go1.26 (SUSE:Linux Enterprise Server 16.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 16.0 package go1.26, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2026-42504 — CVSS 7.5 (high): Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
• CVE-2026-27145 — CVSS 6.5 (medium): (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This…
• CVE-2026-42507 — CVSS 5.3 (medium): When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to…