Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-94444

Fixed in a distro release EPSS <1%CVSS 7.8

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and construct its entry in the GOMODCACHE such that it can be verified by the toolchain.

Published 2026-10-08 · CVE record · OSV

Products: Go toolchain cmd/go

Fixed upstream

EcosystemPackageFixed in
Gotoolchain1.26.9
Gotoolchain1.27.2

Distro releases

ReleasePackageFixed in
Amazon Linux 2golang1.26.9-1.amzn2.0.1
Amazon Linux 2golang-bin1.26.9-1.amzn2.0.1
Amazon Linux 2golang-docs1.26.9-1.amzn2.0.1
Amazon Linux 2golang-misc1.26.9-1.amzn2.0.1
Amazon Linux 2golang-shared1.26.9-1.amzn2.0.1
Amazon Linux 2golang-src1.26.9-1.amzn2.0.1
Amazon Linux 2golang-tests1.26.9-1.amzn2.0.1
Amazon Linux 2023golang1.26.9-1.amzn2023.0.1
Amazon Linux 2023golang-bin1.26.9-1.amzn2023.0.1
Amazon Linux 2023golang-docs1.26.9-1.amzn2023.0.1
Amazon Linux 2023golang-misc1.26.9-1.amzn2023.0.1
Amazon Linux 2023golang-shared1.26.9-1.amzn2023.0.1
Amazon Linux 2023golang-src1.26.9-1.amzn2023.0.1
Amazon Linux 2023golang-tests1.26.9-1.amzn2023.0.1
Chainguardcalico-apiserver-3.300
Chainguardcalico-apiserver-3.310
Chainguardcalico-apiserver-3.320
Chainguardcalico-apiserver-fips-3.300
Chainguardcalico-apiserver-fips-3.310
Chainguardcalico-apiserver-fips-3.320
Chainguardcalico-app-policy-3.300
Chainguardcalico-app-policy-3.310
Chainguardcalico-app-policy-3.320
Chainguardcalico-app-policy-fips-3.300
Chainguardcalico-app-policy-fips-3.310
Chainguardcalico-app-policy-fips-3.320
Chainguardcalico-cni-3.300
Chainguardcalico-cni-3.310
Chainguardcalico-cni-3.320
Chainguardcalico-cni-fips-3.300
Chainguardcalico-cni-fips-3.310
Chainguardcalico-cni-fips-3.320
Chainguardcalico-felix-3.300
Chainguardcalico-felix-3.310
Chainguardcalico-felix-3.320
Chainguardcalico-felix-fips-3.300
Chainguardcalico-felix-fips-3.310
Chainguardcalico-felix-fips-3.320
Chainguardcalico-goldmane-3.300
Chainguardcalico-goldmane-3.310
Chainguardcalico-goldmane-3.320
Chainguardcalico-goldmane-fips-3.300
Chainguardcalico-goldmane-fips-3.310
Chainguardcalico-goldmane-fips-3.320
Chainguardcalico-key-cert-provisioner-3.300
Chainguardcalico-key-cert-provisioner-3.310
Chainguardcalico-key-cert-provisioner-3.320
Chainguardcalico-key-cert-provisioner-fips-3.300
Chainguardcalico-key-cert-provisioner-fips-3.310
Chainguardcalico-key-cert-provisioner-fips-3.320
Chainguardcalico-kube-controllers-3.300
Chainguardcalico-kube-controllers-3.310
Chainguardcalico-kube-controllers-3.320
Chainguardcalico-kube-controllers-fips-3.300
Chainguardcalico-kube-controllers-fips-3.310
Chainguardcalico-kube-controllers-fips-3.320
Chainguardcalico-node-3.300
Chainguardcalico-node-3.310
Chainguardcalico-node-3.320
Chainguardcalico-node-fips-3.300
Chainguardcalico-node-fips-3.310
Chainguardcalico-node-fips-3.320
Chainguardcalico-pod2daemon-3.300
Chainguardcalico-pod2daemon-3.310
Chainguardcalico-pod2daemon-3.320
Chainguardcalico-pod2daemon-fips-3.300
Chainguardcalico-pod2daemon-fips-3.310
Chainguardcalico-pod2daemon-fips-3.320
Chainguardcalico-typha-client-3.300
Chainguardcalico-typha-client-3.310
Chainguardcalico-typha-client-3.320
Chainguardcalico-typha-client-fips-3.300
Chainguardcalico-typha-client-fips-3.310
Chainguardcalico-typha-client-fips-3.320
Chainguardcalico-typhad-3.300
Chainguardcalico-typhad-3.310
Chainguardcalico-typhad-3.320
Chainguardcalico-typhad-fips-3.300
Chainguardcalico-typhad-fips-3.310
Chainguardcalico-typhad-fips-3.320
Chainguardcalico-whisker-backend-3.300
Chainguardcalico-whisker-backend-3.310
Chainguardcalico-whisker-backend-3.320
Chainguardcalico-whisker-backend-fips-3.300
Chainguardcalico-whisker-backend-fips-3.310
Chainguardcalico-whisker-backend-fips-3.320
Chainguardcalicoctl-3.300
Chainguardcalicoctl-3.310
Chainguardcalicoctl-3.320
Chainguardcalicoctl-fips-3.300
Chainguardcalicoctl-fips-3.310
Chainguardcalicoctl-fips-3.320
Chainguardcommercial-gitlab-rails-ee-fips-19.119.1.8-r0
Chainguardcommercial-grafana-11.6no fix
Chainguardcommercial-grafana-12.1no fix
Chainguardcommercial-grafana-12.2no fix
Chainguardcommercial-grafana-12.3no fix
Chainguardcommercial-kyverno-1.14no fix
Chainguardcommercial-kyverno-1.15no fix
Chainguardcommercial-kyverno-1.16no fix
Chainguardcommercial-kyverno-1.17no fix
Chainguardcommercial-kyverno-1.18no fix
Chainguardcommercial-kyverno-background-controller-1.14no fix
Chainguardcommercial-kyverno-background-controller-1.15no fix
Chainguardcommercial-kyverno-background-controller-1.16no fix
Chainguardcommercial-kyverno-background-controller-1.17no fix
Chainguardcommercial-kyverno-background-controller-1.18no fix
Chainguardcommercial-kyverno-cleanup-controller-1.14no fix
Chainguardcommercial-kyverno-cleanup-controller-1.15no fix
Chainguardcommercial-kyverno-cleanup-controller-1.16no fix
Chainguardcommercial-kyverno-cleanup-controller-1.17no fix
Chainguardcommercial-kyverno-cleanup-controller-1.18no fix
Chainguardcommercial-kyverno-cli-1.18no fix
Chainguardcommercial-kyverno-readiness-checker-1.18no fix
Chainguardcommercial-kyverno-reports-controller-1.14no fix
Chainguardcommercial-kyverno-reports-controller-1.15no fix
Chainguardcommercial-kyverno-reports-controller-1.16no fix
Chainguardcommercial-kyverno-reports-controller-1.17no fix
Chainguardcommercial-kyverno-reports-controller-1.18no fix
Chainguardcommercial-kyvernopre-1.14no fix
Chainguardcommercial-kyvernopre-1.15no fix
Chainguardcommercial-kyvernopre-1.16no fix
Chainguardcommercial-kyvernopre-1.17no fix
Chainguardcommercial-kyvernopre-1.18no fix
Chainguardcommercial-nginx-ingress5.7.0-r0
Chainguarddatadog-agent-7.77no fix
Chainguarddatadog-agent-7.77-fakeintake0
Chainguarddatadog-agent-7.77-fakeintakeno fix
Chainguarddatadog-agent-7.77-fullno fix
Chainguarddatadog-agent-7.77-serverless-init0
Chainguarddatadog-agent-7.77-serverless-initno fix
Chainguarddatadog-cluster-agent-7.770
Chainguarddatadog-cluster-agent-7.77no fix
Chainguarddogstatsd-7.77no fix
Chainguardgitlab-rails-ce-18.110
Chainguardgitlab-rails-ce-18.80
Chainguardgitlab-rails-ce-18.90
Chainguardgitlab-rails-ce-19.00
Chainguardgitlab-rails-ce-19.10
Chainguardgitlab-rails-ce-fips-18.80
Chainguardgo-1.250
Chainguardgo-1.25no fix
Chainguardgo-1.25-asmno fix
Chainguardgo-1.25-asm0
Chainguardgo-1.25-cover0
Chainguardgo-1.25-coverno fix
Chainguardgo-1.25-docno fix
Chainguardgo-fips-1.25no fix
Chainguardgo-fips-1.250
Chainguardgo-fips-1.25-docno fix
Chainguardgo-fips-md5-1.250
Chainguardgo-fips-md5-1.25no fix
Chainguardgo-fips-md5-1.25-docno fix
Chainguardgo-msft-1.25no fix
Chainguardgo-msft-1.250
Chainguardgo-msft-1.25-docno fix
Chainguardgo-openssl-1.250
Chainguardgo-openssl-1.25no fix
Chainguardgo-openssl-1.25-docno fix
Chainguardgo-openssl-1.261.26.10-r0
Chainguardgo-openssl-1.260
Chainguardgo-openssl-1.26-doc1.26.10-r0
Chainguardgo-slim-1.25no fix
Chainguardgo-slim-1.250
Chainguardhowdy-go0
Chainguardk3s-1.31no fix
Chainguardk3s-multicall-1.31no fix
Chainguardk3s-static-1.31no fix
Chainguardnemo2.7.3-r36
Chainguardnemo-gym0.5.0_rc0_git20260729-r1
Chainguardnemo-rl-cuda-13.00.7.0-r5
Chainguardnemo-rl-cuda-13.0-automodel0.7.0-r5
Chainguardnemo-rl-cuda-13.0-mcore0.7.0-r5
Chainguardnemo-rl-cuda-13.0-mooncake0
Chainguardnemo-rl-cuda-13.0-sglang0.7.0-r5
Chainguardnemo-rl-cuda-13.0-vllm0.7.0-r5
Chainguardnvidia-nsight-compute-12.82025.1.1.2-r10
Chainguardnvidia-nsight-compute-12.92025.2.1.3-r8
Chainguardnvidia-nsight-compute-13.02025.3.1.4-r1
Chainguardnvidia-nsight-compute-13.12025.4.1.2-r3
Chainguardnvidia-nsight-compute-13.22026.1.1.2-r6
Chainguardnvidia-nsight-compute-13.32026.2.1.5-r3
Chainguardnvidia-nsight-compute-13.42026.3.1.2-r1
Chainguardrenovateno fix
Chainguardscanner-test-golang-vulnerability-fixed0
Chainguardscanner-test-golang-vulnerability-unfixed0
Chainguardupwind-agentno fix
Debian 12golang-1.19no fix
Debian 13golang-1.24no fix
Debian 14golang-1.261.26.9-1
Debian 14golang-1.271.27.2-1
Red Hat hummingbird 1golang1.260:1.26.9-0.1.hum1
Red Hat hummingbird 1golang1.26-bin0:1.26.9-0.1.hum1
Red Hat hummingbird 1golang1.26-docs0:1.26.9-0.1.hum1
Red Hat hummingbird 1golang1.26-misc0:1.26.9-0.1.hum1
Red Hat hummingbird 1golang1.26-src0:1.26.9-0.1.hum1
Red Hat hummingbird 1golang1.26-tests0:1.26.9-0.1.hum1
Red Hat hummingbird 1golang1.270:1.27.2-0.1.hum1
Red Hat hummingbird 1golang1.27-bin0:1.27.2-0.1.hum1
Red Hat hummingbird 1golang1.27-docs0:1.27.2-0.1.hum1
Red Hat hummingbird 1golang1.27-misc0:1.27.2-0.1.hum1
Red Hat hummingbird 1golang1.27-src0:1.27.2-0.1.hum1
Red Hat hummingbird 1golang1.27-tests0:1.27.2-0.1.hum1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSgo1.261.26.9-150000.1.33.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSgo1.26-openssl1.26.10-150000.1.21.2
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSgo1.271.27.2-150000.1.12.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSgo1.261.26.9-150000.1.33.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSgo1.26-openssl1.26.10-150000.1.21.2
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSgo1.271.27.2-150000.1.12.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSgo1.261.26.9-150000.1.33.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSgo1.26-openssl1.26.10-150000.1.21.2
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSgo1.271.27.2-150000.1.12.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSgo1.261.26.9-150000.1.33.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSgo1.26-openssl1.26.10-150000.1.21.2
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSgo1.271.27.2-150000.1.12.1
SUSE Linux Enterprise Module for Development Tools 15 SP7go1.261.26.9-150000.1.33.1
SUSE Linux Enterprise Module for Development Tools 15 SP7go1.26-openssl1.26.10-150600.13.18.1
SUSE Linux Enterprise Module for Development Tools 15 SP7go1.271.27.2-150000.1.12.1
SUSE Linux Enterprise Server 15 SP4-LTSSgo1.261.26.9-150000.1.33.1
SUSE Linux Enterprise Server 15 SP4-LTSSgo1.26-openssl1.26.10-150000.1.21.2
SUSE Linux Enterprise Server 15 SP4-LTSSgo1.271.27.2-150000.1.12.1
SUSE Linux Enterprise Server 15 SP5-LTSSgo1.261.26.9-150000.1.33.1
SUSE Linux Enterprise Server 15 SP5-LTSSgo1.26-openssl1.26.10-150000.1.21.2
SUSE Linux Enterprise Server 15 SP5-LTSSgo1.271.27.2-150000.1.12.1
SUSE Linux Enterprise Server 15 SP6-LTSSgo1.261.26.9-150000.1.33.1
SUSE Linux Enterprise Server 15 SP6-LTSSgo1.26-openssl1.26.10-150600.13.18.1
SUSE Linux Enterprise Server 15 SP6-LTSSgo1.271.27.2-150000.1.12.1
SUSE Linux Enterprise Server 16.0go1.261.26.9-160000.1.1
SUSE Linux Enterprise Server 16.0go1.271.27.2-160000.1.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4go1.261.26.9-150000.1.33.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4go1.26-openssl1.26.10-150000.1.21.2
SUSE Linux Enterprise Server for SAP Applications 15 SP4go1.271.27.2-150000.1.12.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5go1.261.26.9-150000.1.33.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5go1.26-openssl1.26.10-150000.1.21.2
SUSE Linux Enterprise Server for SAP Applications 15 SP5go1.271.27.2-150000.1.12.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6go1.261.26.9-150000.1.33.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6go1.26-openssl1.26.10-150600.13.18.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6go1.271.27.2-150000.1.12.1
SUSE Linux Enterprise Server for SAP applications 16.0go1.261.26.9-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0go1.271.27.2-160000.1.1
Ubuntu 14.04 LTSgolang-1.10no fix
Ubuntu 16.04 LTSgolang-1.10no fix
Ubuntu 16.04 LTSgolang-1.6no fix
Ubuntu 18.04 LTSgolang-1.10no fix
Ubuntu 18.04 LTSgolang-1.8no fix
Ubuntu 18.04 LTSgolang-1.9no fix
Ubuntu 20.04 LTSgolang-1.13no fix
Ubuntu 20.04 LTSgolang-1.14no fix
Ubuntu 20.04 LTSgolang-1.18no fix
Ubuntu 20.04 LTSgolang-1.20no fix
Ubuntu 20.04 LTSgolang-1.21no fix
Ubuntu 20.04 LTSgolang-1.22no fix
Ubuntu 22.04 LTSgolang-1.17no fix
Ubuntu 22.04 LTSgolang-1.18no fix
Ubuntu 22.04 LTSgolang-1.20no fix
Ubuntu 22.04 LTSgolang-1.21no fix
Ubuntu 22.04 LTSgolang-1.22no fix
Ubuntu 22.04 LTSgolang-1.23no fix
Ubuntu 22.04 LTSgolang-1.24no fix
Ubuntu 22.04 LTSgolang-1.25no fix
Ubuntu 22.04 LTSgolang-1.26no fix
Ubuntu 24.04 LTSgolang-1.21no fix
Ubuntu 24.04 LTSgolang-1.22no fix
Ubuntu 24.04 LTSgolang-1.23no fix
Ubuntu 24.04 LTSgolang-1.24no fix
Ubuntu 24.04 LTSgolang-1.25no fix
Ubuntu 24.04 LTSgolang-1.26no fix
Ubuntu 26.04 LTSgolang-1.23no fix
Ubuntu 26.04 LTSgolang-1.24no fix
Ubuntu 26.04 LTSgolang-1.25no fix
Ubuntu 26.04 LTSgolang-1.26no fix
Ubuntu 26.10golang-1.26no fix
Ubuntu 26.10golang-1.27no fix
Ubuntu Pro 16.04 LTSgolang-1.13no fix
Ubuntu Pro 16.04 LTSgolang-1.18no fix
Ubuntu Pro 18.04 LTSgolang-1.13no fix
Ubuntu Pro 18.04 LTSgolang-1.16no fix
Ubuntu Pro 18.04 LTSgolang-1.18no fix
Ubuntu Pro 20.04 LTSgolang-1.16no fix
Ubuntu Pro 22.04 LTSgolang-1.13no fix
Wolficalico-apiserver-3.310
Wolficalico-apiserver-3.320
Wolficalico-app-policy-3.310
Wolficalico-app-policy-3.320
Wolficalico-cni-3.310
Wolficalico-cni-3.320
Wolficalico-felix-3.310
Wolficalico-felix-3.320
Wolficalico-goldmane-3.310
Wolficalico-goldmane-3.320
Wolficalico-key-cert-provisioner-3.310
Wolficalico-key-cert-provisioner-3.320
Wolficalico-kube-controllers-3.310
Wolficalico-kube-controllers-3.320
Wolficalico-node-3.310
Wolficalico-node-3.320
Wolficalico-pod2daemon-3.310
Wolficalico-pod2daemon-3.320
Wolficalico-typha-client-3.310
Wolficalico-typha-client-3.320
Wolficalico-typhad-3.310
Wolficalico-typhad-3.320
Wolficalico-whisker-backend-3.310
Wolficalico-whisker-backend-3.320
Wolficalicoctl-3.310
Wolficalicoctl-3.320
Wolfidatadog-agent-7.77no fix
Wolfidatadog-agent-7.77-fakeintake0
Wolfidatadog-agent-7.77-fakeintakeno fix
Wolfidatadog-agent-7.77-fullno fix
Wolfidatadog-cluster-agent-7.770
Wolfidatadog-cluster-agent-7.77no fix
Wolfidogstatsd-7.77no fix
Wolfigo-1.25no fix
Wolfigo-1.250
Wolfigo-1.25-asmno fix
Wolfigo-1.25-asm0
Wolfigo-1.25-coverno fix
Wolfigo-1.25-cover0
Wolfigo-1.25-docno fix
Wolfihowdy-go0
Wolfirenovateno fix
openSUSE Leap 16.0go1.261.26.9-160000.1.1
openSUSE Leap 16.0go1.271.27.2-160000.1.1
openSUSE Tumbleweedgo1.261.26.9-1.1
openSUSE Tumbleweedgo1.271.27.2-1.1
openSUSE Tumbleweedrclone1.75.2-1.1