{"schemaVersion":3,"id":"CVE-2026-42500","aliases":["UBUNTU-CVE-2026-42500","DEBIAN-CVE-2026-42500","CGA-7xqg-37fw-6g7j","CGA-882j-492p-38fj","CGA-fv7p-49fh-q44p","CGA-g7vc-hcq7-fj43","CGA-hf34-453g-9mj6","CGA-hvv5-88jx-93gx","CGA-qfrc-jq7g-q885","CGA-qmj5-v2vp-hxj4","GO-2026-5031","CGA-28g6-ccc6-m9j8","CGA-2g7w-jwh4-8cgf","CGA-2gj2-7c63-4598","CGA-3554-m4mp-h8v4","CGA-384q-83wf-5p8c","CGA-3rhf-xq55-76pw","CGA-47m5-cr37-2mq6","CGA-4f92-j554-qfpr","CGA-4rhx-4hvq-2x5q","CGA-4rp9-3j24-v54m","CGA-5p9f-3qxc-r6fw","CGA-5ppf-4589-chvq","CGA-5rrw-38wg-jf76","CGA-68f5-qrpx-74mj","CGA-68ph-w3f5-pc9r","CGA-6jhx-xjch-f2p2","CGA-6qx2-hp88-wqj7","CGA-6w3q-cw7w-8756","CGA-7342-q52p-63m5","CGA-743c-586w-v3x8","CGA-7jr9-75v9-g9hf","CGA-7qvc-x4h5-4826","CGA-7x77-297c-h2hg","CGA-85r8-r2wr-g8qv","CGA-8mhw-gwfp-wq38","CGA-8x2q-mgmc-82rr","CGA-8xr9-6gvj-gcrp","CGA-94p4-x2wg-67f4","CGA-98c6-jjx8-x27w","CGA-9c36-hfqv-q478","CGA-9g86-wm4j-wcfp","CGA-9q2w-wqc9-8vc3","CGA-c39g-ch4h-hjqh","CGA-c4f7-c5h9-7v29","CGA-c5vw-9pjv-6qcv","CGA-c8f5-3qg3-84c3","CGA-c8g6-9pfj-47v3","CGA-cg83-2h72-v6p9","CGA-cgm6-887j-6rwf","CGA-cq36-w5vg-274w","CGA-cvg2-h595-w4gc","CGA-fjq3-g5xf-rhpr","CGA-fp8j-mcqr-rvxf","CGA-fxfc-2f83-69r7","CGA-g998-mwmw-9j9m","CGA-gv54-pqmc-36qx","CGA-gwgg-6gxv-5352","CGA-h744-7cr9-jccr","CGA-h758-w67j-8f95","CGA-hcfj-hxr4-8mjw","CGA-hg95-55f8-j925","CGA-hjmc-fq45-cw33","CGA-hjvq-rjg7-fp7r","CGA-j777-843c-25w2","CGA-j9wq-gq5v-pp4r","CGA-jw37-v68j-xhvh","CGA-jwgf-ww74-qj56","CGA-jwj4-m6v3-5274","CGA-m3j5-2c88-rxfc","CGA-m57v-p8fm-9h8h","CGA-mr48-8jh4-5f4g","CGA-p3cr-h4vj-43fc","CGA-p46r-g8pc-4vcr","CGA-p4m2-cvp4-v82f","CGA-p7rr-3xmv-qr3x","CGA-pv9w-c56w-xj8p","CGA-q46r-mq29-7hr8","CGA-q6g7-qhjp-27q3","CGA-qr6w-62xx-4fw2","CGA-qxvq-vc4j-2499","CGA-r8gp-mjcf-44m3","CGA-rqgp-75wp-6hvx","CGA-v4f4-crxx-qp34","CGA-vhvm-2c25-g6pw","CGA-w5f5-7h8c-xv5h","CGA-w7xx-4jhq-hm44","CGA-w9p9-cpq9-xm7p","CGA-wmgf-88mr-x9w7","CGA-wq34-rjjg-2cj2","CGA-wv9g-3vhm-w5v2","CGA-ww86-jhp5-8qrg","CGA-wwx6-997x-ghg4","CGA-x339-j86x-67f9","CGA-x88r-4457-w3wh","CGA-xf95-5fhg-66qp","CGA-xm8x-j925-c8v3","CGA-xpch-7crm-6xw7","CGA-xqh7-r2m4-253m","CGA-xv9c-wxp5-w76r","CGA-xvpp-c3x7-xg7p"],"status":"published","duplicateOf":null,"title":"Panic when reading out of bound palette index in golang.org/x/image/bmp","description":"Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image.","dates":{"published":"2026-05-29T18:36:28.283Z","modified":"2026-05-29T19:51:38.147Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00524,"percentile":0.43579,"severity":"low","asOf":"2026-10-22T00:00:00.000Z","change":{"pp":0.13999999999999999,"baselineDate":"2026-09-22T00:00:00.000Z","baselineScore":0.00384},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.00524,"percentile":0.43579}],"last30":[{"date":"2026-09-22T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00384,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00524,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.00524,"percentile":0.43579}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"chainguard","product":"cg","name":"cg","label":"cg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cg","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chainctl","name":"chainctl","label":"chainctl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chainctl","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"chainctl-fips","name":"chainctl-fips","label":"chainctl-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/chainctl-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-chainloop-backend","name":"commercial-chainloop-backend","label":"commercial-chainloop-backend","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-chainloop-backend","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gatus","name":"gatus","label":"gatus","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gatus","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gatus-fips","name":"gatus-fips","label":"gatus-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gatus-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.10","name":"gitlab-workhorse-ce-18.10","label":"gitlab-workhorse-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.4","name":"gitlab-workhorse-ce-18.4","label":"gitlab-workhorse-ce-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.5","name":"gitlab-workhorse-ce-18.5","label":"gitlab-workhorse-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.6","name":"gitlab-workhorse-ce-18.6","label":"gitlab-workhorse-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.7","name":"gitlab-workhorse-ce-18.7","label":"gitlab-workhorse-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.8","name":"gitlab-workhorse-ce-18.8","label":"gitlab-workhorse-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-18.9","name":"gitlab-workhorse-ce-18.9","label":"gitlab-workhorse-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.10","name":"gitlab-workhorse-ce-fips-18.10","label":"gitlab-workhorse-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.4","name":"gitlab-workhorse-ce-fips-18.4","label":"gitlab-workhorse-ce-fips-18.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.5","name":"gitlab-workhorse-ce-fips-18.5","label":"gitlab-workhorse-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.6","name":"gitlab-workhorse-ce-fips-18.6","label":"gitlab-workhorse-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.7","name":"gitlab-workhorse-ce-fips-18.7","label":"gitlab-workhorse-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.8","name":"gitlab-workhorse-ce-fips-18.8","label":"gitlab-workhorse-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-workhorse-ce-fips-18.9","name":"gitlab-workhorse-ce-fips-18.9","label":"gitlab-workhorse-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-workhorse-ce-fips-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glab","name":"glab","label":"glab","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glab","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.0","name":"mattermost-11.0","label":"mattermost-11.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-11.2","name":"mattermost-11.2","label":"mattermost-11.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-11.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.0","name":"mattermost-fips-11.0","label":"mattermost-fips-11.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.2","name":"mattermost-fips-11.2","label":"mattermost-fips-11.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.2","purlType":"apk","versions":[{"text":"< 11.2.4-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.2.4-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mattermost-fips-11.4","name":"mattermost-fips-11.4","label":"mattermost-fips-11.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mattermost-fips-11.4","purlType":"apk","versions":[{"text":"< 11.4.5-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.4.5-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs","name":"seaweedfs","label":"seaweedfs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-fips","name":"seaweedfs-fips","label":"seaweedfs-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-fips","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-operator","name":"seaweedfs-operator","label":"seaweedfs-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-operator","purlType":"apk","versions":[{"text":"< 1.0.26-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.26-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-operator-fips","name":"seaweedfs-operator-fips","label":"seaweedfs-operator-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-operator-fips","purlType":"apk","versions":[{"text":"< 1.0.26-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.26-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-rocksdb","name":"seaweedfs-rocksdb","label":"seaweedfs-rocksdb","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-rocksdb","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seaweedfs-rocksdb-fips","name":"seaweedfs-rocksdb-fips","label":"seaweedfs-rocksdb-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seaweedfs-rocksdb-fips","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tailscale","name":"tailscale","label":"tailscale","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tailscale","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gatus","name":"gatus","label":"gatus","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gatus","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glab","name":"glab","label":"glab","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glab","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"seaweedfs","name":"seaweedfs","label":"seaweedfs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/seaweedfs","purlType":"apk","versions":[{"text":"< 4.34-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.34-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tailscale","name":"tailscale","label":"tailscale","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tailscale","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-golang-x-image","name":"golang-golang-x-image","label":"golang-golang-x-image","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-golang-x-image","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.42.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.42.0-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-golang-x-image","name":"golang-golang-x-image","label":"golang-golang-x-image","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-golang-x-image","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"golang.org/x","product":"image","name":"golang.org/x/image","label":"image","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/golang.org/x/image","purlType":"golang","versions":[{"text":"< 0.41.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.41.0","eol":null,"hubHref":null},{"vendor":"golang.org/x/image","product":"golang.org/x/image/bmp","name":"golang.org/x/image/bmp","label":"golang.org/x/image/bmp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.41.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.41.0","eol":null,"hubHref":"/vendor/golangorgximage/golangorgximagebmp"}],"affectedCount":41,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://go.dev/issue/79576","label":"go.dev/issue/79576","hostname":"go.dev","tags":["REPORT"]},{"url":"https://groups.google.com/g/golang-announce/c/uhYX90BlBvI","label":"groups.google.com/g/golang-announce/c/uhYX90BlBvI","hostname":"groups.google.com","tags":["REPORT","WEB"]},{"url":"https://go.dev/cl/781500","label":"go.dev/cl/781500","hostname":"go.dev","tags":["REPORT","FIX"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5031","label":"pkg.go.dev/vuln/GO-2026-5031","hostname":"pkg.go.dev","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-42500","label":"ubuntu.com/security/CVE-2026-42500","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42500","label":"www.cve.org/CVERecord?id=CVE-2026-42500","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/golang/go/issues/79576","label":"github.com/golang/go/issues/79576","hostname":"github.com","tags":["REPORT"]},{"url":"https://go-review.googlesource.com/c/image/+/781500","label":"go-review.googlesource.com/c/image/+/781500","hostname":"go-review.googlesource.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-42500","label":"security-tracker.debian.org/tracker/CVE-2026-42500","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:10856-1","OPENSUSE-SU-2026:21436-1","OPENSUSE-SU-2026:21483-1","RHSA-2026:62391","RHSA-2026:66561"],"duplicates":[],"related":["CGA-P4C7-MFJV-PFP7","OPENSUSE-SU-2026:10856-1","OPENSUSE-SU-2026:21436-1","OPENSUSE-SU-2026:21483-1","RHSA-2026:62391","RHSA-2026:66561"]},"timeline":[{"kind":"published","date":"2026-05-29T18:36:28.283Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-05-29T19:51:38.147Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T18:43:23.996Z","stale":false,"partial":false}}