[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-27138":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-06T02:55:33.997Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":31,"downstream":32,"duplicates":59,"related":60,"reserved_at":9,"published_at":73,"modified_at":74,"state":75,"summary":76,"references_raw":85,"kevs":111,"epss":112,"epss_history":115,"metrics":386,"affected":394},"CVE-2026-27138","Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[],[29,30],"GO-2026-4600","BIT-golang-2026-27138",[],[33,35,37,39,41,43,45,47,49,51,53,55,57],{"_key":34},"SUSE-SU-2026:0876-1",{"_key":36},"OPENSUSE-SU-2026:10299-1",{"_key":38},"OPENSUSE-SU-2026:20342-1",{"_key":40},"SUSE-SU-2026:0993-1",{"_key":42},"SUSE-SU-2026:0976-1",{"_key":44},"SUSE-SU-2026:1042-1",{"_key":46},"OPENSUSE-SU-2026:10509-1",{"_key":48},"SUSE-SU-2026:21195-1",{"_key":50},"OPENSUSE-SU-2026:20537-1",{"_key":52},"DEBIAN-CVE-2026-27138",{"_key":54},"MGASA-2026-0147",{"_key":56},"UBUNTU-CVE-2026-27138",{"_key":58},"RHSA-2026:7291",[],[61,62,63,64,65,66,67,68,69,70,71],{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":58},{"_key":72},"CGA-46Q4-CG37-P9XC","2026-03-06T21:28:14.000Z","2026-03-10T13:35:19.784Z","Analyzed",{"cisa_kev":77,"cisa_ransomware":77,"cisa_vendor":9,"epss_severity":78,"epss_score":79,"severity":80,"severity_score":81,"severity_version":82,"severity_source":83,"severity_vector":84,"severity_status":75},false,"low",0.00029,"medium",5.9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",[86,94,100,106],{"url":87,"sources":88,"tags":91},"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",[83,89,90],"nvd","osv_go",[92,93],"WEB","Release Notes",{"url":95,"sources":96,"tags":97},"https://go.dev/issue/77953",[83,89,90],[98,99],"REPORT","Issue Tracking",{"url":101,"sources":102,"tags":103},"https://go.dev/cl/752183",[83,89,90],[104,105],"FIX","Mailing List",{"url":107,"sources":108,"tags":109},"https://pkg.go.dev/vuln/GO-2026-4600",[83,89],[110],"Vendor Advisory",[],{"date":113,"score":79,"percentile":114},"2026-06-05",0.08816,[116,120,123,126,129,133,137,140,143,146,149,152,155,158,161,164,167,169,172,175,178,181,184,186,189,192,195,198,201,204,207,210,214,217,220,223,226,229,232,235,238,241,243,245,248,251,254,258,261,264,267,270,273,276,279,282,285,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,371,374,377,380,383],{"date":117,"score":118,"percentile":119},"2026-03-07",0.0002,0.05133,{"date":121,"score":118,"percentile":122},"2026-03-08",0.05134,{"date":124,"score":118,"percentile":125},"2026-03-09",0.05113,{"date":127,"score":118,"percentile":128},"2026-03-10",0.05119,{"date":130,"score":131,"percentile":132},"2026-03-11",0.00035,0.09967,{"date":134,"score":135,"percentile":136},"2026-03-12",0.00041,0.12333,{"date":138,"score":135,"percentile":139},"2026-03-13",0.1234,{"date":141,"score":135,"percentile":142},"2026-03-14",0.12345,{"date":144,"score":135,"percentile":145},"2026-03-15",0.12311,{"date":147,"score":135,"percentile":148},"2026-03-16",0.12266,{"date":150,"score":135,"percentile":151},"2026-03-17",0.12247,{"date":153,"score":135,"percentile":154},"2026-03-18",0.12253,{"date":156,"score":135,"percentile":157},"2026-03-19",0.12262,{"date":159,"score":135,"percentile":160},"2026-03-20",0.12325,{"date":162,"score":118,"percentile":163},"2026-03-21",0.05137,{"date":165,"score":118,"percentile":166},"2026-03-22",0.0513,{"date":168,"score":118,"percentile":119},"2026-03-23",{"date":170,"score":118,"percentile":171},"2026-03-24",0.05117,{"date":173,"score":118,"percentile":174},"2026-03-25",0.0516,{"date":176,"score":118,"percentile":177},"2026-03-26",0.05196,{"date":179,"score":118,"percentile":180},"2026-03-27",0.05195,{"date":182,"score":118,"percentile":183},"2026-03-28",0.05199,{"date":185,"score":118,"percentile":180},"2026-03-29",{"date":187,"score":118,"percentile":188},"2026-03-30",0.05182,{"date":190,"score":118,"percentile":191},"2026-03-31",0.05152,{"date":193,"score":118,"percentile":194},"2026-04-01",0.05171,{"date":196,"score":118,"percentile":197},"2026-04-02",0.05215,{"date":199,"score":118,"percentile":200},"2026-04-03",0.05229,{"date":202,"score":118,"percentile":203},"2026-04-04",0.05245,{"date":205,"score":118,"percentile":206},"2026-04-05",0.05244,{"date":208,"score":118,"percentile":209},"2026-04-06",0.05252,{"date":211,"score":212,"percentile":213},"2026-04-07",0.00021,0.05749,{"date":215,"score":212,"percentile":216},"2026-04-08",0.05788,{"date":218,"score":212,"percentile":219},"2026-04-09",0.05813,{"date":221,"score":212,"percentile":222},"2026-04-10",0.05806,{"date":224,"score":212,"percentile":225},"2026-04-11",0.05792,{"date":227,"score":212,"percentile":228},"2026-04-12",0.05784,{"date":230,"score":212,"percentile":231},"2026-04-13",0.05778,{"date":233,"score":212,"percentile":234},"2026-04-14",0.05719,{"date":236,"score":212,"percentile":237},"2026-04-15",0.05729,{"date":239,"score":212,"percentile":240},"2026-04-16",0.05741,{"date":242,"score":212,"percentile":213},"2026-04-17",{"date":244,"score":212,"percentile":213},"2026-04-18",{"date":246,"score":212,"percentile":247},"2026-04-19",0.05727,{"date":249,"score":212,"percentile":250},"2026-04-20",0.05721,{"date":252,"score":212,"percentile":253},"2026-04-21",0.05894,{"date":255,"score":256,"percentile":257},"2026-04-22",0.00034,0.09938,{"date":259,"score":256,"percentile":260},"2026-04-23",0.09968,{"date":262,"score":256,"percentile":263},"2026-04-24",0.09952,{"date":265,"score":256,"percentile":266},"2026-04-25",0.09949,{"date":268,"score":256,"percentile":269},"2026-04-26",0.09915,{"date":271,"score":256,"percentile":272},"2026-04-27",0.09891,{"date":274,"score":256,"percentile":275},"2026-04-28",0.09862,{"date":277,"score":256,"percentile":278},"2026-04-29",0.09868,{"date":280,"score":256,"percentile":281},"2026-04-30",0.09857,{"date":283,"score":256,"percentile":284},"2026-05-01",0.0982,{"date":286,"score":256,"percentile":281},"2026-05-02",{"date":288,"score":256,"percentile":289},"2026-05-03",0.0984,{"date":291,"score":256,"percentile":292},"2026-05-04",0.09803,{"date":294,"score":256,"percentile":295},"2026-05-05",0.0979,{"date":297,"score":256,"percentile":298},"2026-05-06",0.09797,{"date":300,"score":256,"percentile":301},"2026-05-07",0.09957,{"date":303,"score":256,"percentile":304},"2026-05-08",0.09983,{"date":306,"score":256,"percentile":307},"2026-05-09",0.10025,{"date":309,"score":256,"percentile":310},"2026-05-10",0.10018,{"date":312,"score":256,"percentile":313},"2026-05-11",0.09998,{"date":315,"score":256,"percentile":316},"2026-05-12",0.10037,{"date":318,"score":79,"percentile":319},"2026-05-13",0.08455,{"date":321,"score":79,"percentile":322},"2026-05-14",0.08498,{"date":324,"score":79,"percentile":325},"2026-05-15",0.08508,{"date":327,"score":79,"percentile":328},"2026-05-16",0.08516,{"date":330,"score":79,"percentile":331},"2026-05-17",0.08504,{"date":333,"score":79,"percentile":334},"2026-05-18",0.08459,{"date":336,"score":79,"percentile":337},"2026-05-19",0.08442,{"date":339,"score":79,"percentile":340},"2026-05-20",0.0844,{"date":342,"score":79,"percentile":343},"2026-05-21",0.08421,{"date":345,"score":79,"percentile":346},"2026-05-22",0.0871,{"date":348,"score":79,"percentile":349},"2026-05-23",0.08687,{"date":351,"score":79,"percentile":352},"2026-05-24",0.08692,{"date":354,"score":79,"percentile":355},"2026-05-25",0.08682,{"date":357,"score":79,"percentile":358},"2026-05-26",0.08675,{"date":360,"score":79,"percentile":361},"2026-05-27",0.08731,{"date":363,"score":79,"percentile":364},"2026-05-28",0.08883,{"date":366,"score":79,"percentile":367},"2026-05-29",0.08906,{"date":369,"score":79,"percentile":370},"2026-05-30",0.0891,{"date":372,"score":79,"percentile":373},"2026-05-31",0.08893,{"date":375,"score":79,"percentile":376},"2026-06-01",0.08871,{"date":378,"score":79,"percentile":379},"2026-06-02",0.08806,{"date":381,"score":79,"percentile":382},"2026-06-03",0.08766,{"date":384,"score":79,"percentile":385},"2026-06-04",0.08777,[387,392],{"source":83,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":388,"cvss_v4_0":9},{"baseScore":81,"baseSeverity":389,"vectorString":84,"impactScore":390,"exploitabilityScore":391},"MEDIUM",6,5.6,{"source":89,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":393,"cvss_v4_0":9},{"baseScore":81,"baseSeverity":389,"vectorString":84,"impactScore":390,"exploitabilityScore":391},[395,407,414],{"ecosystem":9,"name":396,"vendor":397,"product":396,"cpe_part":398,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":399},"crypto/x509","go standard library","a",[400],{"version":401,"is_range":402,"range_type":83,"version_start":403,"version_start_type":404,"version_end":405,"version_end_type":406,"fixed_in":9},">= 1.26.0-0, \u003C 1.26.1",true,"1.26.0-0","including","1.26.1","excluding",{"ecosystem":9,"name":408,"vendor":409,"product":408,"cpe_part":398,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":410},"go","golang",[411],{"version":412,"is_range":77,"range_type":413,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.26.0","cpe",{"ecosystem":415,"name":416,"vendor":415,"product":416,"cpe_part":9,"purl_type":409,"purl_namespace":9,"purl_name":416,"source":9,"versions":417},"Go","stdlib",[418],{"version":419,"is_range":402,"range_type":420,"version_start":403,"version_start_type":404,"version_end":405,"version_end_type":406,"fixed_in":9},"gte1_26_0_0_lt1_26_1","semver"]