[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-39829":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":33,"aliases":34,"duplicate_of":9,"upstream":37,"downstream":38,"duplicates":149,"related":150,"reserved_at":9,"published_at":206,"modified_at":207,"state":208,"summary":209,"references_raw":218,"kevs":424,"epss":425,"epss_history":428,"metrics":568,"affected":578},"CVE-2026-39829","The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.",null,[11,27],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-463","Padding Oracle Crypto Attack",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],{"_key":28,"id":28,"name":29,"description":30,"type":15,"status":31,"abstraction":17,"likelihood_of_exploit":9,"capec":32},"CWE-1284","Improper Validation of Specified Quantity in Input","The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.","Incomplete",[],[],[35,36],"GO-2026-5018","GHSA-w879-237q-wc7r",[],[39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147],{"_key":40},"OPENSUSE-SU-2026:10856-1",{"_key":42},"OPENSUSE-SU-2026:10949-1",{"_key":44},"SUSE-SU-2026:22074-1",{"_key":46},"SUSE-SU-2026:22065-1",{"_key":48},"DEBIAN-CVE-2026-39829",{"_key":50},"OPENSUSE-SU-2026:11031-1",{"_key":52},"OPENSUSE-SU-2026:20956-1",{"_key":54},"OPENSUSE-SU-2026:11046-1",{"_key":56},"SUSE-SU-2026:2468-1",{"_key":58},"SUSE-SU-2026:2467-1",{"_key":60},"SUSE-SU-2026:22193-1",{"_key":62},"SUSE-SU-2026:22226-1",{"_key":64},"SUSE-SU-2026:2581-1",{"_key":66},"SUSE-SU-2026:22157-1",{"_key":68},"SUSE-SU-2026:22159-1",{"_key":70},"SUSE-SU-2026:2609-1",{"_key":72},"SUSE-SU-2026:2611-1",{"_key":74},"SUSE-SU-2026:2612-1",{"_key":76},"SUSE-SU-2026:2636-1",{"_key":78},"OPENSUSE-SU-2026:11126-1",{"_key":80},"SUSE-SU-2026:22249-1",{"_key":82},"SUSE-SU-2026:22242-1",{"_key":84},"SUSE-SU-2026:2665-1",{"_key":86},"SUSE-SU-2026:22376-1",{"_key":88},"SUSE-SU-2026:22423-1",{"_key":90},"SUSE-SU-2026:22442-1",{"_key":92},"SUSE-SU-2026:22451-1",{"_key":94},"SUSE-SU-2026:22516-1",{"_key":96},"SUSE-SU-2026:2693-1",{"_key":98},"SUSE-SU-2026:2706-1",{"_key":100},"SUSE-SU-2026:2715-1",{"_key":102},"SUSE-SU-2026:2733-1",{"_key":104},"SUSE-SU-2026:2824-1",{"_key":106},"SUSE-SU-2026:2827-1",{"_key":108},"OPENSUSE-SU-2026:21069-1",{"_key":110},"OPENSUSE-SU-2026:21079-1",{"_key":112},"OPENSUSE-SU-2026:21084-1",{"_key":114},"OPENSUSE-SU-2026:21120-1",{"_key":116},"OPENSUSE-SU-2026:21210-1",{"_key":118},"OPENSUSE-SU-2026:21241-1",{"_key":120},"OPENSUSE-SU-2026:21244-1",{"_key":122},"OPENSUSE-SU-2026:21251-1",{"_key":124},"SUSE-SU-2026:22558-1",{"_key":126},"SUSE-SU-2026:22575-1",{"_key":128},"SUSE-SU-2026:22613-1",{"_key":130},"SUSE-SU-2026:3056-1",{"_key":132},"RHSA-2026:29455",{"_key":134},"RHSA-2026:35833",{"_key":136},"RHSA-2026:36199",{"_key":138},"RHSA-2026:36796",{"_key":140},"RHSA-2026:37072",{"_key":142},"RHSA-2026:37123",{"_key":144},"RHSA-2026:41019",{"_key":146},"UBUNTU-CVE-2026-39829",{"_key":148},"OPENSUSE-SU-2026:21281-1",[],[151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204],{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":50},{"_key":52},{"_key":54},{"_key":56},{"_key":58},{"_key":60},{"_key":62},{"_key":64},{"_key":66},{"_key":68},{"_key":70},{"_key":72},{"_key":74},{"_key":76},{"_key":78},{"_key":80},{"_key":82},{"_key":84},{"_key":86},{"_key":88},{"_key":90},{"_key":92},{"_key":94},{"_key":96},{"_key":98},{"_key":100},{"_key":102},{"_key":104},{"_key":106},{"_key":108},{"_key":110},{"_key":112},{"_key":114},{"_key":116},{"_key":118},{"_key":120},{"_key":122},{"_key":124},{"_key":126},{"_key":128},{"_key":130},{"_key":132},{"_key":134},{"_key":136},{"_key":138},{"_key":140},{"_key":142},{"_key":144},{"_key":148},{"_key":205},"CGA-93P6-7W5M-X8FX","2026-05-22T02:31:27.324Z","2026-07-22T12:08:36.089Z","Analyzed",{"cisa_kev":210,"cisa_ransomware":210,"cisa_vendor":9,"epss_severity":211,"epss_score":212,"severity":213,"severity_score":214,"severity_version":215,"severity_source":216,"severity_vector":217,"severity_status":208},false,"low",0.004,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[219,228,233,238,242,247,252,257,263,267,272,276,280,284,288,292,296,300,304,308,312,316,320,324,328,332,336,340,344,348,352,356,360,364,368,372,376,380,384,388,392,396,400,404,408,412,416,420],{"url":220,"sources":221,"tags":224},"https://go.dev/issue/79565",[216,222,223],"nvd","osv_go",[225,226,227],"REPORT","Issue Tracking","WEB",{"url":229,"sources":230,"tags":231},"https://groups.google.com/g/golang-announce/c/a082jnz-LvI",[216,222,223],[227,232],"Mailing List",{"url":234,"sources":235,"tags":236},"https://go.dev/cl/781641",[216,222,223],[237,226,227],"FIX",{"url":239,"sources":240,"tags":241},"https://go.dev/cl/781661",[216,222,223],[237,226,227],{"url":243,"sources":244,"tags":245},"https://pkg.go.dev/vuln/GO-2026-5018",[216,222,223],[246,227],"Vendor Advisory",{"url":248,"sources":249,"tags":250},"https://nvd.nist.gov/vuln/detail/CVE-2026-39829",[223],[251],"Advisory",{"url":253,"sources":254,"tags":255},"https://cs.opensource.google/go/x/crypto",[223],[256],"PACKAGE",{"url":258,"sources":259,"tags":260},"https://access.redhat.com/security/cve/CVE-2026-39829",[216,223],[261,262,227],"VDB Entry","X Refsource REDHAT",{"url":264,"sources":265,"tags":266},"https://bugzilla.redhat.com/show_bug.cgi?id=2480681",[216,223],[226,262,227],{"url":268,"sources":269,"tags":270},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39829.json",[216,223],[271,227],"X Sadp Csaf Vex",{"url":273,"sources":274,"tags":275},"https://access.redhat.com/errata/RHSA-2026:29455",[216,223],[246,262,227],{"url":277,"sources":278,"tags":279},"https://access.redhat.com/errata/RHSA-2026:36199",[216,223],[246,262,227],{"url":281,"sources":282,"tags":283},"https://access.redhat.com/errata/RHSA-2026:35833",[216,223],[246,262,227],{"url":285,"sources":286,"tags":287},"https://access.redhat.com/errata/RHSA-2026:26547",[216,223],[246,262,227],{"url":289,"sources":290,"tags":291},"https://access.redhat.com/errata/RHSA-2026:36625",[216,223],[246,262,227],{"url":293,"sources":294,"tags":295},"https://access.redhat.com/errata/RHSA-2026:36207",[216,223],[246,262,227],{"url":297,"sources":298,"tags":299},"https://access.redhat.com/errata/RHSA-2026:26546",[216,223],[246,262,227],{"url":301,"sources":302,"tags":303},"https://access.redhat.com/errata/RHSA-2026:36319",[216,223],[246,262,227],{"url":305,"sources":306,"tags":307},"https://access.redhat.com/errata/RHSA-2026:36648",[216,223],[246,262,227],{"url":309,"sources":310,"tags":311},"https://access.redhat.com/errata/RHSA-2026:36796",[216,223],[246,262,227],{"url":313,"sources":314,"tags":315},"https://access.redhat.com/errata/RHSA-2026:37072",[216,223],[246,262,227],{"url":317,"sources":318,"tags":319},"https://access.redhat.com/errata/RHSA-2026:37123",[216,223],[246,262,227],{"url":321,"sources":322,"tags":323},"https://access.redhat.com/errata/RHSA-2026:36808",[216,223],[246,262,227],{"url":325,"sources":326,"tags":327},"https://access.redhat.com/errata/RHSA-2026:36651",[216,223],[246,262,227],{"url":329,"sources":330,"tags":331},"https://access.redhat.com/errata/RHSA-2026:36820",[216,223],[246,262,227],{"url":333,"sources":334,"tags":335},"https://access.redhat.com/errata/RHSA-2026:36797",[216,223],[246,262,227],{"url":337,"sources":338,"tags":339},"https://access.redhat.com/errata/RHSA-2026:37271",[216,223],[246,262,227],{"url":341,"sources":342,"tags":343},"https://access.redhat.com/errata/RHSA-2026:37268",[216,223],[246,262,227],{"url":345,"sources":346,"tags":347},"https://access.redhat.com/errata/RHSA-2026:36883",[216,223],[246,262,227],{"url":349,"sources":350,"tags":351},"https://access.redhat.com/errata/RHSA-2026:37387",[216,223],[246,262,227],{"url":353,"sources":354,"tags":355},"https://access.redhat.com/errata/RHSA-2026:37272",[216,223],[246,262,227],{"url":357,"sources":358,"tags":359},"https://access.redhat.com/errata/RHSA-2026:37278",[216,223],[246,262,227],{"url":361,"sources":362,"tags":363},"https://access.redhat.com/errata/RHSA-2026:37286",[216,223],[246,262,227],{"url":365,"sources":366,"tags":367},"https://access.redhat.com/errata/RHSA-2026:37296",[216,223],[246,262,227],{"url":369,"sources":370,"tags":371},"https://access.redhat.com/errata/RHSA-2026:41019",[216,223],[246,262,227],{"url":373,"sources":374,"tags":375},"https://access.redhat.com/errata/RHSA-2026:40945",[216,223],[246,262,227],{"url":377,"sources":378,"tags":379},"https://access.redhat.com/errata/RHSA-2026:40118",[216,223],[246,262,227],{"url":381,"sources":382,"tags":383},"https://access.redhat.com/errata/RHSA-2026:41036",[216,223],[246,262,227],{"url":385,"sources":386,"tags":387},"https://access.redhat.com/errata/RHSA-2026:41031",[216,223],[246,262,227],{"url":389,"sources":390,"tags":391},"https://access.redhat.com/errata/RHSA-2026:41066",[216,223],[246,262,227],{"url":393,"sources":394,"tags":395},"https://access.redhat.com/errata/RHSA-2026:40262",[216,223],[246,262,227],{"url":397,"sources":398,"tags":399},"https://access.redhat.com/errata/RHSA-2026:40972",[216,223],[246,262,227],{"url":401,"sources":402,"tags":403},"https://access.redhat.com/errata/RHSA-2026:40974",[216,223],[246,262,227],{"url":405,"sources":406,"tags":407},"https://access.redhat.com/errata/RHSA-2026:40969",[216,223],[246,262,227],{"url":409,"sources":410,"tags":411},"https://access.redhat.com/errata/RHSA-2026:40119",[216,223],[246,262,227],{"url":413,"sources":414,"tags":415},"https://access.redhat.com/errata/RHSA-2026:41055",[216,223],[246,262,227],{"url":417,"sources":418,"tags":419},"https://access.redhat.com/errata/RHSA-2026:42146",[216],[246,262],{"url":421,"sources":422,"tags":423},"https://access.redhat.com/errata/RHSA-2026:42796",[216],[246,262],[],{"date":426,"score":212,"percentile":427},"2026-07-05",0.32012,[429,433,437,440,443,446,449,453,456,459,462,465,467,471,474,477,480,483,486,489,492,495,498,501,504,508,511,514,517,520,523,526,529,533,536,539,542,545,548,551,555,558,561,564,567],{"date":430,"score":431,"percentile":432},"2026-05-22",0.00034,0.10166,{"date":434,"score":435,"percentile":436},"2026-05-23",0.00074,0.22307,{"date":438,"score":435,"percentile":439},"2026-05-24",0.2228,{"date":441,"score":435,"percentile":442},"2026-05-25",0.22242,{"date":444,"score":435,"percentile":445},"2026-05-26",0.22236,{"date":447,"score":435,"percentile":448},"2026-05-27",0.2231,{"date":450,"score":451,"percentile":452},"2026-05-28",0.00088,0.25138,{"date":454,"score":451,"percentile":455},"2026-05-29",0.25192,{"date":457,"score":451,"percentile":458},"2026-05-30",0.25191,{"date":460,"score":451,"percentile":461},"2026-05-31",0.2519,{"date":463,"score":451,"percentile":464},"2026-06-01",0.2518,{"date":466,"score":451,"percentile":455},"2026-06-02",{"date":468,"score":469,"percentile":470},"2026-06-03",0.00035,0.10825,{"date":472,"score":469,"percentile":473},"2026-06-04",0.1084,{"date":475,"score":469,"percentile":476},"2026-06-05",0.10927,{"date":478,"score":469,"percentile":479},"2026-06-06",0.10916,{"date":481,"score":469,"percentile":482},"2026-06-07",0.10882,{"date":484,"score":469,"percentile":485},"2026-06-08",0.10802,{"date":487,"score":469,"percentile":488},"2026-06-09",0.10822,{"date":490,"score":469,"percentile":491},"2026-06-10",0.10861,{"date":493,"score":469,"percentile":494},"2026-06-11",0.109,{"date":496,"score":469,"percentile":497},"2026-06-12",0.10961,{"date":499,"score":469,"percentile":500},"2026-06-13",0.10956,{"date":502,"score":469,"percentile":503},"2026-06-14",0.10925,{"date":505,"score":506,"percentile":507},"2026-06-15",0.00276,0.1912,{"date":509,"score":506,"percentile":510},"2026-06-16",0.19145,{"date":512,"score":506,"percentile":513},"2026-06-17",0.19152,{"date":515,"score":506,"percentile":516},"2026-06-18",0.19166,{"date":518,"score":506,"percentile":519},"2026-06-19",0.19155,{"date":521,"score":506,"percentile":522},"2026-06-20",0.19147,{"date":524,"score":506,"percentile":525},"2026-06-21",0.19134,{"date":527,"score":506,"percentile":528},"2026-06-22",0.19123,{"date":530,"score":531,"percentile":532},"2026-06-23",0.00304,0.21873,{"date":534,"score":531,"percentile":535},"2026-06-24",0.21906,{"date":537,"score":531,"percentile":538},"2026-06-25",0.21995,{"date":540,"score":531,"percentile":541},"2026-06-26",0.22027,{"date":543,"score":531,"percentile":544},"2026-06-27",0.22072,{"date":546,"score":531,"percentile":547},"2026-06-28",0.22032,{"date":549,"score":531,"percentile":550},"2026-06-29",0.2203,{"date":552,"score":553,"percentile":554},"2026-06-30",0.00389,0.30783,{"date":556,"score":553,"percentile":557},"2026-07-01",0.30887,{"date":559,"score":212,"percentile":560},"2026-07-02",0.31975,{"date":562,"score":212,"percentile":563},"2026-07-03",0.31993,{"date":565,"score":212,"percentile":566},"2026-07-04",0.31996,{"date":426,"score":212,"percentile":427},[569,574,576],{"source":216,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":570,"cvss_v4_0":9},{"baseScore":214,"baseSeverity":571,"vectorString":217,"impactScore":572,"exploitabilityScore":573},"HIGH",6,10,{"source":222,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":575,"cvss_v4_0":9},{"baseScore":214,"baseSeverity":571,"vectorString":217,"impactScore":572,"exploitabilityScore":573},{"source":223,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":577,"cvss_v4_0":9},{"baseScore":214,"baseSeverity":9,"vectorString":217,"impactScore":572,"exploitabilityScore":573},[579,590,598,603],{"ecosystem":9,"name":580,"vendor":581,"product":580,"cpe_part":582,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":583},"crypto","golang","a",[584],{"version":585,"is_range":586,"range_type":587,"version_start":9,"version_start_type":9,"version_end":588,"version_end_type":589,"fixed_in":9},"lt0.52.0",true,"cpe","0.52.0","excluding",{"ecosystem":591,"name":592,"vendor":593,"product":580,"cpe_part":9,"purl_type":581,"purl_namespace":593,"purl_name":580,"source":9,"versions":594},"Go","golang.org/x/crypto","golang.org/x",[595],{"version":596,"is_range":586,"range_type":597,"version_start":9,"version_start_type":9,"version_end":588,"version_end_type":589,"fixed_in":9},"lt0_52_0","semver",{"ecosystem":591,"name":599,"vendor":592,"product":600,"cpe_part":9,"purl_type":581,"purl_namespace":592,"purl_name":600,"source":9,"versions":601},"golang.org/x/crypto/ssh","ssh",[602],{"version":596,"is_range":586,"range_type":597,"version_start":9,"version_start_type":9,"version_end":588,"version_end_type":589,"fixed_in":9},{"ecosystem":9,"name":599,"vendor":592,"product":599,"cpe_part":582,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":604},[605],{"version":606,"is_range":586,"range_type":216,"version_start":9,"version_start_type":9,"version_end":588,"version_end_type":589,"fixed_in":9},"\u003C 0.52.0"]