# CVE-2026-39825: ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

CVE-2026-39825 is fixed in 52 products on 2 platforms, first by Go Programming Language 1.26.3, released May 7, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-39825
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0039
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 7, 2026
- Weakness: CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39825

## Description

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Go Programming Language | 1.26.3 | [Go Programming Language 1.26.3](https://patchblox.com/security/data/fix/windows-app/golang.go-1.26.3.md) | May 7, 2026 |
| Linux | amazon-cloudwatch-agent amzn 2023 | 1.300066.2-2.amzn2023 | [ALAS2023-2026-1747](https://patchblox.com/security/data/fix/linux/alas2023-2026-1747.md) | May 25, 2026 |
| Linux | amazon-ecr-credential-helper amzn 2023 | 0.12.0-3.amzn2023 | [ALAS2023-2026-1738](https://patchblox.com/security/data/fix/linux/alas2023-2026-1738.md) | May 25, 2026 |
| Linux | compat-golang-github-cpuguy83-md2man-2-devel amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | containerd amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-debuginfo amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-debugsource amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-stress amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-stress-debuginfo amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | credentials-fetcher amzn 2023 | 2.0.1-1.amzn2023.0.5 | [ALAS2023-2026-1744](https://patchblox.com/security/data/fix/linux/alas2023-2026-1744.md) | May 25, 2026 |
| Linux | delve RHEL 8 | 0:1.25.2-1.module+el8.10.0+23746+9db33b5e | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | delve almalinux 8 | 1.25.2-1.module_el8.10.0+4074+24330916 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | delve ol 8 | 0:1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | delve rocky 8 | 0:1.25.2-1.module+el8.10.0+40035+ee0a7047 | [RLSA-2026:22112](https://patchblox.com/security/data/fix/linux/rlsa-2026-22112.md) | Aug 26, 2026 |
| Linux | docker amzn 2023 | 25.0.14-1.amzn2023.0.6 | [ALAS2023-2026-1736](https://patchblox.com/security/data/fix/linux/alas2023-2026-1736.md) | May 25, 2026 |
| Linux | docker-debuginfo amzn 2023 | 25.0.14-1.amzn2023.0.6 | [ALAS2023-2026-1736](https://patchblox.com/security/data/fix/linux/alas2023-2026-1736.md) | May 25, 2026 |
| Linux | docker-debugsource amzn 2023 | 25.0.14-1.amzn2023.0.6 | [ALAS2023-2026-1736](https://patchblox.com/security/data/fix/linux/alas2023-2026-1736.md) | May 25, 2026 |
| Linux | ecs-init amzn 2023 | 1.103.2-1.amzn2023 | [ALAS2023-2026-1771](https://patchblox.com/security/data/fix/linux/alas2023-2026-1771.md) | May 25, 2026 |
| Linux | go-toolset RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | go-toolset RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | go-toolset almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | go-toolset almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | go-toolset ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | go-toolset ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | go-toolset ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | go1.25-openssl opensuse-leap 16.0 | 1.25.12-160000.1.1 | [OPENSUSE-SU-2026:21319-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21319-1.md) | Jul 13, 2026 |
| Linux | go1.25-openssl sles 16.0 | 1.25.12-160000.1.1 | [SUSE-SU-2026:22638-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22638-1.md) | Jul 13, 2026 |
| Linux | go1.26-openssl opensuse-leap 16.0 | 1.26.4-160000.1.1 | [OPENSUSE-SU-2026:21254-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21254-1.md) | Jul 7, 2026 |
| Linux | go1.26-openssl sles 16.0 | 1.26.4-160000.1.1 | [SUSE-SU-2026:22572-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22572-1.md) | Jul 7, 2026 |
| Linux | golang RHEL 10 | 1.26.5-1.el10_0 | [RHSA-2026:49702](https://patchblox.com/security/data/fix/linux/rhsa-2026-49702.md) | May 27, 2026 |
| Linux | golang RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang rocky 10 | 0:1.26.3-4.el10_2 | [RLSA-2026:22120](https://patchblox.com/security/data/fix/linux/rlsa-2026-22120.md) | Aug 26, 2026 |
| Linux | golang rocky 8 | 0:1.25.10-1.module+el8.10.0+40200+0fd0f175 | [RLSA-2026:22112](https://patchblox.com/security/data/fix/linux/rlsa-2026-22112.md) | Aug 26, 2026 |
| Linux | golang rocky 9 | 0:1.26.3-1.el9_8 | [RLSA-2026:22121](https://patchblox.com/security/data/fix/linux/rlsa-2026-22121.md) | Aug 26, 2026 |
| Linux | golang-1.26 Debian 14 | 1.26.3-1 | [DEBIAN-CVE-2026-39825](https://patchblox.com/security/data/fix/linux/debian-cve-2026-39825.md) | May 27, 2026 |
| Linux | golang-bin RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-bin RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-bin almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-bin almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-bin amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-bin ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-bin ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-bin ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-docs RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-docs RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-docs almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-docs almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-docs amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-docs ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-docs ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-docs ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-github-burntsushi-toml amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-debuginfo amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-debugsource amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-devel amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test-debuginfo amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test-debugsource amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test-devel amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man-debuginfo amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man-debugsource amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man-devel amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-misc RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-misc RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-misc almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-misc almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-misc amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-misc ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-misc ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-misc ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-race RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-race RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-race almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-race almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-race ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-race ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-race ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-shared amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-src RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-src RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-src almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-src almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-src amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-src ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-src ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-src ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-tests RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-tests RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-tests almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-tests almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-tests amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-tests ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-tests ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-tests ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golist amzn 2023 | 0.10.4-12.amzn2023.0.9 | [ALAS2023-2026-1742](https://patchblox.com/security/data/fix/linux/alas2023-2026-1742.md) | May 25, 2026 |
| Linux | golist-debuginfo amzn 2023 | 0.10.4-12.amzn2023.0.9 | [ALAS2023-2026-1742](https://patchblox.com/security/data/fix/linux/alas2023-2026-1742.md) | May 25, 2026 |
| Linux | golist-debugsource amzn 2023 | 0.10.4-12.amzn2023.0.9 | [ALAS2023-2026-1742](https://patchblox.com/security/data/fix/linux/alas2023-2026-1742.md) | May 25, 2026 |
| Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 |
| Linux | nerdctl amzn 2023 | 2.2.2-1.amzn2023.0.2 | [ALAS2023-2026-1735](https://patchblox.com/security/data/fix/linux/alas2023-2026-1735.md) | May 25, 2026 |
| Linux | oci-add-hooks amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.11 | [ALAS2023-2026-1739](https://patchblox.com/security/data/fix/linux/alas2023-2026-1739.md) | May 25, 2026 |
| Linux | oci-add-hooks-debuginfo amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.11 | [ALAS2023-2026-1739](https://patchblox.com/security/data/fix/linux/alas2023-2026-1739.md) | May 25, 2026 |
| Linux | oci-add-hooks-debugsource amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.11 | [ALAS2023-2026-1739](https://patchblox.com/security/data/fix/linux/alas2023-2026-1739.md) | May 25, 2026 |
| Linux | runc amzn 2023 | 1.3.4-5.amzn2023.0.2 | [ALAS2023-2026-1715](https://patchblox.com/security/data/fix/linux/alas2023-2026-1715.md) | May 25, 2026 |
| Linux | runc-debuginfo amzn 2023 | 1.3.4-5.amzn2023.0.2 | [ALAS2023-2026-1715](https://patchblox.com/security/data/fix/linux/alas2023-2026-1715.md) | May 25, 2026 |
| Linux | runc-debugsource amzn 2023 | 1.3.4-5.amzn2023.0.2 | [ALAS2023-2026-1715](https://patchblox.com/security/data/fix/linux/alas2023-2026-1715.md) | May 25, 2026 |
| Linux | runfinch-finch amzn 2023 | 1.17.0-1.amzn2023.0.2 | [ALAS2023-2026-1741](https://patchblox.com/security/data/fix/linux/alas2023-2026-1741.md) | May 25, 2026 |
| Linux | soci-snapshotter amzn 2023 | 0.13.0-1.amzn2023.0.3 | [ALAS2023-2026-1740](https://patchblox.com/security/data/fix/linux/alas2023-2026-1740.md) | May 25, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.