security update for go1.26","summary":"Security update for go1.26","datePublished":"Oct 13, 2026, 3:18:05 PM","dateUpdated":"Oct 21, 2026, 11:53:40 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22095-1.json\nhttps://bugzilla.suse.com/1255111\nhttps://bugzilla.suse.com/1284766\nhttps://bugzilla.suse.com/1284767\nhttps://bugzilla.suse.com/1284768\nhttps://bugzilla.suse.com/1284769\nhttps://bugzilla.suse.com/1284771\nhttps://bugzilla.suse.com/1284773\nhttps://bugzilla.suse.com/1284774\nhttps://bugzilla.suse.com/1284775\nhttps://bugzilla.suse.com/1284776\nhttps://bugzilla.suse.com/1284777\nhttps://bugzilla.suse.com/1284778\nhttps://bugzilla.suse.com/1284779\nhttps://bugzilla.suse.com/1284780\nhttps://www.suse.com/security/cve/CVE-2026-56857/\nhttps://www.suse.com/security/cve/CVE-2026-56866/\nhttps://www.suse.com/security/cve/CVE-2026-78659/\nhttps://www.suse.com/security/cve/CVE-2026-78660/\nhttps://www.suse.com/security/cve/CVE-2026-78667/\nhttps://www.suse.com/security/cve/CVE-2026-94439/\nhttps://www.suse.com/security/cve/CVE-2026-94440/\nhttps://www.suse.com/security/cve/CVE-2026-94444/\nhttps://www.suse.com/security/cve/CVE-2026-94447/\nhttps://www.suse.com/security/cve/CVE-2026-94448/\nhttps://www.suse.com/security/cve/CVE-2026-97030/\nhttps://www.suse.com/security/cve/CVE-2026-97031/\nhttps://www.suse.com/security/cve/CVE-2026-97032/\n","aliases":"CVE-2026-56857\nCVE-2026-56866\nCVE-2026-78659\nCVE-2026-78660\nCVE-2026-78667\nCVE-2026-94439\nCVE-2026-94440\nCVE-2026-94444\nCVE-2026-94447\nCVE-2026-94448\nCVE-2026-97030\nCVE-2026-97031\nCVE-2026-97032\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"47138af4-4ca6-33f4-b325-7ef7c4c30bf6","product":{"name":"go1.26-0:1.26.9-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"494e7651-2115-3d62-8db3-c5600f651ceb","product":{"name":"go1.26-race-0:1.26.9-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"4a6dd3ed-1780-378a-8bb9-6f8cd97a7456","product":{"name":"go1.26-0:1.26.9-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"57c7dd05-1d6a-3770-9f62-043996956a81","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"982b0b92-d869-3bc6-aadf-40f96cef0da6","product":{"name":"go1.26-race-0:1.26.9-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a6423391-87dc-3939-955d-93888181bbf4","product":{"name":"go1.26-doc-0:1.26.9-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"be2b0565-3faf-3657-8582-02e1025f3ed0","product":{"name":"go1.26-0:1.26.9-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"bfb1bb24-554e-3d67-bdd1-e4c17e497c25","product":{"name":"go1.26-race-0:1.26.9-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d87c41b5-6832-37c3-9a97-9cc2a0e80cf8","product":{"name":"go1.26-doc-0:1.26.9-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"e1124846-01d0-3c5a-a719-7e73ec7a645e","product":{"name":"go1.26-doc-0:1.26.9-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e77bb098-ec17-310e-820a-8f121fb4c938","product":{"name":"go1.26-0:1.26.9-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f3df063e-6e04-38e5-9636-17581a9baa8b","product":{"name":"go1.26-race-0:1.26.9-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f9a88a52-5d76-36d2-bd5a-3c89520d641a","product":{"name":"go1.26-doc-0:1.26.9-160000.1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"cb69747f-57f4-325c-8884-4661a1b368d6","advisory":{"id":"openSUSE-SU-2026:12093-1","description":"go1.26-1.26.9-1.1 on GA media","summary":"go1.26-1.26.9-1.1 on GA media","datePublished":"Oct 9, 2026, 12:00:00 AM","dateUpdated":"Oct 21, 2026, 11:52:40 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12093-1.json\nhttps://www.suse.com/security/cve/CVE-2026-56857/\nhttps://www.suse.com/security/cve/CVE-2026-56866/\nhttps://www.suse.com/security/cve/CVE-2026-78659/\nhttps://www.suse.com/security/cve/CVE-2026-78660/\nhttps://www.suse.com/security/cve/CVE-2026-78667/\nhttps://www.suse.com/security/cve/CVE-2026-94439/\nhttps://www.suse.com/security/cve/CVE-2026-94440/\nhttps://www.suse.com/security/cve/CVE-2026-94444/\nhttps://www.suse.com/security/cve/CVE-2026-94447/\nhttps://www.suse.com/security/cve/CVE-2026-94448/\nhttps://www.suse.com/security/cve/CVE-2026-97030/\nhttps://www.suse.com/security/cve/CVE-2026-97031/\nhttps://www.suse.com/security/cve/CVE-2026-97032/\n","aliases":"CVE-2026-56857\nCVE-2026-56866\nCVE-2026-78659\nCVE-2026-78660\nCVE-2026-78667\nCVE-2026-94439\nCVE-2026-94440\nCVE-2026-94444\nCVE-2026-94447\nCVE-2026-94448\nCVE-2026-97030\nCVE-2026-97031\nCVE-2026-97032\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0d639f68-a6f9-3cac-9403-6ca80c020d7e","product":{"name":"go1.26-0:1.26.9-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"0f2f9882-ff44-3870-b220-515131f73845","product":{"name":"go1.26-race-0:1.26.9-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"291c50b8-11e5-3323-aeb7-0bc61b76e636","product":{"name":"go1.26-0:1.26.9-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"63a06f0c-e7a8-3c94-9f2d-c19d1cb756bb","product":{"name":"go1.26-race-0:1.26.9-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"6f469c7c-1318-30b6-b700-e003dc74e367","product":{"name":"go1.26-race-0:1.26.9-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a93e9267-5e02-35ae-8ca8-c27da116659f","product":{"name":"go1.26-doc-0:1.26.9-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a982b1d7-4cb0-3668-8617-c3ffe867a626","product":{"name":"go1.26-doc-0:1.26.9-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b42aade8-5064-36a5-abc6-5e84116e1c8d","product":{"name":"go1.26-doc-0:1.26.9-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c4555c07-7c2a-3b7d-b7da-d03d2f90b6c5","product":{"name":"go1.26-0:1.26.9-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d49bef51-01e2-3c3b-87db-d0cb09d8451c","product":{"name":"go1.26-race-0:1.26.9-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d9d3ca53-bdd1-35b2-a3e9-de519a3f2a2d","product":{"name":"go1.26-0:1.26.9-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e39fc51b-e110-3c1e-94a9-f7821257d0a1","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"e3fc79be-00ee-3fbf-b3f5-337f2c766121","product":{"name":"go1.26-doc-0:1.26.9-1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"cbebe76e-5b74-3672-a929-47bf460a195f","advisory":{"id":"openSUSE-SU-2026:12112-1","description":"rclone-1.75.2-1.1 on GA media","summary":"rclone-1.75.2-1.1 on GA media","datePublished":"Oct 12, 2026, 12:00:00 AM","dateUpdated":"Oct 21, 2026, 11:52:43 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12112-1.json\nhttps://www.suse.com/security/cve/CVE-2026-56857/\nhttps://www.suse.com/security/cve/CVE-2026-56866/\nhttps://www.suse.com/security/cve/CVE-2026-78659/\nhttps://www.suse.com/security/cve/CVE-2026-78660/\nhttps://www.suse.com/security/cve/CVE-2026-78663/\nhttps://www.suse.com/security/cve/CVE-2026-78667/\nhttps://www.suse.com/security/cve/CVE-2026-78669/\nhttps://www.suse.com/security/cve/CVE-2026-84445/\nhttps://www.suse.com/security/cve/CVE-2026-94439/\nhttps://www.suse.com/security/cve/CVE-2026-94440/\nhttps://www.suse.com/security/cve/CVE-2026-94444/\nhttps://www.suse.com/security/cve/CVE-2026-94447/\nhttps://www.suse.com/security/cve/CVE-2026-94448/\nhttps://www.suse.com/security/cve/CVE-2026-97030/\nhttps://www.suse.com/security/cve/CVE-2026-97031/\nhttps://www.suse.com/security/cve/CVE-2026-97032/\n","aliases":"CVE-2026-56857\nCVE-2026-56866\nCVE-2026-78659\nCVE-2026-78660\nCVE-2026-78663\nCVE-2026-78667\nCVE-2026-78669\nCVE-2026-84445\nCVE-2026-94439\nCVE-2026-94440\nCVE-2026-94444\nCVE-2026-94447\nCVE-2026-94448\nCVE-2026-97030\nCVE-2026-97031\nCVE-2026-97032\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"11a822c5-4826-31c2-b19d-d20079d1b17c","product":{"name":"rclone-zsh-completion-0:1.75.2-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"14f1a87c-6f07-30dd-8853-8761e631ddcb","product":{"name":"rclone-0:1.75.2-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"18a32362-d7ab-35a5-b914-f663a5ea838f","product":{"name":"rclone-bash-completion-0:1.75.2-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"18c6ccd2-50fa-35a0-9d3b-72666e2364bc","product":{"name":"rclone-0:1.75.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"415229d5-6da5-3cfe-b2d2-64c906d7d395","product":{"name":"rclone-bash-completion-0:1.75.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"542393cc-5fff-3f28-bbe3-b50412e9d373","product":{"name":"rclone-0:1.75.2-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"572cea40-1b58-30ad-852e-9774b53fd875","product":{"name":"rclone-bash-completion-0:1.75.2-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5eaae24f-9266-3506-8076-40429380dcb8","product":{"name":"rclone-zsh-completion-0:1.75.2-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6e6533ef-cbbb-37b7-a5ce-33e8c4e82c9b","product":{"name":"rclone-zsh-completion-0:1.75.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a489e203-b406-38ef-a6b6-931651360fc5","product":{"name":"rclone-bash-completion-0:1.75.2-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"abaf8466-1244-39d5-959e-44a1ddfc4400","product":{"name":"rclone-0:1.75.2-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c9bb1673-dcd6-3f07-9288-0730022c2578","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"e8d6e5d6-e14b-31fc-beea-e2308d145644","product":{"name":"rclone-zsh-completion-0:1.75.2-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"ea2f2922-3672-3ae1-b8b7-ea44b84bc73d","advisory":{"id":"SUSE-SU-2026:24239-1","description":"Security update for go1.26","summary":"Security update for go1.26","datePublished":"Oct 13, 2026, 3:22:17 PM","dateUpdated":"Oct 21, 2026, 11:50:17 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24239-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624239-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624239-1/\nhttps://bugzilla.suse.com/1255111\nhttps://bugzilla.suse.com/1284766\nhttps://bugzilla.suse.com/1284767\nhttps://bugzilla.suse.com/1284768\nhttps://bugzilla.suse.com/1284769\nhttps://bugzilla.suse.com/1284771\nhttps://bugzilla.suse.com/1284773\nhttps://bugzilla.suse.com/1284774\nhttps://bugzilla.suse.com/1284775\nhttps://bugzilla.suse.com/1284776\nhttps://bugzilla.suse.com/1284777\nhttps://bugzilla.suse.com/1284778\nhttps://bugzilla.suse.com/1284779\nhttps://bugzilla.suse.com/1284780\nhttps://www.suse.com/security/cve/CVE-2026-56857/\nhttps://www.suse.com/security/cve/CVE-2026-56866/\nhttps://www.suse.com/security/cve/CVE-2026-78659/\nhttps://www.suse.com/security/cve/CVE-2026-78660/\nhttps://www.suse.com/security/cve/CVE-2026-78667/\nhttps://www.suse.com/security/cve/CVE-2026-94439/\nhttps://www.suse.com/security/cve/CVE-2026-94440/\nhttps://www.suse.com/security/cve/CVE-2026-94444/\nhttps://www.suse.com/security/cve/CVE-2026-94447/\nhttps://www.suse.com/security/cve/CVE-2026-94448/\nhttps://www.suse.com/security/cve/CVE-2026-97030/\nhttps://www.suse.com/security/cve/CVE-2026-97031/\nhttps://www.suse.com/security/cve/CVE-2026-97032/\n","aliases":"CVE-2026-56857\nCVE-2026-56866\nCVE-2026-78659\nCVE-2026-78660\nCVE-2026-78667\nCVE-2026-94439\nCVE-2026-94440\nCVE-2026-94444\nCVE-2026-94447\nCVE-2026-94448\nCVE-2026-97030\nCVE-2026-97031\nCVE-2026-97032\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"011dee91-1431-334b-b05c-27f07dbc5ddf","product":{"name":"go1.26-doc-0:1.26.9-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"410fb652-4769-3d97-a5fa-f0097a4b24c9","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"5f57b42c-d378-3209-8148-bc2499c36e25","product":{"name":"go1.26-0:1.26.9-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"632511bd-96ed-3ba1-b6e4-e1913ab00b01","product":{"name":"go1.26-0:1.26.9-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"83fbc9a6-e257-37cf-9e60-0d1ec9ed43fd","product":{"name":"go1.26-race-0:1.26.9-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"95d2de4f-ff11-3cf5-a0b4-ebcb1a8d293b","product":{"name":"go1.26-race-0:1.26.9-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a0e387ce-dd34-316f-932c-9610d03eca48","product":{"name":"go1.26-0:1.26.9-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a78323d1-6d96-3150-ad29-d5cf1836d26a","product":{"name":"go1.26-0:1.26.9-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a8a1732f-09f3-31ef-82e9-00c9161f36e4","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"b4a1f8f8-ef7a-364a-9117-9f229b67a429","product":{"name":"go1.26-doc-0:1.26.9-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c4511cc6-2812-37ad-9709-6b4cb2d275b7","product":{"name":"go1.26-doc-0:1.26.9-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"dc3d7b9a-954a-378f-92f5-758b167cdc11","product":{"name":"go1.26-race-0:1.26.9-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"ed8e5cf8-3889-3a45-9f47-b8ea777be020","product":{"name":"go1.26-race-0:1.26.9-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"eeb5fa29-0442-3534-9706-e115458b4e9f","product":{"name":"go1.26-doc-0:1.26.9-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}}]}}]}