{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Go toolchain cmd/go on Chainguard: fixes",
 "home_page_url": "https://patchwire.jonathanross.dev/products/go-toolchain--cmd-go/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/go-toolchain--cmd-go/chainguard.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-94447/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-94447/",
   "title": "CVE-2026-94447 · Go toolchain cmd/go · fixed in Chainguard (calico-apiserver-3.30 0 and 117 more)",
   "content_text": "Fixed versions: calico-apiserver-3.30 0, calico-apiserver-3.31 0, calico-apiserver-3.32 0, calico-apiserver-fips-3.30 0, calico-apiserver-fips-3.31 0, calico-apiserver-fips-3.32 0, calico-app-policy-3.30 0, calico-app-policy-3.31 0, calico-app-policy-3.32 0, calico-app-policy-fips-3.30 0, calico-app-policy-fips-3.31 0, calico-app-policy-fips-3.32 0, calico-cni-3.30 0, calico-cni-3.31 0, calico-cni-3.32 0, calico-cni-fips-3.30 0, calico-cni-fips-3.31 0, calico-cni-fips-3.32 0, calico-felix-3.30 0, calico-felix-3.31 0, calico-felix-3.32 0, calico-felix-fips-3.30 0, calico-felix-fips-3.31 0, calico-felix-fips-3.32 0, calico-goldmane-3.30 0, calico-goldmane-3.31 0, calico-goldmane-3.32 0, calico-goldmane-fips-3.30 0, calico-goldmane-fips-3.31 0, calico-goldmane-fips-3.32 0, calico-key-cert-provisioner-3.30 0, calico-key-cert-provisioner-3.31 0, calico-key-cert-provisioner-3.32 0, calico-key-cert-provisioner-fips-3.30 0, calico-key-cert-provisioner-fips-3.31 0, calico-key-cert-provisioner-fips-3.32 0, calico-kube-controllers-3.30 0, calico-kube-controllers-3.31 0, calico-kube-controllers-3.32 0, calico-kube-controllers-fips-3.30 0, calico-kube-controllers-fips-3.31 0, calico-kube-controllers-fips-3.32 0, calico-node-3.30 0, calico-node-3.31 0, calico-node-3.32 0, calico-node-fips-3.30 0, calico-node-fips-3.31 0, calico-node-fips-3.32 0, calico-pod2daemon-3.30 0, calico-pod2daemon-3.31 0, calico-pod2daemon-3.32 0, calico-pod2daemon-fips-3.30 0, calico-pod2daemon-fips-3.31 0, calico-pod2daemon-fips-3.32 0, calico-typha-client-3.30 0, calico-typha-client-3.31 0, calico-typha-client-3.32 0, calico-typha-client-fips-3.30 0, calico-typha-client-fips-3.31 0, calico-typha-client-fips-3.32 0, calico-typhad-3.30 0, calico-typhad-3.31 0, calico-typhad-3.32 0, calico-typhad-fips-3.30 0, calico-typhad-fips-3.31 0, calico-typhad-fips-3.32 0, calico-whisker-backend-3.30 0, calico-whisker-backend-3.31 0, calico-whisker-backend-3.32 0, calico-whisker-backend-fips-3.30 0, calico-whisker-backend-fips-3.31 0, calico-whisker-backend-fips-3.32 0, calicoctl-3.30 0, calicoctl-3.31 0, calicoctl-3.32 0, calicoctl-fips-3.30 0, calicoctl-fips-3.31 0, calicoctl-fips-3.32 0, commercial-gitlab-rails-ee-fips-19.1 19.1.8-r0, commercial-nginx-ingress 5.7.0-r0, datadog-agent-7.77-fakeintake 0, datadog-agent-7.77-serverless-init 0, datadog-cluster-agent-7.77 0, gitlab-rails-ce-18.11 0, gitlab-rails-ce-18.8 0, gitlab-rails-ce-18.9 0, gitlab-rails-ce-19.0 0, gitlab-rails-ce-19.1 0, gitlab-rails-ce-fips-18.8 0, go-1.25 0, go-1.25-asm 0, go-1.25-cover 0, go-fips-1.25 0, go-fips-md5-1.25 0, go-msft-1.25 0, go-openssl-1.25 0, go-openssl-1.26 0, go-openssl-1.26 1.26.10-r0, go-openssl-1.26-doc 1.26.10-r0, go-slim-1.25 0, howdy-go 0, nemo 2.7.3-r36, nemo-gym 0.5.0_rc0_git20260729-r1, nemo-rl-cuda-13.0 0.7.0-r5, nemo-rl-cuda-13.0-automodel 0.7.0-r5, nemo-rl-cuda-13.0-mcore 0.7.0-r5, nemo-rl-cuda-13.0-mooncake 0, nemo-rl-cuda-13.0-sglang 0.7.0-r5, nemo-rl-cuda-13.0-vllm 0.7.0-r5, nvidia-nsight-compute-12.8 2025.1.1.2-r10, nvidia-nsight-compute-12.9 2025.2.1.3-r8, nvidia-nsight-compute-13.0 2025.3.1.4-r1, nvidia-nsight-compute-13.1 2025.4.1.2-r3, nvidia-nsight-compute-13.2 2026.1.1.2-r6, nvidia-nsight-compute-13.3 2026.2.1.5-r3, nvidia-nsight-compute-13.4 2026.3.1.2-r1, scanner-test-golang-vulnerability-fixed 0, scanner-test-golang-vulnerability-unfixed 0.",
   "date_published": "2026-10-08T22:53:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-94444/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-94444/",
   "title": "CVE-2026-94444 · Go toolchain cmd/go · fixed in Chainguard (calico-apiserver-3.30 0 and 117 more)",
   "content_text": "Fixed versions: calico-apiserver-3.30 0, calico-apiserver-3.31 0, calico-apiserver-3.32 0, calico-apiserver-fips-3.30 0, calico-apiserver-fips-3.31 0, calico-apiserver-fips-3.32 0, calico-app-policy-3.30 0, calico-app-policy-3.31 0, calico-app-policy-3.32 0, calico-app-policy-fips-3.30 0, calico-app-policy-fips-3.31 0, calico-app-policy-fips-3.32 0, calico-cni-3.30 0, calico-cni-3.31 0, calico-cni-3.32 0, calico-cni-fips-3.30 0, calico-cni-fips-3.31 0, calico-cni-fips-3.32 0, calico-felix-3.30 0, calico-felix-3.31 0, calico-felix-3.32 0, calico-felix-fips-3.30 0, calico-felix-fips-3.31 0, calico-felix-fips-3.32 0, calico-goldmane-3.30 0, calico-goldmane-3.31 0, calico-goldmane-3.32 0, calico-goldmane-fips-3.30 0, calico-goldmane-fips-3.31 0, calico-goldmane-fips-3.32 0, calico-key-cert-provisioner-3.30 0, calico-key-cert-provisioner-3.31 0, calico-key-cert-provisioner-3.32 0, calico-key-cert-provisioner-fips-3.30 0, calico-key-cert-provisioner-fips-3.31 0, calico-key-cert-provisioner-fips-3.32 0, calico-kube-controllers-3.30 0, calico-kube-controllers-3.31 0, calico-kube-controllers-3.32 0, calico-kube-controllers-fips-3.30 0, calico-kube-controllers-fips-3.31 0, calico-kube-controllers-fips-3.32 0, calico-node-3.30 0, calico-node-3.31 0, calico-node-3.32 0, calico-node-fips-3.30 0, calico-node-fips-3.31 0, calico-node-fips-3.32 0, calico-pod2daemon-3.30 0, calico-pod2daemon-3.31 0, calico-pod2daemon-3.32 0, calico-pod2daemon-fips-3.30 0, calico-pod2daemon-fips-3.31 0, calico-pod2daemon-fips-3.32 0, calico-typha-client-3.30 0, calico-typha-client-3.31 0, calico-typha-client-3.32 0, calico-typha-client-fips-3.30 0, calico-typha-client-fips-3.31 0, calico-typha-client-fips-3.32 0, calico-typhad-3.30 0, calico-typhad-3.31 0, calico-typhad-3.32 0, calico-typhad-fips-3.30 0, calico-typhad-fips-3.31 0, calico-typhad-fips-3.32 0, calico-whisker-backend-3.30 0, calico-whisker-backend-3.31 0, calico-whisker-backend-3.32 0, calico-whisker-backend-fips-3.30 0, calico-whisker-backend-fips-3.31 0, calico-whisker-backend-fips-3.32 0, calicoctl-3.30 0, calicoctl-3.31 0, calicoctl-3.32 0, calicoctl-fips-3.30 0, calicoctl-fips-3.31 0, calicoctl-fips-3.32 0, commercial-gitlab-rails-ee-fips-19.1 19.1.8-r0, commercial-nginx-ingress 5.7.0-r0, datadog-agent-7.77-fakeintake 0, datadog-agent-7.77-serverless-init 0, datadog-cluster-agent-7.77 0, gitlab-rails-ce-18.11 0, gitlab-rails-ce-18.8 0, gitlab-rails-ce-18.9 0, gitlab-rails-ce-19.0 0, gitlab-rails-ce-19.1 0, gitlab-rails-ce-fips-18.8 0, go-1.25 0, go-1.25-asm 0, go-1.25-cover 0, go-fips-1.25 0, go-fips-md5-1.25 0, go-msft-1.25 0, go-openssl-1.25 0, go-openssl-1.26 0, go-openssl-1.26 1.26.10-r0, go-openssl-1.26-doc 1.26.10-r0, go-slim-1.25 0, howdy-go 0, nemo 2.7.3-r36, nemo-gym 0.5.0_rc0_git20260729-r1, nemo-rl-cuda-13.0 0.7.0-r5, nemo-rl-cuda-13.0-automodel 0.7.0-r5, nemo-rl-cuda-13.0-mcore 0.7.0-r5, nemo-rl-cuda-13.0-mooncake 0, nemo-rl-cuda-13.0-sglang 0.7.0-r5, nemo-rl-cuda-13.0-vllm 0.7.0-r5, nvidia-nsight-compute-12.8 2025.1.1.2-r10, nvidia-nsight-compute-12.9 2025.2.1.3-r8, nvidia-nsight-compute-13.0 2025.3.1.4-r1, nvidia-nsight-compute-13.1 2025.4.1.2-r3, nvidia-nsight-compute-13.2 2026.1.1.2-r6, nvidia-nsight-compute-13.3 2026.2.1.5-r3, nvidia-nsight-compute-13.4 2026.3.1.2-r1, scanner-test-golang-vulnerability-fixed 0, scanner-test-golang-vulnerability-unfixed 0.",
   "date_published": "2026-10-08T22:53:57Z"
  }
 ]
}