# CVE-2026-39823: Bypass of meta content URL escaping causes XSS in html/template

CVE-2026-39823 is fixed in 71 products on 2 platforms, first by Go Programming Language 1.26.3, released May 7, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-39823
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0031
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 7, 2026
- Weakness: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39823

## Description

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Go Programming Language | 1.26.3 | [Go Programming Language 1.26.3](https://patchblox.com/security/data/fix/windows-app/golang.go-1.26.3.md) | May 7, 2026 |
| Linux | amazon-cloudwatch-agent amzn 2023 | 1.300066.2-2.amzn2023 | [ALAS2023-2026-1747](https://patchblox.com/security/data/fix/linux/alas2023-2026-1747.md) | May 25, 2026 |
| Linux | amazon-ecr-credential-helper amzn 2023 | 0.12.0-3.amzn2023 | [ALAS2023-2026-1738](https://patchblox.com/security/data/fix/linux/alas2023-2026-1738.md) | May 25, 2026 |
| Linux | captree amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | captree-debuginfo amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | cni-plugins amzn 2023 | 1.7.1-1.amzn2023.0.6 | [ALAS2023-2026-1723](https://patchblox.com/security/data/fix/linux/alas2023-2026-1723.md) | May 25, 2026 |
| Linux | cni-plugins-debuginfo amzn 2023 | 1.7.1-1.amzn2023.0.6 | [ALAS2023-2026-1723](https://patchblox.com/security/data/fix/linux/alas2023-2026-1723.md) | May 25, 2026 |
| Linux | cni-plugins-debugsource amzn 2023 | 1.7.1-1.amzn2023.0.6 | [ALAS2023-2026-1723](https://patchblox.com/security/data/fix/linux/alas2023-2026-1723.md) | May 25, 2026 |
| Linux | compat-golang-github-cpuguy83-md2man-2-devel amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | containerd amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-debuginfo amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-debugsource amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-stress amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-stress-debuginfo amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | credentials-fetcher amzn 2023 | 2.0.1-1.amzn2023.0.5 | [ALAS2023-2026-1744](https://patchblox.com/security/data/fix/linux/alas2023-2026-1744.md) | May 25, 2026 |
| Linux | delve RHEL 8 | 0:1.25.2-1.module+el8.10.0+23746+9db33b5e | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | delve almalinux 8 | 1.25.2-1.module_el8.10.0+4074+24330916 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | delve ol 8 | 0:1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | delve rocky 8 | 0:1.25.2-1.module+el8.10.0+40035+ee0a7047 | [RLSA-2026:22112](https://patchblox.com/security/data/fix/linux/rlsa-2026-22112.md) | Aug 26, 2026 |
| Linux | docker amzn 2023 | 25.0.14-1.amzn2023.0.6 | [ALAS2023-2026-1736](https://patchblox.com/security/data/fix/linux/alas2023-2026-1736.md) | May 25, 2026 |
| Linux | docker-debuginfo amzn 2023 | 25.0.14-1.amzn2023.0.6 | [ALAS2023-2026-1736](https://patchblox.com/security/data/fix/linux/alas2023-2026-1736.md) | May 25, 2026 |
| Linux | docker-debugsource amzn 2023 | 25.0.14-1.amzn2023.0.6 | [ALAS2023-2026-1736](https://patchblox.com/security/data/fix/linux/alas2023-2026-1736.md) | May 25, 2026 |
| Linux | ecs-init amzn 2023 | 1.103.2-1.amzn2023 | [ALAS2023-2026-1771](https://patchblox.com/security/data/fix/linux/alas2023-2026-1771.md) | May 25, 2026 |
| Linux | git-lfs amzn 2023 | 3.7.1-80.amzn2023 | [ALAS2023-2026-1722](https://patchblox.com/security/data/fix/linux/alas2023-2026-1722.md) | May 25, 2026 |
| Linux | git-lfs-debuginfo amzn 2023 | 3.7.1-80.amzn2023 | [ALAS2023-2026-1722](https://patchblox.com/security/data/fix/linux/alas2023-2026-1722.md) | May 25, 2026 |
| Linux | git-lfs-debugsource amzn 2023 | 3.7.1-80.amzn2023 | [ALAS2023-2026-1722](https://patchblox.com/security/data/fix/linux/alas2023-2026-1722.md) | May 25, 2026 |
| Linux | go-toolset RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | go-toolset RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | go-toolset almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | go-toolset almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | go-toolset ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | go-toolset ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | go-toolset ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | go1.25-openssl opensuse-leap 16.0 | 1.25.12-160000.1.1 | [OPENSUSE-SU-2026:21319-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21319-1.md) | Jul 13, 2026 |
| Linux | go1.25-openssl sles 16.0 | 1.25.12-160000.1.1 | [SUSE-SU-2026:22638-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22638-1.md) | Jul 13, 2026 |
| Linux | go1.26-openssl opensuse-leap 16.0 | 1.26.4-160000.1.1 | [OPENSUSE-SU-2026:21254-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21254-1.md) | Jul 7, 2026 |
| Linux | go1.26-openssl sles 16.0 | 1.26.4-160000.1.1 | [SUSE-SU-2026:22572-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22572-1.md) | Jul 7, 2026 |
| Linux | golang RHEL 10 | 1.26.5-1.el10_0 | [RHSA-2026:49702](https://patchblox.com/security/data/fix/linux/rhsa-2026-49702.md) | May 27, 2026 |
| Linux | golang RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang rocky 10 | 0:1.26.3-4.el10_2 | [RLSA-2026:22120](https://patchblox.com/security/data/fix/linux/rlsa-2026-22120.md) | Aug 26, 2026 |
| Linux | golang rocky 8 | 0:1.25.10-1.module+el8.10.0+40200+0fd0f175 | [RLSA-2026:22112](https://patchblox.com/security/data/fix/linux/rlsa-2026-22112.md) | Aug 26, 2026 |
| Linux | golang rocky 9 | 0:1.26.3-1.el9_8 | [RLSA-2026:22121](https://patchblox.com/security/data/fix/linux/rlsa-2026-22121.md) | Aug 26, 2026 |
| Linux | golang-1.26 Debian 14 | 1.26.3-1 | [DEBIAN-CVE-2026-39823](https://patchblox.com/security/data/fix/linux/debian-cve-2026-39823.md) | May 27, 2026 |
| Linux | golang-bin RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-bin RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-bin almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-bin almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-bin amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-bin ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-bin ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-bin ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-docs RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-docs RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-docs almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-docs almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-docs amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-docs ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-docs ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-docs ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-github-burntsushi-toml amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-debuginfo amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-debugsource amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-devel amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test-debuginfo amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test-debugsource amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test-devel amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man-debuginfo amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man-debugsource amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man-devel amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-misc RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-misc RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-misc almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-misc almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-misc amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-misc ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-misc ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-misc ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-race RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-race RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-race almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-race almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-race ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-race ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-race ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-shared amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-src RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-src RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-src almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-src almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-src amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-src ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-src ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-src ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-tests RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-tests RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-tests almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-tests almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-tests amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-tests ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-tests ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-tests ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golist amzn 2023 | 0.10.4-12.amzn2023.0.9 | [ALAS2023-2026-1742](https://patchblox.com/security/data/fix/linux/alas2023-2026-1742.md) | May 25, 2026 |
| Linux | golist-debuginfo amzn 2023 | 0.10.4-12.amzn2023.0.9 | [ALAS2023-2026-1742](https://patchblox.com/security/data/fix/linux/alas2023-2026-1742.md) | May 25, 2026 |
| Linux | golist-debugsource amzn 2023 | 0.10.4-12.amzn2023.0.9 | [ALAS2023-2026-1742](https://patchblox.com/security/data/fix/linux/alas2023-2026-1742.md) | May 25, 2026 |
| Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 |
| Linux | libcap amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | libcap-debuginfo amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | libcap-debugsource amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | libcap-devel amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | libcap-static amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | nerdctl amzn 2023 | 2.2.2-1.amzn2023.0.2 | [ALAS2023-2026-1735](https://patchblox.com/security/data/fix/linux/alas2023-2026-1735.md) | May 25, 2026 |
| Linux | oci-add-hooks amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.11 | [ALAS2023-2026-1739](https://patchblox.com/security/data/fix/linux/alas2023-2026-1739.md) | May 25, 2026 |
| Linux | oci-add-hooks-debuginfo amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.11 | [ALAS2023-2026-1739](https://patchblox.com/security/data/fix/linux/alas2023-2026-1739.md) | May 25, 2026 |
| Linux | oci-add-hooks-debugsource amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.11 | [ALAS2023-2026-1739](https://patchblox.com/security/data/fix/linux/alas2023-2026-1739.md) | May 25, 2026 |
| Linux | rclone amzn 2023 | 1.73.5-76.amzn2023 | [ALAS2023-2026-1717](https://patchblox.com/security/data/fix/linux/alas2023-2026-1717.md) | May 25, 2026 |
| Linux | rclone-debuginfo amzn 2023 | 1.73.5-76.amzn2023 | [ALAS2023-2026-1717](https://patchblox.com/security/data/fix/linux/alas2023-2026-1717.md) | May 25, 2026 |
| Linux | rclone-debugsource amzn 2023 | 1.73.5-76.amzn2023 | [ALAS2023-2026-1717](https://patchblox.com/security/data/fix/linux/alas2023-2026-1717.md) | May 25, 2026 |
| Linux | runc amzn 2023 | 1.3.4-5.amzn2023.0.2 | [ALAS2023-2026-1715](https://patchblox.com/security/data/fix/linux/alas2023-2026-1715.md) | May 25, 2026 |
| Linux | runc-debuginfo amzn 2023 | 1.3.4-5.amzn2023.0.2 | [ALAS2023-2026-1715](https://patchblox.com/security/data/fix/linux/alas2023-2026-1715.md) | May 25, 2026 |
| Linux | runc-debugsource amzn 2023 | 1.3.4-5.amzn2023.0.2 | [ALAS2023-2026-1715](https://patchblox.com/security/data/fix/linux/alas2023-2026-1715.md) | May 25, 2026 |
| Linux | runfinch-finch amzn 2023 | 1.17.0-1.amzn2023.0.2 | [ALAS2023-2026-1741](https://patchblox.com/security/data/fix/linux/alas2023-2026-1741.md) | May 25, 2026 |
| Linux | soci-snapshotter amzn 2023 | 0.13.0-1.amzn2023.0.3 | [ALAS2023-2026-1740](https://patchblox.com/security/data/fix/linux/alas2023-2026-1740.md) | May 25, 2026 |
| Linux | yq amzn 2023 | 4.47.1-13.amzn2023 | [ALAS2023-2026-1716](https://patchblox.com/security/data/fix/linux/alas2023-2026-1716.md) | May 25, 2026 |
| Linux | yq-debuginfo amzn 2023 | 4.47.1-13.amzn2023 | [ALAS2023-2026-1716](https://patchblox.com/security/data/fix/linux/alas2023-2026-1716.md) | May 25, 2026 |
| Linux | yq-debugsource amzn 2023 | 4.47.1-13.amzn2023 | [ALAS2023-2026-1716](https://patchblox.com/security/data/fix/linux/alas2023-2026-1716.md) | May 25, 2026 |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.