{"id":"GO-2026-5237","revision":"753b8961ca6b4f71bee9d9d077b9a0c0","records":[{"revision":"753b8961ca6b4f71bee9d9d077b9a0c0","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5237","aliases":["CVE-2026-7776","GHSA-7x9r-wcgg-w86f"],"title":"Hashicorp Boundary workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes in github.com/hashicorp/boundary","description":"Hashicorp Boundary workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes in github.com/hashicorp/boundary","state":0,"publishedAt":"2026-06-25T18:43:15+00:00","modifiedAt":"2026-06-25T19:45:19.1587777+00:00","affected":[{"ecosystem":"Go","name":"github.com/hashicorp/boundary","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.19.5"},{"kind":"introduced","version":"0.20.0"},{"kind":"fixed","version":"0.20.3"},{"kind":"introduced","version":"0.21.0"},{"kind":"fixed","version":"0.21.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-7x9r-wcgg-w86f","https://nvd.nist.gov/vuln/detail/CVE-2026-7776","https://discuss.hashicorp.com/t/hcsec-2026-11-boundary-workers-vulnerable-to-denial-of-service-during-tls-handshake"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5237","license":"OSV · upstream source license applies","key":"osv:GO-2026-5237","identifiers":["GO-2026-5237","CVE-2026-7776","GHSA-7x9r-wcgg-w86f"]},"retained":false,"historicalAffected":[]}],"coverage":[]}