Golang.Org/X/Mod/Sumdb vulnerabilities

1 vulnerability

Known vulnerabilities in Golang.Org/X/Mod/Sumdb, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2026-56864go toolchain · cmd/go +1635 moreIgnore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdbA malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ && go mod tidyCVSS7.5HighEPSS0.30%