[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-39831":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":229,"aliases":230,"duplicate_of":9,"upstream":233,"downstream":234,"duplicates":329,"related":330,"reserved_at":9,"published_at":376,"modified_at":377,"state":378,"summary":379,"references_raw":388,"kevs":423,"epss":424,"epss_history":427,"metrics":565,"affected":575},"CVE-2026-39831","The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","weakness","Incomplete","Class","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-665","Exploitation of Thunderbolt Protection Flaws",[24,61,101],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1211","Exploitation for Stealth",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0005","Stealth",[35,40,44,48,53,57],{"id":36,"name":37,"tactic":38},"D3-MBT","Memory Boundary Tracking",{"name":39},"Detect",{"id":41,"name":42,"tactic":43},"D3-PCSV","Process Code Segment Verification",{"name":39},{"id":45,"name":46,"tactic":47},"D3-SSC","Shadow Stack Comparisons",{"name":39},{"id":49,"name":50,"tactic":51},"D3-PSEP","Process Segment Execution Prevention",{"name":52},"Harden",{"id":54,"name":55,"tactic":56},"D3-SAOR","Segment Address Offset Randomization",{"name":52},{"id":58,"name":59,"tactic":60},"D3-SFCV","Stack Frame Canary Validation",{"name":52},{"id":62,"name":63,"tactics":64,"countermeasures":70},"T1542.002","Component Firmware",[65,66,67],{"id":29,"name":30},{"id":32,"name":33},{"id":68,"name":69},"TA0110","Persistence",[71,76,80,84,88,92,96],{"id":72,"name":73,"tactic":74},"D3-SWI","Software Inventory",{"name":75},"Model",{"id":77,"name":78,"tactic":79},"D3-AVE","Asset Vulnerability Enumeration",{"name":75},{"id":81,"name":82,"tactic":83},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":39},{"id":85,"name":86,"tactic":87},"D3-FV","Firmware Verification",{"name":39},{"id":89,"name":90,"tactic":91},"D3-FBA","Firmware Behavior Analysis",{"name":39},{"id":93,"name":94,"tactic":95},"D3-SU","Software Update",{"name":52},{"id":97,"name":98,"tactic":99},"D3-RS","Restore Software",{"name":100},"Restore",{"id":102,"name":103,"tactics":104,"countermeasures":113},"T1556","Modify Authentication Process",[105,106,109,110],{"id":29,"name":30},{"id":107,"name":108},"TA0112","Defense Impairment",{"id":68,"name":69},{"id":111,"name":112},"TA0031","Credential Access",[114,118,122,126,130,134,138,142,146,150,155,159,163,167,171,176,180,184,188,193,197,201,205,209,213,217,221,225],{"id":115,"name":116,"tactic":117},"D3-CI","Configuration Inventory",{"name":75},{"id":119,"name":120,"tactic":121},"D3-NTPM","Network Traffic Policy Mapping",{"name":75},{"id":123,"name":124,"tactic":125},"D3-AM","Access Modeling",{"name":75},{"id":127,"name":128,"tactic":129},"D3-FA","File Analysis",{"name":39},{"id":131,"name":132,"tactic":133},"D3-FIM","File Integrity Monitoring",{"name":39},{"id":135,"name":136,"tactic":137},"D3-PLA","Process Lineage Analysis",{"name":39},{"id":139,"name":140,"tactic":141},"D3-PSMD","Process Self-Modification Detection",{"name":39},{"id":143,"name":144,"tactic":145},"D3-PSA","Process Spawn Analysis",{"name":39},{"id":147,"name":148,"tactic":149},"D3-SFA","System File Analysis",{"name":39},{"id":151,"name":152,"tactic":153},"D3-FEV","File Eviction",{"name":154},"Evict",{"id":156,"name":157,"tactic":158},"D3-PT","Process Termination",{"name":154},{"id":160,"name":161,"tactic":162},"D3-PS","Process Suspension",{"name":154},{"id":164,"name":165,"tactic":166},"D3-HR","Host Reboot",{"name":154},{"id":168,"name":169,"tactic":170},"D3-HS","Host Shutdown",{"name":154},{"id":172,"name":173,"tactic":174},"D3-DF","Decoy File",{"name":175},"Deceive",{"id":177,"name":178,"tactic":179},"D3-FE","File Encryption",{"name":52},{"id":181,"name":182,"tactic":183},"D3-RF","Restore File",{"name":100},{"id":185,"name":186,"tactic":187},"D3-RC","Restore Configuration",{"name":100},{"id":189,"name":190,"tactic":191},"D3-CF","Content Filtering",{"name":192},"Isolate",{"id":194,"name":195,"tactic":196},"D3-LFP","Local File Permissions",{"name":192},{"id":198,"name":199,"tactic":200},"D3-RFAM","Remote File Access Mediation",{"name":192},{"id":202,"name":203,"tactic":204},"D3-CQ","Content Quarantine",{"name":192},{"id":206,"name":207,"tactic":208},"D3-CM","Content Modification",{"name":192},{"id":210,"name":211,"tactic":212},"D3-KBPI","Kernel-based Process Isolation",{"name":192},{"id":214,"name":215,"tactic":216},"D3-SCF","System Call Filtering",{"name":192},{"id":218,"name":219,"tactic":220},"D3-HBPI","Hardware-based Process Isolation",{"name":192},{"id":222,"name":223,"tactic":224},"D3-ABPI","Application-based Process Isolation",{"name":192},{"id":226,"name":227,"tactic":228},"D3-WSAM","Web Session Access Mediation",{"name":192},[],[231,232],"GO-2026-5019","GHSA-89gr-r52h-f8rx",[],[235,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265,267,269,271,273,275,277,279,281,283,285,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,317,319,321,323,325,327],{"_key":236},"OPENSUSE-SU-2026:10842-1",{"_key":238},"OPENSUSE-SU-2026:10845-1",{"_key":240},"OPENSUSE-SU-2026:10856-1",{"_key":242},"OPENSUSE-SU-2026:10949-1",{"_key":244},"SUSE-SU-2026:22074-1",{"_key":246},"SUSE-SU-2026:22065-1",{"_key":248},"DEBIAN-CVE-2026-39831",{"_key":250},"OPENSUSE-SU-2026:20956-1",{"_key":252},"USN-8447-1",{"_key":254},"OPENSUSE-SU-2026:11053-1",{"_key":256},"SUSE-SU-2026:2468-1",{"_key":258},"SUSE-SU-2026:2467-1",{"_key":260},"USN-8447-3",{"_key":262},"SUSE-SU-2026:22193-1",{"_key":264},"SUSE-SU-2026:22226-1",{"_key":266},"SUSE-SU-2026:2581-1",{"_key":268},"SUSE-SU-2026:22157-1",{"_key":270},"SUSE-SU-2026:22159-1",{"_key":272},"SUSE-SU-2026:2609-1",{"_key":274},"SUSE-SU-2026:2611-1",{"_key":276},"SUSE-SU-2026:2612-1",{"_key":278},"OPENSUSE-SU-2026:11126-1",{"_key":280},"SUSE-SU-2026:22249-1",{"_key":282},"SUSE-SU-2026:22242-1",{"_key":284},"SUSE-SU-2026:2665-1",{"_key":286},"SUSE-SU-2026:22376-1",{"_key":288},"SUSE-SU-2026:22423-1",{"_key":290},"SUSE-SU-2026:22442-1",{"_key":292},"SUSE-SU-2026:22451-1",{"_key":294},"SUSE-SU-2026:22516-1",{"_key":296},"SUSE-SU-2026:2706-1",{"_key":298},"SUSE-SU-2026:2733-1",{"_key":300},"SUSE-SU-2026:2824-1",{"_key":302},"SUSE-SU-2026:2827-1",{"_key":304},"OPENSUSE-SU-2026:21069-1",{"_key":306},"OPENSUSE-SU-2026:21079-1",{"_key":308},"OPENSUSE-SU-2026:21084-1",{"_key":310},"OPENSUSE-SU-2026:21120-1",{"_key":312},"OPENSUSE-SU-2026:21210-1",{"_key":314},"OPENSUSE-SU-2026:21244-1",{"_key":316},"OPENSUSE-SU-2026:21251-1",{"_key":318},"SUSE-SU-2026:22558-1",{"_key":320},"SUSE-SU-2026:22575-1",{"_key":322},"SUSE-SU-2026:22613-1",{"_key":324},"SUSE-SU-2026:3056-1",{"_key":326},"UBUNTU-CVE-2026-39831",{"_key":328},"OPENSUSE-SU-2026:21281-1",[],[331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374],{"_key":236},{"_key":238},{"_key":240},{"_key":242},{"_key":244},{"_key":246},{"_key":250},{"_key":254},{"_key":256},{"_key":258},{"_key":262},{"_key":264},{"_key":266},{"_key":268},{"_key":270},{"_key":272},{"_key":274},{"_key":276},{"_key":278},{"_key":280},{"_key":282},{"_key":284},{"_key":286},{"_key":288},{"_key":290},{"_key":292},{"_key":294},{"_key":296},{"_key":298},{"_key":300},{"_key":302},{"_key":304},{"_key":306},{"_key":308},{"_key":310},{"_key":312},{"_key":314},{"_key":316},{"_key":318},{"_key":320},{"_key":322},{"_key":324},{"_key":328},{"_key":375},"CGA-VMC4-96W4-WR4C","2026-05-22T02:31:27.436Z","2026-05-22T18:52:08.344Z","Analyzed",{"cisa_kev":380,"cisa_ransomware":380,"cisa_vendor":9,"epss_severity":381,"epss_score":382,"severity":383,"severity_score":384,"severity_version":385,"severity_source":386,"severity_vector":387,"severity_status":378},false,"low",0.00373,"critical",9.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",[389,398,403,408,413,418],{"url":390,"sources":391,"tags":394},"https://go.dev/issue/79566",[386,392,393],"nvd","osv_go",[395,396,397],"REPORT","Issue Tracking","WEB",{"url":399,"sources":400,"tags":401},"https://groups.google.com/g/golang-announce/c/a082jnz-LvI",[386,392,393],[397,402],"Mailing List",{"url":404,"sources":405,"tags":406},"https://go.dev/cl/781662",[386,392,393],[407,396,397],"FIX",{"url":409,"sources":410,"tags":411},"https://pkg.go.dev/vuln/GO-2026-5019",[386,392,393],[412,397],"Vendor Advisory",{"url":414,"sources":415,"tags":416},"https://nvd.nist.gov/vuln/detail/CVE-2026-39831",[393],[417],"Advisory",{"url":419,"sources":420,"tags":421},"https://cs.opensource.google/go/x/crypto",[393],[422],"PACKAGE",[],{"date":425,"score":382,"percentile":426},"2026-07-05",0.29334,[428,432,436,439,442,445,448,452,455,458,461,464,467,471,474,477,480,483,486,489,492,495,498,501,504,508,511,514,517,520,522,525,528,531,534,537,540,543,546,549,552,555,558,561,564],{"date":429,"score":430,"percentile":431},"2026-05-22",0.00012,0.01983,{"date":433,"score":434,"percentile":435},"2026-05-23",0.00022,0.06615,{"date":437,"score":434,"percentile":438},"2026-05-24",0.06614,{"date":440,"score":434,"percentile":441},"2026-05-25",0.06594,{"date":443,"score":434,"percentile":444},"2026-05-26",0.06563,{"date":446,"score":434,"percentile":447},"2026-05-27",0.066,{"date":449,"score":450,"percentile":451},"2026-05-28",0.00029,0.08965,{"date":453,"score":450,"percentile":454},"2026-05-29",0.09002,{"date":456,"score":450,"percentile":457},"2026-05-30",0.09006,{"date":459,"score":450,"percentile":460},"2026-05-31",0.08989,{"date":462,"score":450,"percentile":463},"2026-06-01",0.08967,{"date":465,"score":450,"percentile":466},"2026-06-02",0.08902,{"date":468,"score":469,"percentile":470},"2026-06-03",0.00033,0.0998,{"date":472,"score":469,"percentile":473},"2026-06-04",0.0999,{"date":475,"score":469,"percentile":476},"2026-06-05",0.10034,{"date":478,"score":469,"percentile":479},"2026-06-06",0.10051,{"date":481,"score":469,"percentile":482},"2026-06-07",0.10023,{"date":484,"score":469,"percentile":485},"2026-06-08",0.09937,{"date":487,"score":469,"percentile":488},"2026-06-09",0.0997,{"date":490,"score":469,"percentile":491},"2026-06-10",0.10012,{"date":493,"score":469,"percentile":494},"2026-06-11",0.10048,{"date":496,"score":469,"percentile":497},"2026-06-12",0.10094,{"date":499,"score":469,"percentile":500},"2026-06-13",0.101,{"date":502,"score":469,"percentile":503},"2026-06-14",0.10084,{"date":505,"score":506,"percentile":507},"2026-06-15",0.00309,0.22378,{"date":509,"score":506,"percentile":510},"2026-06-16",0.22405,{"date":512,"score":506,"percentile":513},"2026-06-17",0.2242,{"date":515,"score":506,"percentile":516},"2026-06-18",0.22442,{"date":518,"score":506,"percentile":519},"2026-06-19",0.22431,{"date":521,"score":506,"percentile":513},"2026-06-20",{"date":523,"score":506,"percentile":524},"2026-06-21",0.22402,{"date":526,"score":506,"percentile":527},"2026-06-22",0.22383,{"date":529,"score":382,"percentile":530},"2026-06-23",0.29008,{"date":532,"score":382,"percentile":533},"2026-06-24",0.2904,{"date":535,"score":382,"percentile":536},"2026-06-25",0.29126,{"date":538,"score":382,"percentile":539},"2026-06-26",0.2917,{"date":541,"score":382,"percentile":542},"2026-06-27",0.2921,{"date":544,"score":382,"percentile":545},"2026-06-28",0.29183,{"date":547,"score":382,"percentile":548},"2026-06-29",0.29182,{"date":550,"score":382,"percentile":551},"2026-06-30",0.2916,{"date":553,"score":382,"percentile":554},"2026-07-01",0.2927,{"date":556,"score":382,"percentile":557},"2026-07-02",0.29293,{"date":559,"score":382,"percentile":560},"2026-07-03",0.29311,{"date":562,"score":382,"percentile":563},"2026-07-04",0.29317,{"date":425,"score":382,"percentile":426},[566,571,573],{"source":386,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":567,"cvss_v4_0":9},{"baseScore":384,"baseSeverity":568,"vectorString":387,"impactScore":569,"exploitabilityScore":570},"CRITICAL",8.7,10,{"source":392,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":572,"cvss_v4_0":9},{"baseScore":384,"baseSeverity":568,"vectorString":387,"impactScore":569,"exploitabilityScore":570},{"source":393,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":574,"cvss_v4_0":9},{"baseScore":384,"baseSeverity":9,"vectorString":387,"impactScore":569,"exploitabilityScore":570},[576,587,595,600],{"ecosystem":9,"name":577,"vendor":578,"product":577,"cpe_part":579,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":580},"crypto","golang","a",[581],{"version":582,"is_range":583,"range_type":584,"version_start":9,"version_start_type":9,"version_end":585,"version_end_type":586,"fixed_in":9},"lt0.52.0",true,"cpe","0.52.0","excluding",{"ecosystem":588,"name":589,"vendor":590,"product":577,"cpe_part":9,"purl_type":578,"purl_namespace":590,"purl_name":577,"source":9,"versions":591},"Go","golang.org/x/crypto","golang.org/x",[592],{"version":593,"is_range":583,"range_type":594,"version_start":9,"version_start_type":9,"version_end":585,"version_end_type":586,"fixed_in":9},"lt0_52_0","semver",{"ecosystem":588,"name":596,"vendor":589,"product":597,"cpe_part":9,"purl_type":578,"purl_namespace":589,"purl_name":597,"source":9,"versions":598},"golang.org/x/crypto/ssh","ssh",[599],{"version":593,"is_range":583,"range_type":594,"version_start":9,"version_start_type":9,"version_end":585,"version_end_type":586,"fixed_in":9},{"ecosystem":9,"name":596,"vendor":589,"product":596,"cpe_part":579,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":601},[602],{"version":603,"is_range":583,"range_type":386,"version_start":9,"version_start_type":9,"version_end":585,"version_end_type":586,"fixed_in":9},"\u003C 0.52.0"]