Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 275/275 feeds/APIs · 469/469 docs · 9/9 advisories · checked 10:47 UTC Customize Public modeDiscuss ChangeIntel on Discord

Double flow control refund on HTTP/2 server streams in net/http

cve-program · CVE-2026-78663

Published

net/http

https://pkg.go.dev

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Go standard library",
                    "product": "net/http",
                    "collectionURL": "https://pkg.go.dev",
                    "packageName": "net/http",
                    "versions": [
                        {
                            "version": "0",
                            "lessThan": "1.26.9",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ],
                    "programRoutines": [
                        {
                            "name": "http2requestBody.Close"
                        },
                        {
                            "name": "http2requestBody.Read"
                        },
                        {
                            "name": "http2serverConn.closeStream"
                        },
                        {
                            "name": "http2serverConn.handlerDone"
                        },
                        {
                            "name": "http2serverConn.newWriterAndRequest"
                        },
                        {
                            "name": "http2serverConn.newWriterAndRequestNoBody"
                        },
                        {
                            "name": "http2serverConn.noteBodyRead"
                        },
                        {
                            "name": "http2serverConn.processHeaders"
                        },
                        {
                            "name": "http2serverConn.runHandler"
                        },
                        {
                            "name": "http2serverConn.scheduleHandler"
                        },
                        {
                            "name": "CanonicalHeaderKey"
                        },
                        {
                            "name": "Client.CloseIdleConnections"
                        },
                        {
                            "name": "Client.Do"
                        },
                        {
                            "name": "Client.Get"
                        },
                        {
                            "name": "Client.Head"
                        },
                        {
                            "name": "Client.Post"
                        },
                        {
                            "name": "Client.PostForm"
                        },
                        {
                            "name": "ClientConn.Close"
                        },
                        {
                            "name": "ClientConn.RoundTrip"
                        },
                        {
                            "name": "Cookie.String"
                        },
                        {
                            "name": "Cookie.Valid"
                        },
                        {
                            "name": "CrossOriginProtection.AddInsecureBypassPattern"
                        },
                        {
                            "name": "CrossOriginProtection.AddTrustedOrigin"
                        },
                        {
                            "name": "CrossOriginProtection.Check"
                        },
                        {
                            "name": "Dir.Open"
                        },
                        {
                            "name": "Error"
                        },
                        {
                            "name": "Get"
                        },
                        {
                            "name": "Handle"
                        },
                        {
                            "name": "HandleFunc"
                        },
                        {
                            "name": "HandlerFunc.ServeHTTP"
                        },
                        {
                            "name": "Head"
                        },
                        {
                            "name": "Header.Add"
                        },
                        {
                            "name": "Header.Del"
                        },
                        {
                            "name": "Header.Get"
                        },
                        {
                            "name": "Header.Set"
                        },
                        {
                            "name": "Header.Values"
                        },
                        {
                            "name": "Header.Write"
                        },
                        {
                            "name": "Header.WriteSubset"
                        },
                        {
                            "name": "ListenAndServe"
                        },
                        {
                            "name": "ListenAndServeTLS"
                        },
                        {
                            "name": "NewRequest"
                        },
                        {
                            "name": "NewRequestWithContext"
                        },
                        {
                            "name": "NotFound"
                        },
                        {
                            "name": "ParseCookie"
                        },
                        {
                            "name": "ParseSetCookie"
                        },
                        {
                            "name": "ParseTime"
                        },
                        {
                            "name": "Post"
                        },
                        {
                            "name": "PostForm"
                        },
                        {
                            "name": "ProxyFromEnvironment"
                        },
                        {
                            "name": "ReadRequest"
                        },
                        {
                            "name": "ReadResponse"
                        },
                        {
                            "name": "Redirect"
                        },
                        {
                            "name": "Request.AddCookie"
                        },
                        {
                            "name": "Request.BasicAuth"
                        },
                        {
                            "name": "Request.Cookie"
                        },
                        {
                            "name": "Request.Cookies"
                        },
                        {
                            "name": "Request.CookiesNamed"
                        },
                        {
                            "name": "Request.FormFile"
                        },
                        {
                            "name": "Request.FormValue"
                        },
                        {
                            "name": "Request.MultipartReader"
                        },
                        {
                            "name": "Request.ParseForm"
                        },
                        {
                            "name": "Request.ParseMultipartForm"
                        },
                        {
                            "name": "Request.PostFormValue"
                        },
                        {
                            "name": "Request.Referer"
                        },
                        {
                            "name": "Request.SetBasicAuth"
                        },
                        {
                            "name": "Request.UserAgent"
                        },
                        {
                            "name": "Request.Write"
                        },
                        {
                            "name": "Request.WriteProxy"
                        },
                        {
                            "name": "Response.Cookies"
                        },
                        {
                            "name": "Response.Location"
                        },
                        {
                            "name": "Response.Write"
                        },
                        {
                            "name": "ResponseController.EnableFullDuplex"
                        },
                        {
                            "name": "ResponseController.Flush"
                        },
                        {
                            "name": "ResponseController.Hijack"
                        },
                        {
                            "name": "ResponseController.SetReadDeadline"
                        },
                        {
                            "name": "ResponseController.SetWriteDeadline"
                        },
                        {
                            "name": "Serve"
                        },
                        {
                            "name": "ServeContent"
                        },
                        {
                            "name": "ServeFile"
                        },
                        {
                            "name": "ServeFileFS"
                        },
                        {
                            "name": "ServeMux.Handle"
                        },
                        {
                            "name": "ServeMux.HandleFunc"
                        },
                        {
                            "name": "ServeMux.ServeHTTP"
                        },
                        {
                            "name": "ServeTLS"
                        },
                        {
                            "name": "Server.Close"
                        },
                        {
                            "name": "Server.ListenAndServe"
                        },
                        {
                            "name": "Server.ListenAndServeTLS"
                        },
                        {
                            "name": "Server.Serve"
                        },
                        {
                            "name": "Server.ServeTLS"
                        },
                        {
                            "name": "Server.SetKeepAlivesEnabled"
                        },
                        {
                            "name": "Server.Shutdown"
                        },
                        {
                            "name": "SetCookie"
                        },
                        {
                            "name": "Transport.CancelRequest"
                        },
                        {
                            "name": "Transport.Clone"
                        },
                        {
                            "name": "Transport.CloseIdleConnections"
                        },
                        {
                            "name": "Transport.NewClientConn"
                        },
                        {
                            "name": "Transport.RoundTrip"
                        },
                        {
                            "name": "body.Close"
                        },
                        {
                            "name": "body.Read"
                        },
                        {
                            "name": "bodyEOFSignal.Close"
                        },
                        {
                            "name": "bodyEOFSignal.Read"
                        },
                        {
                            "name": "bodyLocked.Read"
                        },
                        {
                            "name": "bufioFlushWriter.Write"
                        },
                        {
                            "name": "cancelTimerBody.Close"
                        },
                        {
                            "name": "cancelTimerBody.Read"
                        },
                        {
                            "name": "checkConnErrorWriter.Write"
                        },
                        {
                            "name": "chunkWriter.Write"
                        },
                        {
                            "name": "connReader.Read"
                        },
                        {
                            "name": "connectMethodKey.String"
                        },
                        {
                            "name": "expectContinueReader.Close"
                        },
                        {
                            "name": "expectContinueReader.Read"
                        },
                        {
                            "name": "extraHeader.Write"
                        },
                        {
                            "name": "fileHandler.ServeHTTP"
                        },
                        {
                            "name": "fileTransport.RoundTrip"
                        },
                        {
                            "name": "globalOptionsHandler.ServeHTTP"
                        },
                        {
                            "name": "gzipReader.Close"
                        },
                        {
                            "name": "gzipReader.Read"
                        },
                        {
                            "name": "http1ClientConn.Close"
                        },
                        {
                            "name": "http1ClientConn.RoundTrip"
                        },
                        {
                            "name": "http2ClientConn.Close"
                        },
                        {
                            "name": "http2ClientConn.Ping"
                        },
                        {
                            "name": "http2ClientConn.RoundTrip"
                        },
                        {
                            "name": "http2ClientConn.Shutdown"
                        },
                        {
                            "name": "http2ConnectionError.Error"
                        },
                        {
                            "name": "http2ErrCode.String"
                        },
                        {
                            "name": "http2FrameHeader.String"
                        },
                        {
                            "name": "http2FrameType.String"
                        },
                        {
                            "name": "http2FrameWriteRequest.String"
                        },
                        {
                            "name": "http2Framer.ReadFrame"
                        },
                        {
                            "name": "http2Framer.ReadFrameForHeader"
                        },
                        {
                            "name": "http2Framer.ReadFrameHeader"
                        },
                        {
                            "name": "http2Framer.WriteContinuation"
                        },
                        {
                            "name": "http2Framer.WriteData"
                        },
                        {
                            "name": "http2Framer.WriteDataPadded"
                        },
                        {
                            "name": "http2Framer.WriteGoAway"
                        },
                        {
                            "name": "http2Framer.WriteHeaders"
                        },
                        {
                            "name": "http2Framer.WritePing"
                        },
                        {
                            "name": "http2Framer.WritePriority"
                        },
                        {
                            "name": "http2Framer.WritePushPromise"
                        },
                        {
                            "name": "http2Framer.WriteRSTStream"
                        },
                        {
                            "name": "http2Framer.WriteRawFrame"
                        },
                        {
                            "name": "http2Framer.WriteSettings"
                        },
                        {
                            "name": "http2Framer.WriteSettingsAck"
                        },
                        {
                            "name": "http2Framer.WriteWindowUpdate"
                        },
                        {
                            "name": "http2GoAwayError.Error"
                        },
                        {
                            "name": "http2Server.ServeConn"
                        },
                        {
                            "name": "http2Setting.String"
                        },
                        {
                            "name": "http2SettingID.String"
                        },
                        {
                            "name": "http2SettingsFrame.ForeachSetting"
                        },
                        {
                            "name": "http2StreamError.Error"
                        },
                        {
                            "name": "http2Transport.CloseIdleConnections"
                        },
                        {
                            "name": "http2Transport.NewClientConn"
                        },
                        {
                            "name": "http2Transport.RoundTrip"
                        },
                        {
                            "name": "http2Transport.RoundTripOpt"
                        },
                        {
                            "name": "http2bufferedWriter.Flush"
                        },
                        {
                            "name": "http2bufferedWriter.Write"
                        },
                        {
                            "name": "http2bufferedWriterTimeoutWriter.Write"
                        },
                        {
                            "name": "http2chunkWriter.Write"
                        },
                        {
                            "name": "http2clientConnPool.GetClientConn"
                        },
                        {
                            "name": "http2connError.Error"
                        },
                        {
                            "name": "http2dataBuffer.Read"
                        },
                        {
                            "name": "http2duplicatePseudoHeaderError.Error"
                        },
                        {
                            "name": "http2gzipReader.Close"
                        },
                        {
                            "name": "http2gzipReader.Read"
                        },
                        {
                            "name": "http2headerFieldNameError.Error"
                        },
                        {
                            "name": "http2headerFieldValueError.Error"
                        },
                        {
                            "name": "http2netHTTPClientConn.Close"
                        },
                        {
                            "name": "http2netHTTPClientConn.RoundTrip"
                        },
                        {
                            "name": "http2noDialClientConnPool.GetClientConn"
                        },
                        {
                            "name": "http2noDialH2RoundTripper.NewClientConn"
                        },
                        {
                            "name": "http2noDialH2RoundTripper.RoundTrip"
                        },
                        {
                            "name": "http2pipe.Read"
                        },
                        {
                            "name": "http2priorityWriteSchedulerRFC7540.CloseStream"
                        },
                        {
                            "name": "http2priorityWriteSchedulerRFC7540.OpenStream"
                        },
                        {
                            "name": "http2priorityWriteSchedulerRFC9218.OpenStream"
                        },
                        {
                            "name": "http2pseudoHeaderError.Error"
                        },
                        {
                            "name": "http2responseWriter.Flush"
                        },
                        {
                            "name": "http2responseWriter.FlushError"
                        },
                        {
                            "name": "http2responseWriter.Push"
                        },
                        {
                            "name": "http2responseWriter.SetReadDeadline"
                        },
                        {
                            "name": "http2responseWriter.SetWriteDeadline"
                        },
                        {
                            "name": "http2responseWriter.Write"
                        },
                        {
                            "name": "http2responseWriter.WriteHeader"
                        },
                        {
                            "name": "http2responseWriter.WriteString"
                        },
                        {
                            "name": "http2roundRobinWriteScheduler.OpenStream"
                        },
                        {
                            "name": "http2serverConn.CloseConn"
                        },
                        {
                            "name": "http2serverConn.Flush"
                        },
                        {
                            "name": "http2stickyErrWriter.Write"
                        },
                        {
                            "name": "http2transportResponseBody.Close"
                        },
                        {
                            "name": "http2transportResponseBody.Read"
                        },
                        {
                            "name": "http2unencryptedTransport.RoundTrip"
                        },
                        {
                            "name": "http2writeData.String"
                        },
                        {
                            "name": "initALPNRequest.ServeHTTP"
                        },
                        {
                            "name": "loggingConn.Close"
                        },
                        {
                            "name": "loggingConn.Read"
                        },
                        {
                            "name": "loggingConn.Write"
                        },
                        {
                            "name": "maxBytesReader.Close"
                        },
                        {
                            "name": "maxBytesReader.Read"
                        },
                        {
                            "name": "onceCloseListener.Close"
                        },
                        {
                            "name": "persistConn.Read"
                        },
                        {
                            "name": "persistConnWriter.ReadFrom"
                        },
                        {
                            "name": "persistConnWriter.Write"
                        },
                        {
                            "name": "populateResponse.Write"
                        },
                        {
                            "name": "populateResponse.WriteHeader"
                        },
                        {
                            "name": "readTrackingBody.Close"
                        },
                        {
                            "name": "readTrackingBody.Read"
                        },
                        {
                            "name": "readWriteCloserBody.CloseWrite"
                        },
                        {
                            "name": "readWriteCloserBody.Read"
                        },
                        {
                            "name": "redirectHandler.ServeHTTP"
                        },
                        {
                            "name": "response.Flush"
                        },
                        {
                            "name": "response.FlushError"
                        },
                        {
                            "name": "response.Hijack"
                        },
                        {
                            "name": "response.ReadFrom"
                        },
                        {
                            "name": "response.Write"
                        },
                        {
                            "name": "response.WriteHeader"
                        },
                        {
                            "name": "response.WriteString"
                        },
                        {
                            "name": "serverHandler.ServeHTTP"
                        },
                        {
                            "name": "socksDialer.DialWithConn"
                        },
                        {
                            "name": "socksUsernamePassword.Authenticate"
                        },
                        {
                            "name": "stringWriter.WriteString"
                        },
                        {
                            "name": "timeoutHandler.ServeHTTP"
                        },
                        {
                            "name": "timeoutWriter.Write"
                        },
                        {
                            "name": "timeoutWriter.WriteHeader"
                        },
                        {
                            "name": "transportReadFromServerError.Error"
                        },
                        {
                            "name": "unencryptedHTTP2Request.ServeHTTP"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

net/http/internal/http2

https://pkg.go.dev

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Go standard library",
                    "product": "net/http/internal/http2",
                    "collectionURL": "https://pkg.go.dev",
                    "packageName": "net/http/internal/http2",
                    "versions": [
                        {
                            "version": "1.27.0-0",
                            "lessThan": "1.27.2",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ],
                    "programRoutines": [
                        {
                            "name": "requestBody.Close"
                        },
                        {
                            "name": "requestBody.Read"
                        },
                        {
                            "name": "serverConn.closeStream"
                        },
                        {
                            "name": "serverConn.handlerDone"
                        },
                        {
                            "name": "serverConn.newWriterAndRequest"
                        },
                        {
                            "name": "serverConn.newWriterAndRequestNoBody"
                        },
                        {
                            "name": "serverConn.noteBodyRead"
                        },
                        {
                            "name": "serverConn.processHeaders"
                        },
                        {
                            "name": "serverConn.runHandler"
                        },
                        {
                            "name": "serverConn.scheduleHandler"
                        },
                        {
                            "name": "Server.ServeConn"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

golang.org/x/net/http2

https://pkg.go.dev

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "golang.org/x/net",
                    "product": "golang.org/x/net/http2",
                    "collectionURL": "https://pkg.go.dev",
                    "packageName": "golang.org/x/net/http2",
                    "versions": [
                        {
                            "version": "0",
                            "lessThan": "0.60.0",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ],
                    "programRoutines": [
                        {
                            "name": "requestBody.Close"
                        },
                        {
                            "name": "requestBody.Read"
                        },
                        {
                            "name": "serverConn.closeStream"
                        },
                        {
                            "name": "serverConn.handlerDone"
                        },
                        {
                            "name": "serverConn.newWriterAndRequest"
                        },
                        {
                            "name": "serverConn.newWriterAndRequestNoBody"
                        },
                        {
                            "name": "serverConn.noteBodyRead"
                        },
                        {
                            "name": "serverConn.processHeaders"
                        },
                        {
                            "name": "serverConn.runHandler"
                        },
                        {
                            "name": "serverConn.scheduleHandler"
                        },
                        {
                            "name": "ClientConn.Close"
                        },
                        {
                            "name": "ClientConn.Ping"
                        },
                        {
                            "name": "ClientConn.RoundTrip"
                        },
                        {
                            "name": "ClientConn.Shutdown"
                        },
                        {
                            "name": "ConfigureServer"
                        },
                        {
                            "name": "ConfigureTransport"
                        },
                        {
                            "name": "ConfigureTransports"
                        },
                        {
                            "name": "ConnectionError.Error"
                        },
                        {
                            "name": "ErrCode.String"
                        },
                        {
                            "name": "FrameHeader.String"
                        },
                        {
                            "name": "FrameType.String"
                        },
                        {
                            "name": "FrameWriteRequest.String"
                        },
                        {
                            "name": "Framer.ReadFrame"
                        },
                        {
                            "name": "Framer.ReadFrameForHeader"
                        },
                        {
                            "name": "Framer.ReadFrameHeader"
                        },
                        {
                            "name": "Framer.WriteContinuation"
                        },
                        {
                            "name": "Framer.WriteData"
                        },
                        {
                            "name": "Framer.WriteDataPadded"
                        },
                        {
                            "name": "Framer.WriteGoAway"
                        },
                        {
                            "name": "Framer.WriteHeaders"
                        },
                        {
                            "name": "Framer.WritePing"
                        },
                        {
                            "name": "Framer.WritePriority"
                        },
                        {
                            "name": "Framer.WritePriorityUpdate"
                        },
                        {
                            "name": "Framer.WritePushPromise"
                        },
                        {
                            "name": "Framer.WriteRSTStream"
                        },
                        {
                            "name": "Framer.WriteRawFrame"
                        },
                        {
                            "name": "Framer.WriteSettings"
                        },
                        {
                            "name": "Framer.WriteSettingsAck"
                        },
                        {
                            "name": "Framer.WriteWindowUpdate"
                        },
                        {
                            "name": "GoAwayError.Error"
                        },
                        {
                            "name": "ReadFrameHeader"
                        },
                        {
                            "name": "Server.ServeConn"
                        },
                        {
                            "name": "Setting.String"
                        },
                        {
                            "name": "SettingID.String"
                        },
                        {
                            "name": "SettingsFrame.ForeachSetting"
                        },
                        {
                            "name": "StreamError.Error"
                        },
                        {
                            "name": "Transport.CloseIdleConnections"
                        },
                        {
                            "name": "Transport.NewClientConn"
                        },
                        {
                            "name": "Transport.RoundTrip"
                        },
                        {
                            "name": "Transport.RoundTripOpt"
                        },
                        {
                            "name": "bufferedWriter.Flush"
                        },
                        {
                            "name": "bufferedWriter.Write"
                        },
                        {
                            "name": "bufferedWriterTimeoutWriter.Write"
                        },
                        {
                            "name": "chunkWriter.Write"
                        },
                        {
                            "name": "clientConnPool.GetClientConn"
                        },
                        {
                            "name": "connError.Error"
                        },
                        {
                            "name": "dataBuffer.Read"
                        },
                        {
                            "name": "duplicatePseudoHeaderError.Error"
                        },
                        {
                            "name": "gzipReader.Close"
                        },
                        {
                            "name": "gzipReader.Read"
                        },
                        {
                            "name": "headerFieldNameError.Error"
                        },
                        {
                            "name": "headerFieldValueError.Error"
                        },
                        {
                            "name": "netHTTPClientConn.Close"
                        },
                        {
                            "name": "netHTTPClientConn.RoundTrip"
                        },
                        {
                            "name": "noDialClientConnPool.GetClientConn"
                        },
                        {
                            "name": "noDialH2RoundTripper.NewClientConn"
                        },
                        {
                            "name": "noDialH2RoundTripper.RoundTrip"
                        },
                        {
                            "name": "pipe.Read"
                        },
                        {
                            "name": "priorityWriteSchedulerRFC7540.CloseStream"
                        },
                        {
                            "name": "priorityWriteSchedulerRFC7540.OpenStream"
                        },
                        {
                            "name": "priorityWriteSchedulerRFC9218.OpenStream"
                        },
                        {
                            "name": "pseudoHeaderError.Error"
                        },
                        {
                            "name": "responseWriter.Flush"
                        },
                        {
                            "name": "responseWriter.FlushError"
                        },
                        {
                            "name": "responseWriter.Push"
                        },
                        {
                            "name": "responseWriter.SetReadDeadline"
                        },
                        {
                            "name": "responseWriter.SetWriteDeadline"
                        },
                        {
                            "name": "responseWriter.Write"
                        },
                        {
                            "name": "responseWriter.WriteHeader"
                        },
                        {
                            "name": "responseWriter.WriteString"
                        },
                        {
                            "name": "roundRobinWriteScheduler.OpenStream"
                        },
                        {
                            "name": "serverConn.CloseConn"
                        },
                        {
                            "name": "serverConn.Flush"
                        },
                        {
                            "name": "stickyErrWriter.Write"
                        },
                        {
                            "name": "transportResponseBody.Close"
                        },
                        {
                            "name": "transportResponseBody.Read"
                        },
                        {
                            "name": "unencryptedTransport.RoundTrip"
                        },
                        {
                            "name": "writeData.String"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2026-95427

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Oct 8, 2026, 10:53:59 PM

dateUpdated: Oct 9, 2026, 4:42:50 PM

38 related source bulletins · separate from aliases

RHSA-2026:87040: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

WID-SEC-W-2026-3841: Golang Go: Mehrere Schwachstellen

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032

openSUSE-SU-2026:12286-1: google-guest-agent-20261022.00-1.1 on GA media

CVE-2026-78659 · CVE-2026-78663

RHSA-2026:87043: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

openSUSE-SU-2026:12214-1: kyverno-1.19.2-1.1 on GA media

CVE-2026-78663 · CVE-2026-97031 · CVE-2026-97032

RHSA-2026:86203: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:87042: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:87246: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update

CVE-2024-45336 · CVE-2025-4673 · CVE-2025-22866 · CVE-2025-22874 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-27143 · CVE-2026-27144 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

openSUSE-SU-2026:22093-1: Security update for go1.27

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032

openSUSE-SU-2026:12326-1: helm-4.3.1-3.1 on GA media

CVE-2026-116591 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-97032

RHSA-2026:92516: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.4.4

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

openSUSE-SU-2026:12101-1: go1.27-1.27.2-1.1 on GA media

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032

SUSE-SU-2026:24475-1: Security update for google-guest-agent

CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78669 · CVE-2026-97032

openSUSE-SU-2026:12287-1: google-osconfig-agent-20261022.00-1.1 on GA media

CVE-2026-78659 · CVE-2026-78663

openSUSE-SU-2026:12267-1: amazon-cloudwatch-agent-1.300073.2-2.1 on GA media

CVE-2026-78659 · CVE-2026-78663

RHSA-2026:92497: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.11

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

openSUSE-SU-2026:12261-1: git-bug-0.11.0-3.1 on GA media

CVE-2026-110095 · CVE-2026-110180 · CVE-2026-110306 · CVE-2026-110725 · CVE-2026-110816 · CVE-2026-111756 · CVE-2026-112085 · CVE-2026-112366 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78669 · CVE-2026-97032

RHSA-2026:86196: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

SUSE-SU-2026:24359-1: Security update for go1.26

CVE-2026-111943 · CVE-2026-78663 · CVE-2026-78669

openSUSE-SU-2026:12283-1: distribution-registry-3.1.2-3.1 on GA media

CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-9703

openSUSE-SU-2026:12309-1: timoni-0.36.0-1.1 on GA media

CVE-2024-45338 · CVE-2025-22872 · CVE-2025-47911 · CVE-2025-58190 · CVE-2026-100351 · CVE-2026-100352 · CVE-2026-100353 · CVE-2026-100354 · CVE-2026-33186 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78669 · CVE-2026-97032

RHSA-2026:92480: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.14

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

openSUSE-SU-2026:22180-1: Security update for kubevirt1.9

CVE-2026-13622 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78669 · CVE-2026-97032

RHSA-2026:92451: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.17

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

openSUSE-SU-2026:12293-1: hugo-0.168.0-3.1 on GA media

CVE-2026-78663

RHSA-2026:86093: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

openSUSE-SU-2026:22152-1: Security update for go1.26

CVE-2026-111943 · CVE-2026-78663 · CVE-2026-78669

openSUSE-SU-2026:12317-1: cadvisor-0.60.6-5.1 on GA media

CVE-2026-116591 · CVE-2026-78663

RHSA-2026:92509: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.9

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

openSUSE-SU-2026:12112-1: rclone-1.75.2-1.1 on GA media

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-84445 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032

openSUSE-SU-2026:12212-1: go1.26-1.26.10-1.1 on GA media

CVE-2026-111943 · CVE-2026-78663 · CVE-2026-78669

RHSA-2026:90994: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update

CVE-2024-45336 · CVE-2025-22866 · CVE-2025-22874 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-27143 · CVE-2026-27144 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

SUSE-SU-2026:24237-1: Security update for go1.27

CVE-2026-56857 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032

openSUSE-SU-2026:12268-1: azure-storage-azcopy-10.34.1-1.1 on GA media

CVE-2026-78659 · CVE-2026-78663

openSUSE-SU-2026:12207-1: vexctl-0.4.4+git106.aa6ffc8-1.1 on GA media

CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78669 · CVE-2026-97032

openSUSE-SU-2026:22218-1: Security update for cadvisor

CVE-2026-116591 · CVE-2026-78663

RHSA-2026:87041: Red Hat Security Advisory: golang security, bug fix, and enhancement update

CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

RHSA-2026:87245: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update

CVE-2024-45336 · CVE-2025-4673 · CVE-2025-22866 · CVE-2025-22874 · CVE-2025-68121 · CVE-2026-27137 · CVE-2026-27143 · CVE-2026-27144 · CVE-2026-27145 · CVE-2026-32280 · CVE-2026-32281 · CVE-2026-32282 · CVE-2026-32283 · CVE-2026-33810 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-33818 · CVE-2026-39820 · CVE-2026-39821 · CVE-2026-42499 · CVE-2026-42504 · CVE-2026-56853 · CVE-2026-56858 · CVE-2026-56859 · CVE-2026-56860 · CVE-2026-56862 · CVE-2026-56866 · CVE-2026-78659 · CVE-2026-78660 · CVE-2026-78663 · CVE-2026-78667 · CVE-2026-78669 · CVE-2026-94439 · CVE-2026-94440 · CVE-2026-94444 · CVE-2026-94447 · CVE-2026-94448 · CVE-2026-97030 · CVE-2026-97031 · CVE-2026-97032 · CVE-2026-111943

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2026-78663

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Awaiting Analysis

Weakness classifications: CWE-675

Original publisher date fields

published: 2026-10-08T23:17:03.647

lastModified: 2026-10-09T17:16:49.420

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GO-2026-6612

Published

stdlib

Go

SEMVER · introduced 0 → fixed 1.26.9

stdlib

Go

SEMVER · introduced 1.27.0-0 → fixed 1.27.2

golang.org/x/net

Go

SEMVER · introduced 0 → fixed 0.60.0

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 9 Nov 10:47 UTC · 275 of 275 readable · 273 fully read · documentation 469/469 current