Search CVE reports


Toggle filters

1 – 10 of 47 results


CVE-2026-97032

Medium priority
Needs evaluation

[Unknown description]

26 affected packages

golang-golang-x-net, google-guest-agent, google-osconfig-agent, containerd, golang-golang-x-net-dev...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-golang-x-net Needs evaluation Needs evaluation Needs evaluation — —
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
google-osconfig-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
containerd Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
golang-golang-x-net-dev Not in release Not in release Not in release Needs evaluation Needs evaluation
adsys Needs evaluation Needs evaluation Needs evaluation Needs evaluation —
juju-core Not in release Not in release Not in release — —
lxd Not in release Not in release Not in release Needs evaluation Needs evaluation
golang Not in release Not in release Not in release — —
golang-1.6 Not in release Not in release Not in release — —
golang-1.8 Not in release Not in release Not in release — Needs evaluation
golang-1.9 Not in release Not in release Not in release — Needs evaluation
golang-1.10 Not in release Not in release Not in release — Needs evaluation
golang-1.13 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.14 Not in release Not in release Not in release Needs evaluation —
golang-1.16 Not in release Not in release Not in release Needs evaluation Needs evaluation
golang-1.17 Not in release Not in release Needs evaluation — —
golang-1.18 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.20 Not in release Not in release Needs evaluation Needs evaluation —
golang-1.21 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.22 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.23 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.24 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.25 Needs evaluation Not in release Not in release — —
golang-1.26 Needs evaluation Not in release Not in release — —
golang-1.27 Not in release Not in release Not in release — —
Show all 26 packages Show less packages

CVE-2026-78669

Medium priority
Needs evaluation

[Unknown description]

26 affected packages

golang-golang-x-net, google-guest-agent, google-osconfig-agent, containerd, golang-golang-x-net-dev...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-golang-x-net Needs evaluation Needs evaluation Needs evaluation — —
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
google-osconfig-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
containerd Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
golang-golang-x-net-dev Not in release Not in release Not in release Needs evaluation Needs evaluation
adsys Needs evaluation Needs evaluation Needs evaluation Needs evaluation —
juju-core Not in release Not in release Not in release — —
lxd Not in release Not in release Not in release Needs evaluation Needs evaluation
golang Not in release Not in release Not in release — —
golang-1.6 Not in release Not in release Not in release — —
golang-1.8 Not in release Not in release Not in release — Needs evaluation
golang-1.9 Not in release Not in release Not in release — Needs evaluation
golang-1.10 Not in release Not in release Not in release — Needs evaluation
golang-1.13 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.14 Not in release Not in release Not in release Needs evaluation —
golang-1.16 Not in release Not in release Not in release Needs evaluation Needs evaluation
golang-1.17 Not in release Not in release Needs evaluation — —
golang-1.18 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.20 Not in release Not in release Needs evaluation Needs evaluation —
golang-1.21 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.22 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.23 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.24 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.25 Needs evaluation Not in release Not in release — —
golang-1.26 Needs evaluation Not in release Not in release — —
golang-1.27 Not in release Not in release Not in release — —
Show all 26 packages Show less packages

CVE-2026-78663

Medium priority
Needs evaluation

[Unknown description]

26 affected packages

golang-golang-x-net, google-guest-agent, google-osconfig-agent, containerd, golang-golang-x-net-dev...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-golang-x-net Needs evaluation Needs evaluation Needs evaluation — —
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
google-osconfig-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
containerd Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
golang-golang-x-net-dev Not in release Not in release Not in release Needs evaluation Needs evaluation
adsys Needs evaluation Needs evaluation Needs evaluation Needs evaluation —
juju-core Not in release Not in release Not in release — —
lxd Not in release Not in release Not in release Needs evaluation Needs evaluation
golang Not in release Not in release Not in release — —
golang-1.6 Not in release Not in release Not in release — —
golang-1.8 Not in release Not in release Not in release — Needs evaluation
golang-1.9 Not in release Not in release Not in release — Needs evaluation
golang-1.10 Not in release Not in release Not in release — Needs evaluation
golang-1.13 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.14 Not in release Not in release Not in release Needs evaluation —
golang-1.16 Not in release Not in release Not in release Needs evaluation Needs evaluation
golang-1.17 Not in release Not in release Needs evaluation — —
golang-1.18 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.20 Not in release Not in release Needs evaluation Needs evaluation —
golang-1.21 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.22 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.23 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.24 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.25 Needs evaluation Not in release Not in release — —
golang-1.26 Needs evaluation Not in release Not in release — —
golang-1.27 Not in release Not in release Not in release — —
Show all 26 packages Show less packages

CVE-2026-78660

Medium priority
Needs evaluation

[Unknown description]

26 affected packages

golang-golang-x-net, google-guest-agent, google-osconfig-agent, containerd, golang-golang-x-net-dev...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-golang-x-net Needs evaluation Needs evaluation Needs evaluation — —
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
google-osconfig-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
containerd Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
golang-golang-x-net-dev Not in release Not in release Not in release Needs evaluation Needs evaluation
adsys Needs evaluation Needs evaluation Needs evaluation Needs evaluation —
juju-core Not in release Not in release Not in release — —
lxd Not in release Not in release Not in release Needs evaluation Needs evaluation
golang Not in release Not in release Not in release — —
golang-1.6 Not in release Not in release Not in release — —
golang-1.8 Not in release Not in release Not in release — Needs evaluation
golang-1.9 Not in release Not in release Not in release — Needs evaluation
golang-1.10 Not in release Not in release Not in release — Needs evaluation
golang-1.13 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.14 Not in release Not in release Not in release Needs evaluation —
golang-1.16 Not in release Not in release Not in release Needs evaluation Needs evaluation
golang-1.17 Not in release Not in release Needs evaluation — —
golang-1.18 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.20 Not in release Not in release Needs evaluation Needs evaluation —
golang-1.21 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.22 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.23 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.24 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.25 Needs evaluation Not in release Not in release — —
golang-1.26 Needs evaluation Not in release Not in release — —
golang-1.27 Not in release Not in release Not in release — —
Show all 26 packages Show less packages

CVE-2026-78659

Medium priority
Needs evaluation

[Unknown description]

26 affected packages

golang-golang-x-net, google-guest-agent, google-osconfig-agent, containerd, golang-golang-x-net-dev...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-golang-x-net Needs evaluation Needs evaluation Needs evaluation — —
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
google-osconfig-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
containerd Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
golang-golang-x-net-dev Not in release Not in release Not in release Needs evaluation Needs evaluation
adsys Needs evaluation Needs evaluation Needs evaluation Needs evaluation —
juju-core Not in release Not in release Not in release — —
lxd Not in release Not in release Not in release Needs evaluation Needs evaluation
golang Not in release Not in release Not in release — —
golang-1.6 Not in release Not in release Not in release — —
golang-1.8 Not in release Not in release Not in release — Needs evaluation
golang-1.9 Not in release Not in release Not in release — Needs evaluation
golang-1.10 Not in release Not in release Not in release — Needs evaluation
golang-1.13 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.14 Not in release Not in release Not in release Needs evaluation —
golang-1.16 Not in release Not in release Not in release Needs evaluation Needs evaluation
golang-1.17 Not in release Not in release Needs evaluation — —
golang-1.18 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.20 Not in release Not in release Needs evaluation Needs evaluation —
golang-1.21 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.22 Not in release Needs evaluation Needs evaluation Needs evaluation —
golang-1.23 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.24 Needs evaluation Needs evaluation Needs evaluation — —
golang-1.25 Needs evaluation Not in release Not in release — —
golang-1.26 Needs evaluation Not in release Not in release — —
golang-1.27 Not in release Not in release Not in release — —
Show all 26 packages Show less packages

CVE-2026-84304

Medium priority
Needs evaluation

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume...

3 affected packages

golang-google-grpc, google-guest-agent, grpc

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-google-grpc Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
grpc Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-84303

Medium priority
Needs evaluation

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata...

3 affected packages

golang-google-grpc, google-guest-agent, grpc

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-google-grpc Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
grpc Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-56854

Medium priority
Needs evaluation

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions...

4 affected packages

golang-go.crypto, snapd, lxd, google-guest-agent

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-go.crypto Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
snapd Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
lxd Not in release Not in release Not in release Not affected Needs evaluation
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-39824

Medium priority
Needs evaluation

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.

2 affected packages

golang-golang-x-sys, google-guest-agent

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-golang-x-sys Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-39821

High priority

Some fixes available 6 of 65

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This...

27 affected packages

golang-golang-x-net, google-guest-agent, google-osconfig-agent, containerd, adsys...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-golang-x-net Vulnerable Vulnerable Fixed Not in release Not in release
google-guest-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
google-osconfig-agent Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
containerd Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
adsys Needs evaluation Needs evaluation Needs evaluation Needs evaluation —
juju-core — — — — —
lxd — — — Needs evaluation Needs evaluation
golang Not in release Not in release Not in release Not in release Not in release
golang-1.6 Not in release Not in release Not in release Not in release Not in release
golang-1.8 Not in release Not in release Not in release Not in release Needs evaluation
golang-1.9 Not in release Not in release Not in release Not in release Needs evaluation
golang-1.10 Not in release Not in release Not in release Not in release Needs evaluation
golang-1.13 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.14 Not in release Not in release Not in release Needs evaluation Not in release
golang-1.16 Not in release Not in release Not in release Needs evaluation Needs evaluation
golang-1.17 Not in release Not in release Needs evaluation Not in release Not in release
golang-1.18 Not in release Not in release Fixed Needs evaluation Needs evaluation
golang-1.19 Not in release Not in release Not in release Not in release Not in release
golang-1.20 Not in release Not in release Needs evaluation Needs evaluation Not in release
golang-1.21 Not in release Needs evaluation Fixed Needs evaluation Not in release
golang-1.22 Not in release Needs evaluation Needs evaluation Needs evaluation Not in release
golang-1.23 Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
golang-1.24 Needs evaluation Needs evaluation Fixed Not in release Not in release
golang-1.25 Needs evaluation Not in release Not in release Not in release Not in release
golang-1.26 Needs evaluation Not in release Not in release Not in release Not in release
golang-1.27 Not in release Not in release Not in release Not in release Not in release
golang-golang-x-net-dev Not in release Not in release Not in release Fixed Fixed
Show all 27 packages Show less packages