{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Go ist eine quelloffene Programmiersprache.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen Denial of Service zu verursachen, ein Cross Site Scripting durchzuführen, Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-2850 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2850.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-2850 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2850"
    }, {
      "category" : "external",
      "summary" : "OSS Security Mailing list vom 2026-08-13",
      "url" : "https://seclists.org/oss-sec/2026/q3/487"
    }, {
      "category" : "external",
      "summary" : "Go Vulnerability Report vom 2026-08-13",
      "url" : "https://pkg.go.dev/vuln/GO-2026-5972"
    }, {
      "category" : "external",
      "summary" : "Go Vulnerability Report vom 2026-08-13",
      "url" : "https://pkg.go.dev/vuln/GO-2026-6088"
    }, {
      "category" : "external",
      "summary" : "Go Vulnerability Report vom 2026-08-13",
      "url" : "https://pkg.go.dev/vuln/GO-2026-6089"
    }, {
      "category" : "external",
      "summary" : "Go Vulnerability Report vom 2026-08-13",
      "url" : "https://pkg.go.dev/vuln/GO-2026-6090"
    }, {
      "category" : "external",
      "summary" : "Go Vulnerability Report vom 2026-08-13",
      "url" : "https://pkg.go.dev/vuln/GO-2026-6091"
    }, {
      "category" : "external",
      "summary" : "Go Vulnerability Report vom 2026-08-13",
      "url" : "https://pkg.go.dev/vuln/GO-2026-6179"
    }, {
      "category" : "external",
      "summary" : "Go Vulnerability Report vom 2026-08-13",
      "url" : "https://pkg.go.dev/vuln/GO-2026-6180"
    }, {
      "category" : "external",
      "summary" : "Go Vulnerability Report vom 2026-08-13",
      "url" : "https://pkg.go.dev/vuln/GO-2026-6218"
    }, {
      "category" : "external",
      "summary" : "openSUSE Security Update OPENSUSE-SU-2026:11517-1 vom 2026-08-16",
      "url" : "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLJUFMJN2M3YEPFPNXPF4GTNYPWSPD3E/"
    }, {
      "category" : "external",
      "summary" : "openSUSE Security Update OPENSUSE-SU-2026:11516-1 vom 2026-08-16",
      "url" : "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CQT5XHRMVVQQJMPZ4VMFVOHKMW2F4VL2/"
    }, {
      "category" : "external",
      "summary" : "SUSE Security Update SUSE-SU-2026:3640-1 vom 2026-08-18",
      "url" : "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028390.html"
    }, {
      "category" : "external",
      "summary" : "Red Hat Security Advisory RHSA-2026:56223 vom 2026-08-18",
      "url" : "https://access.redhat.com/errata/RHSA-2026:56223"
    }, {
      "category" : "external",
      "summary" : "Red Hat Security Advisory RHSA-2026:56143 vom 2026-08-18",
      "url" : "https://access.redhat.com/errata/RHSA-2026:56143"
    }, {
      "category" : "external",
      "summary" : "SUSE Security Update SUSE-SU-2026:3641-1 vom 2026-08-18",
      "url" : "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028389.html"
    }, {
      "category" : "external",
      "summary" : "Red Hat Security Advisory RHSA-2026:54580 vom 2026-08-18",
      "url" : "https://access.redhat.com/errata/RHSA-2026:54580"
    }, {
      "category" : "external",
      "summary" : "openSUSE Security Update OPENSUSE-SU-2026:21593-1 vom 2026-08-21",
      "url" : "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UHHCXFWGC6CBH4D6OH2F64XPDLP3QFX2/"
    }, {
      "category" : "external",
      "summary" : "openSUSE Security Update OPENSUSE-SU-2026:21592-1 vom 2026-08-21",
      "url" : "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/53ECMK7DHSIH5JIRF6WZ4NUGYR34BBHA/"
    }, {
      "category" : "external",
      "summary" : "Red Hat Security Advisory RHSA-2026:57541 vom 2026-08-20",
      "url" : "https://access.redhat.com/errata/RHSA-2026:57541"
    }, {
      "category" : "external",
      "summary" : "Red Hat Security Advisory RHSA-2026:57649 vom 2026-08-20",
      "url" : "https://access.redhat.com/errata/RHSA-2026:57649"
    }, {
      "category" : "external",
      "summary" : "openSUSE Security Update OPENSUSE-SU-2026:11536-1 vom 2026-08-21",
      "url" : "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OVQCMGW5WP26AF3B3LHZVLGSUZ7WBCWJ/"
    }, {
      "category" : "external",
      "summary" : "Red Hat Security Advisory RHSA-2026:59546 vom 2026-08-25",
      "url" : "https://access.redhat.com/errata/RHSA-2026:59546"
    } ],
    "source_lang" : "en-US",
    "title" : "Golang Go: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-08-25T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-08-26T09:07:42.495+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-2850",
      "initial_release_date" : "2026-08-13T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-08-13T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-08-16T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Neue Updates von openSUSE aufgenommen"
      }, {
        "date" : "2026-08-18T22:00:00.000+00:00",
        "number" : "3",
        "summary" : "Neue Updates von SUSE und Red Hat aufgenommen"
      }, {
        "date" : "2026-08-20T22:00:00.000+00:00",
        "number" : "4",
        "summary" : "Neue Updates von openSUSE und Red Hat aufgenommen"
      }, {
        "date" : "2026-08-23T22:00:00.000+00:00",
        "number" : "5",
        "summary" : "Neue Updates von openSUSE aufgenommen"
      }, {
        "date" : "2026-08-25T22:00:00.000+00:00",
        "number" : "6",
        "summary" : "Neue Updates von Red Hat aufgenommen"
      } ],
      "status" : "final",
      "version" : "6"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<1.26.6",
          "product" : {
            "name" : "Golang Go <1.26.6",
            "product_id" : "T058143"
          }
        }, {
          "category" : "product_version",
          "name" : "1.26.6",
          "product" : {
            "name" : "Golang Go 1.26.6",
            "product_id" : "T058143-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:golang:go:1.26.6"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<1.25.13",
          "product" : {
            "name" : "Golang Go <1.25.13",
            "product_id" : "T058144"
          }
        }, {
          "category" : "product_version",
          "name" : "1.25.13",
          "product" : {
            "name" : "Golang Go 1.25.13",
            "product_id" : "T058144-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:golang:go:1.25.13"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Go"
      } ],
      "category" : "vendor",
      "name" : "Golang"
    }, {
      "branches" : [ {
        "category" : "product_name",
        "name" : "Red Hat Enterprise Linux",
        "product" : {
          "name" : "Red Hat Enterprise Linux",
          "product_id" : "67646",
          "product_identification_helper" : {
            "cpe" : "cpe:/o:redhat:enterprise_linux:-"
          }
        }
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "Container Platform",
          "product" : {
            "name" : "Red Hat OpenShift Container Platform",
            "product_id" : "T040130",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redhat:openshift:container_platform"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "OpenShift"
      } ],
      "category" : "vendor",
      "name" : "Red Hat"
    }, {
      "branches" : [ {
        "category" : "product_name",
        "name" : "SUSE Linux",
        "product" : {
          "name" : "SUSE Linux",
          "product_id" : "T054646",
          "product_identification_helper" : {
            "cpe" : "cpe:/o:suse:suse_linux:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "SUSE openSUSE",
        "product" : {
          "name" : "SUSE openSUSE",
          "product_id" : "T055946",
          "product_identification_helper" : {
            "cpe" : "cpe:/o:suse:opensuse:-"
          }
        }
      } ],
      "category" : "vendor",
      "name" : "SUSE"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-33818",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-33818"
  }, {
    "cve" : "CVE-2026-39821",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-39821"
  }, {
    "cve" : "CVE-2026-46600",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-46600"
  }, {
    "cve" : "CVE-2026-56853",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-56853"
  }, {
    "cve" : "CVE-2026-56858",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-56858"
  }, {
    "cve" : "CVE-2026-56859",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-56859"
  }, {
    "cve" : "CVE-2026-56860",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-56860"
  }, {
    "cve" : "CVE-2026-56862",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-56862"
  }, {
    "cve" : "CVE-2026-56864",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-56864"
  }, {
    "cve" : "CVE-2026-56865",
    "product_status" : {
      "known_affected" : [ "T040130", "67646", "T055946", "T058143", "T054646", "T058144" ]
    },
    "release_date" : "2026-08-13T22:00:00.000+00:00",
    "title" : "CVE-2026-56865"
  } ]
}