CVE-2026-42505 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 31.63%

Affected Products (NVD)

Vendor	Product	Version
golang	go	𝑥 < 1.25.12
golang	go	1.26.0 ≤ 𝑥 < 1.26.5
golang	go	1.27:rc1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

golang-1.15

bullseye

1.15.15-1~deb11u4

fixed

golang-1.19

bookworm

1.19.8-2

fixed

golang-1.24

trixie

no-dsa

golang-1.25

forky	1.25.12-1 fixed
sid	1.25.13-1 fixed

golang-1.26

forky	1.26.5-1 fixed
sid	1.26.6-2 fixed

golang-1.27

forky	1.27~rc2-1 fixed
sid	1.27~rc3-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

golang

jammy	dne
noble	dne
questing	dne
resolute	dne

golang-1.6

jammy	dne
noble	dne
questing	dne
resolute	dne
xenial	needs-triage

golang-1.8

bionic	needs-triage
jammy	dne
noble	dne
questing	dne
resolute	dne

golang-1.9

bionic	needs-triage
jammy	dne
noble	dne
questing	dne
resolute	dne

golang-1.10

bionic	needs-triage
jammy	dne
noble	dne
questing	dne
resolute	dne
trusty	needs-triage
xenial	needs-triage

golang-1.13

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	dne
questing	dne
resolute	dne

golang-1.14

focal	needs-triage
jammy	dne
noble	dne
questing	dne
resolute	dne

golang-1.16

bionic	needs-triage
focal	needs-triage
jammy	dne
noble	dne
questing	dne
resolute	dne

golang-1.17

jammy	needs-triage
noble	dne
questing	dne
resolute	dne

golang-1.18

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	dne
questing	dne
resolute	dne

golang-1.20

focal	needs-triage
jammy	needs-triage
noble	dne
questing	dne
resolute	dne

golang-1.21

focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	dne
resolute	dne

golang-1.22

focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	dne
resolute	dne

golang-1.23

jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage

golang-1.24

jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage

golang-1.25

jammy	dne
noble	dne
questing	ignored
resolute	needs-triage

Red Hat Enterprise Linux Releases

Red Hat Product

Release

go-toolset

RHEL 9

0:1.26.5-1.el9_8

fixed

golang

RHEL 9

0:1.26.5-1.el9_8

fixed

golang-bin

RHEL 9

0:1.26.5-1.el9_8

fixed

golang-docs

RHEL 9

0:1.26.5-1.el9_8

fixed

golang-misc

RHEL 9

0:1.26.5-1.el9_8

fixed

golang-race

RHEL 9

0:1.26.5-1.el9_8

fixed

golang-src

RHEL 9

0:1.26.5-1.el9_8

fixed

golang-tests

RHEL 9

0:1.26.5-1.el9_8

fixed

Amazon Linux Releases

Amazon Package

Release

amazon-cloudwatch-agent

Amazon Linux 2	0:1.300069.1-1.amzn2 fixed
Amazon Linux 2023	0:1.300069.1-1.amzn2023 fixed

compat-golang-github-cpuguy83-md2man-2-devel

Amazon Linux 2023

0:2.0.2-24.amzn2023.0.9

fixed

credentials-fetcher

Amazon Linux 2023

0:2.0.3-1.amzn2023.0.2

fixed

golang

Amazon Linux 2	0:1.25.12-1.amzn2.0.1 fixed
Amazon Linux 2023	0:1.25.12-1.amzn2023.0.1 fixed

golang-bin

Amazon Linux 2	0:1.25.12-1.amzn2.0.1 fixed
Amazon Linux 2023	0:1.25.12-1.amzn2023.0.1 fixed

golang-docs

Amazon Linux 2	0:1.25.12-1.amzn2.0.1 fixed
Amazon Linux 2023	0:1.25.12-1.amzn2023.0.1 fixed

golang-github-burntsushi-toml

Amazon Linux 2023

0:1.5.0-1.amzn2023.0.3

fixed

golang-github-burntsushi-toml-debuginfo

Amazon Linux 2023

0:1.5.0-1.amzn2023.0.3

fixed

golang-github-burntsushi-toml-debugsource

Amazon Linux 2023

0:1.5.0-1.amzn2023.0.3

fixed

golang-github-burntsushi-toml-devel

Amazon Linux 2023

0:1.5.0-1.amzn2023.0.3

fixed

golang-github-burntsushi-toml-test

Amazon Linux 2023

0:0.2.0-8.amzn2023.0.5

fixed

golang-github-burntsushi-toml-test-debuginfo

Amazon Linux 2023

0:0.2.0-8.amzn2023.0.5

fixed

golang-github-burntsushi-toml-test-debugsource

Amazon Linux 2023

0:0.2.0-8.amzn2023.0.5

fixed

golang-github-burntsushi-toml-test-devel

Amazon Linux 2023

0:0.2.0-8.amzn2023.0.5

fixed

golang-github-cpuguy83-md2man

Amazon Linux 2023

0:2.0.2-24.amzn2023.0.9

fixed

golang-github-cpuguy83-md2man-debuginfo

Amazon Linux 2023

0:2.0.2-24.amzn2023.0.9

fixed

golang-github-cpuguy83-md2man-debugsource

Amazon Linux 2023

0:2.0.2-24.amzn2023.0.9

fixed

golang-github-cpuguy83-md2man-devel

Amazon Linux 2023

0:2.0.2-24.amzn2023.0.9

fixed

golang-misc

Amazon Linux 2	0:1.25.12-1.amzn2.0.1 fixed
Amazon Linux 2023	0:1.25.12-1.amzn2023.0.1 fixed

golang-shared

Amazon Linux 2	0:1.25.12-1.amzn2.0.1 fixed
Amazon Linux 2023	0:1.25.12-1.amzn2023.0.1 fixed

golang-src

Amazon Linux 2	0:1.25.12-1.amzn2.0.1 fixed
Amazon Linux 2023	0:1.25.12-1.amzn2023.0.1 fixed

golang-tests

Amazon Linux 2	0:1.25.12-1.amzn2.0.1 fixed
Amazon Linux 2023	0:1.25.12-1.amzn2023.0.1 fixed

golist

Amazon Linux 2	0:0.10.1-10.amzn2.0.15 fixed
Amazon Linux 2023	0:0.10.4-12.amzn2023.0.11 fixed

golist-debuginfo

Amazon Linux 2	0:0.10.1-10.amzn2.0.15 fixed
Amazon Linux 2023	0:0.10.4-12.amzn2023.0.11 fixed

golist-debugsource

Amazon Linux 2023

0:0.10.4-12.amzn2023.0.11

fixed

runfinch-finch

Amazon Linux 2023

0:1.17.2-1.amzn2023.0.3

fixed

Azure Linux Releases

Azure Package

Release

golang

Azure Linux 3.0

0:1.25.12-1.azl3

fixed

Common Weakness Enumeration

CWE-201 - Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Vulnerability Media Exposure

[GERMAN] Golang Go: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen
Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Informationen offenzulegen.
Published: 2026-07-07T22:00:00+00:00

References

https://go.dev/cl/775960

https://go.dev/issue/79282

https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc

https://pkg.go.dev/vuln/GO-2026-5856