[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-27145":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":23,"downstream":24,"duplicates":85,"related":86,"reserved_at":9,"published_at":116,"modified_at":117,"state":118,"summary":119,"references_raw":128,"kevs":291,"epss":292,"epss_history":295,"metrics":400,"affected":407},"CVE-2026-27145","(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-606","Unchecked Input for Loop Condition","The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.","weakness","Draft","Base",[],[],[21,22],"GO-2026-5037","BIT-golang-2026-27145",[],[25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83],{"_key":26},"OPENSUSE-SU-2026:10960-1",{"_key":28},"OPENSUSE-SU-2026:10959-1",{"_key":30},"OPENSUSE-SU-2026:10975-1",{"_key":32},"SUSE-SU-2026:2327-1",{"_key":34},"SUSE-SU-2026:2326-1",{"_key":36},"DEBIAN-CVE-2026-27145",{"_key":38},"SUSE-SU-2026:22154-1",{"_key":40},"SUSE-SU-2026:22155-1",{"_key":42},"OPENSUSE-SU-2026:20977-1",{"_key":44},"OPENSUSE-SU-2026:20976-1",{"_key":46},"UBUNTU-CVE-2026-27145",{"_key":48},"OPENSUSE-SU-2026:21254-1",{"_key":50},"MGASA-2026-0276",{"_key":52},"SUSE-SU-2026:22572-1",{"_key":54},"SUSE-SU-2026:22638-1",{"_key":56},"SUSE-SU-2026:3046-1",{"_key":58},"SUSE-SU-2026:3047-1",{"_key":60},"SUSE-SU-2026:3102-1",{"_key":62},"RHSA-2026:23262",{"_key":64},"RHSA-2026:23264",{"_key":66},"RHSA-2026:29981",{"_key":68},"RHSA-2026:34357",{"_key":70},"RHSA-2026:34359",{"_key":72},"RHSA-2026:35832",{"_key":74},"RHSA-2026:36317",{"_key":76},"RHSA-2026:38995",{"_key":78},"RHSA-2026:39005",{"_key":80},"RHSA-2026:39573",{"_key":82},"RHSA-2026:39879",{"_key":84},"OPENSUSE-SU-2026:21319-1",[],[87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114],{"_key":26},{"_key":28},{"_key":30},{"_key":32},{"_key":34},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":48},{"_key":52},{"_key":54},{"_key":56},{"_key":58},{"_key":60},{"_key":62},{"_key":64},{"_key":66},{"_key":68},{"_key":70},{"_key":72},{"_key":74},{"_key":76},{"_key":78},{"_key":80},{"_key":82},{"_key":84},{"_key":115},"CGA-53J8-HW46-JFHX","2026-06-02T22:01:36.954Z","2026-07-22T12:08:49.187Z","Awaiting Analysis",{"cisa_kev":120,"cisa_ransomware":120,"cisa_vendor":9,"epss_severity":121,"epss_score":122,"severity":123,"severity_score":124,"severity_version":125,"severity_source":126,"severity_vector":127,"severity_status":118},false,"low",0.00904,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",[129,136,141,146,150,156,161,166,171,175,179,183,187,191,195,199,203,207,211,215,219,223,227,231,235,239,243,247,251,255,259,263,267,271,275,279,283,287],{"url":130,"sources":131,"tags":134},"https://go.dev/cl/783621",[126,132,133],"nvd","osv_go",[135],"FIX",{"url":137,"sources":138,"tags":139},"https://go.dev/issue/79694",[126,132,133],[140],"REPORT",{"url":142,"sources":143,"tags":144},"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",[126,132,133],[145],"WEB",{"url":147,"sources":148,"tags":149},"https://pkg.go.dev/vuln/GO-2026-5037",[126,132],[],{"url":151,"sources":152,"tags":153},"https://access.redhat.com/security/cve/CVE-2026-27145",[126],[154,155],"VDB Entry","X Refsource REDHAT",{"url":157,"sources":158,"tags":159},"https://bugzilla.redhat.com/show_bug.cgi?id=2484207",[126],[160,155],"Issue Tracking",{"url":162,"sources":163,"tags":164},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json",[126],[165],"X Sadp Csaf Vex",{"url":167,"sources":168,"tags":169},"https://access.redhat.com/errata/RHSA-2026:35832",[126],[170,155],"Vendor Advisory",{"url":172,"sources":173,"tags":174},"https://access.redhat.com/errata/RHSA-2026:34357",[126],[170,155],{"url":176,"sources":177,"tags":178},"https://access.redhat.com/errata/RHSA-2026:34359",[126],[170,155],{"url":180,"sources":181,"tags":182},"https://access.redhat.com/errata/RHSA-2026:36317",[126],[170,155],{"url":184,"sources":185,"tags":186},"https://access.redhat.com/errata/RHSA-2026:33574",[126],[170,155],{"url":188,"sources":189,"tags":190},"https://access.redhat.com/errata/RHSA-2026:36648",[126],[170,155],{"url":192,"sources":193,"tags":194},"https://access.redhat.com/errata/RHSA-2026:29981",[126],[170,155],{"url":196,"sources":197,"tags":198},"https://access.redhat.com/errata/RHSA-2026:36797",[126],[170,155],{"url":200,"sources":201,"tags":202},"https://access.redhat.com/errata/RHSA-2026:39005",[126],[170,155],{"url":204,"sources":205,"tags":206},"https://access.redhat.com/errata/RHSA-2026:38995",[126],[170,155],{"url":208,"sources":209,"tags":210},"https://access.redhat.com/errata/RHSA-2026:39573",[126],[170,155],{"url":212,"sources":213,"tags":214},"https://access.redhat.com/errata/RHSA-2026:39879",[126],[170,155],{"url":216,"sources":217,"tags":218},"https://access.redhat.com/errata/RHSA-2026:41030",[126],[170,155],{"url":220,"sources":221,"tags":222},"https://access.redhat.com/errata/RHSA-2026:23262",[126],[170,155],{"url":224,"sources":225,"tags":226},"https://access.redhat.com/errata/RHSA-2026:23264",[126],[170,155],{"url":228,"sources":229,"tags":230},"https://access.redhat.com/errata/RHSA-2026:41036",[126],[170,155],{"url":232,"sources":233,"tags":234},"https://access.redhat.com/errata/RHSA-2026:41930",[126],[170,155],{"url":236,"sources":237,"tags":238},"https://access.redhat.com/errata/RHSA-2026:42079",[126],[170,155],{"url":240,"sources":241,"tags":242},"https://access.redhat.com/errata/RHSA-2026:42080",[126],[170,155],{"url":244,"sources":245,"tags":246},"https://access.redhat.com/errata/RHSA-2026:42082",[126],[170,155],{"url":248,"sources":249,"tags":250},"https://access.redhat.com/errata/RHSA-2026:42150",[126],[170,155],{"url":252,"sources":253,"tags":254},"https://access.redhat.com/errata/RHSA-2026:42151",[126],[170,155],{"url":256,"sources":257,"tags":258},"https://access.redhat.com/errata/RHSA-2026:42240",[126],[170,155],{"url":260,"sources":261,"tags":262},"https://access.redhat.com/errata/RHSA-2026:42142",[126],[170,155],{"url":264,"sources":265,"tags":266},"https://access.redhat.com/errata/RHSA-2026:42644",[126],[170,155],{"url":268,"sources":269,"tags":270},"https://access.redhat.com/errata/RHSA-2026:42043",[126],[170,155],{"url":272,"sources":273,"tags":274},"https://access.redhat.com/errata/RHSA-2026:42047",[126],[170,155],{"url":276,"sources":277,"tags":278},"https://access.redhat.com/errata/RHSA-2026:42050",[126],[170,155],{"url":280,"sources":281,"tags":282},"https://access.redhat.com/errata/RHSA-2026:42051",[126],[170,155],{"url":284,"sources":285,"tags":286},"https://access.redhat.com/errata/RHSA-2026:42049",[126],[170,155],{"url":288,"sources":289,"tags":290},"https://access.redhat.com/errata/RHSA-2026:42946",[126],[170,155],[],{"date":293,"score":122,"percentile":294},"2026-07-05",0.55441,[296,300,303,307,310,313,317,320,323,326,329,332,335,339,342,345,348,351,354,357,360,364,367,370,373,376,379,382,386,389,393,396,399],{"date":297,"score":298,"percentile":299},"2026-06-03",0.00004,0.00176,{"date":301,"score":298,"percentile":302},"2026-06-04",0.00175,{"date":304,"score":305,"percentile":306},"2026-06-05",0.00009,0.00912,{"date":308,"score":305,"percentile":309},"2026-06-06",0.0091,{"date":311,"score":305,"percentile":312},"2026-06-07",0.00911,{"date":314,"score":315,"percentile":316},"2026-06-08",0.00011,0.0154,{"date":318,"score":315,"percentile":319},"2026-06-09",0.01538,{"date":321,"score":315,"percentile":322},"2026-06-10",0.01534,{"date":324,"score":315,"percentile":325},"2026-06-11",0.01543,{"date":327,"score":315,"percentile":328},"2026-06-12",0.01546,{"date":330,"score":315,"percentile":331},"2026-06-13",0.01549,{"date":333,"score":315,"percentile":334},"2026-06-14",0.01558,{"date":336,"score":337,"percentile":338},"2026-06-15",0.00325,0.23995,{"date":340,"score":337,"percentile":341},"2026-06-16",0.24022,{"date":343,"score":337,"percentile":344},"2026-06-17",0.24041,{"date":346,"score":337,"percentile":347},"2026-06-18",0.24062,{"date":349,"score":337,"percentile":350},"2026-06-19",0.24055,{"date":352,"score":337,"percentile":353},"2026-06-20",0.24044,{"date":355,"score":337,"percentile":356},"2026-06-21",0.24026,{"date":358,"score":337,"percentile":359},"2026-06-22",0.24003,{"date":361,"score":362,"percentile":363},"2026-06-23",0.00561,0.42201,{"date":365,"score":362,"percentile":366},"2026-06-24",0.42244,{"date":368,"score":362,"percentile":369},"2026-06-25",0.42326,{"date":371,"score":362,"percentile":372},"2026-06-26",0.42366,{"date":374,"score":362,"percentile":375},"2026-06-27",0.42405,{"date":377,"score":362,"percentile":378},"2026-06-28",0.42397,{"date":380,"score":362,"percentile":381},"2026-06-29",0.424,{"date":383,"score":384,"percentile":385},"2026-06-30",0.0065,0.4651,{"date":387,"score":384,"percentile":388},"2026-07-01",0.46601,{"date":390,"score":391,"percentile":392},"2026-07-02",0.00763,0.50868,{"date":394,"score":122,"percentile":395},"2026-07-03",0.55407,{"date":397,"score":122,"percentile":398},"2026-07-04",0.55431,{"date":293,"score":122,"percentile":294},[401,405],{"source":126,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":402,"cvss_v4_0":9},{"baseScore":124,"baseSeverity":403,"vectorString":127,"impactScore":4,"exploitabilityScore":404},"MEDIUM",5.6,{"source":132,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":406,"cvss_v4_0":9},{"baseScore":124,"baseSeverity":403,"vectorString":127,"impactScore":4,"exploitabilityScore":404},[408,423],{"ecosystem":9,"name":409,"vendor":410,"product":409,"cpe_part":411,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":412},"crypto/x509","go standard library","a",[413,418],{"version":414,"is_range":415,"range_type":126,"version_start":9,"version_start_type":9,"version_end":416,"version_end_type":417,"fixed_in":9},"\u003C 1.25.11",true,"1.25.11","excluding",{"version":419,"is_range":415,"range_type":126,"version_start":420,"version_start_type":421,"version_end":422,"version_end_type":417,"fixed_in":9},">= 1.26.0-0, \u003C 1.26.4","1.26.0-0","including","1.26.4",{"ecosystem":424,"name":425,"vendor":424,"product":425,"cpe_part":9,"purl_type":426,"purl_namespace":9,"purl_name":425,"source":9,"versions":427},"Go","stdlib","golang",[428],{"version":429,"is_range":415,"range_type":430,"version_start":420,"version_start_type":421,"version_end":422,"version_end_type":417,"fixed_in":9},"gte1_26_0_0_lt1_26_4","semver"]