go.etcd.io/bbolt
Go
SEMVER · introduced 0 → last_affected 1.4.3
CVE-2026-33817RejectedWithdrawn
CVE confirmed to be a false positive
cve-program · severity unknownEUVD CVSS 3.1 6.2 nvd · severity unknownCVSS_V3 Publisher rating MODERATEosv · severity unknownCheck source for fixed versionsKEV status unknown
cve-program · CVE-2026-33817
RejectedCVE confirmed to be a false positive
Read the publisher's advisoryeuvd · EUVD-2026-19406
PublishedCVE confirmed to be a false positive
Read the publisher's advisorynvd · CVE-2026-33817
RejectedRejected reason: CVE confirmed to be a false positive
Read the publisher's advisoryosv · GHSA-6jwv-w5xf-7j27
Withdrawn### Withdrawn Advisory This advisory has been withdrawn because its CVE Numbering Authority has determined this issue to be a false positive. This link is maintained to preserve external references. ### Original Description Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt
Read the publisher's advisoryosv · GO-2026-4923
Withdrawn(This report has been withdrawn with reason: "Reporter and maintainer have confirmed this as false positive"). Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-33817
RejectedNo normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
euvd · EUVD-2026-19406
PublishedEUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Apr 6, 2026, 6:13:23 PM
dateUpdated: Apr 8, 2026, 5:08:34 PM
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
nvd · CVE-2026-33817
RejectedNVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.
Source analysis status: Rejected
Original publisher date fields
published: 2026-04-06T19:16:27.677
lastModified: 2026-04-08T18:26:00.870
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
osv · GHSA-6jwv-w5xf-7j27
Withdrawnosv · GO-2026-4923
Withdrawngo.etcd.io/bbolt
Go
SEMVER · introduced 0
Original source record · Cite this exact observation · Complete original publisher JSON