Linux · openSUSE Leap · Security advisory · March 25, 2026

SUSE-SU-2026:1042-1: govulncheck-vulndb security update

SUSE-SU-2026:1042-1, released March 25, 2026, fixes 124 CVEs in govulncheck-vulndb (version 0.0.20260317T205859-150000.1.152.1). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
124
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.1
Base score, 0 to 10
Highest EPSS
0.2284
97th percentile

Priority of the 124 CVEs

Patch now 0 Urgent 2 High 5 Routine 117

Fixed package versions

ProductReleaseFixed in
govulncheck-vulndbopensuse-leap 15.60.0.20260317T205859-150000.1.152.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-30852 govulncheck-vulndb: GO-2026-4644 GHSA-m2w3-8f23-hxxfn/a 0.0047 None reported
Urgent CVE-2026-30851 govulncheck-vulndb: GO-2026-4639 GHSA-7r4p-vjf4-gxv4n/a 0.0029 None reported
High CVE-2026-26018 CoreDNS Loop Detection Denial of Service Vulnerability7.5 0.0124 None reported
High CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url9.1 0.0083 None reported
High CVE-2026-27137 Incorrect enforcement of email constraints in crypto/x5099.1 0.0066 None reported
High CVE-2026-26017 CoreDNS ACL Bypass7.7 0.0042 None reported
High CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template7.5 0.0037 None reported
Routine CVE-2026-27944 govulncheck-vulndb: GO-2026-4614 GHSA-g9w5-qffc-6762n/a 0.2284 None reported
Routine CVE-2026-29042 govulncheck-vulndb: GO-2026-4598 GHSA-95fj-3w7g-4r27n/a 0.0259 None reported
Routine CVE-2026-30861 govulncheck-vulndb: GO-2026-4645 GHSA-r55h-3rwj-hcmgn/a 0.0238 None reported
Routine CVE-2026-30869 govulncheck-vulndb: GO-2026-4646 GHSA-2h2p-mvfx-868wn/a 0.0119 None reported
Routine CVE-2026-28279 govulncheck-vulndb: GO-2026-4579 GHSA-rchw-322g-f7rmn/a 0.0097 None reported
Routine CVE-2021-25320 govulncheck-vulndb: GO-2026-4589 GHSA-gqf8-rvrh-g7w6n/a 0.0086 None reported
Routine CVE-2026-32136 govulncheck-vulndb: GO-2026-4686 GHSA-5fg6-wrq4-w5ghn/a 0.0084 None reported
Routine CVE-2026-27819 govulncheck-vulndb: GO-2026-4556 GHSA-42wg-38gx-85rhn/a 0.0083 None reported
Routine CVE-2026-31817 govulncheck-vulndb: GO-2026-4670 GHSA-364q-w7vh-vhpcn/a 0.0081 None reported
Routine CVE-2026-28342 govulncheck-vulndb: GO-2026-4584 GHSA-pc8g-78pf-4xrpn/a 0.0075 None reported
Routine CVE-2026-28268 govulncheck-vulndb: GO-2026-4575 GHSA-rfjg-6m84-crj2n/a 0.0074 None reported
Routine CVE-2026-28790 govulncheck-vulndb: GO-2026-4587 GHSA-4fqm-6fmh-82mqn/a 0.0074 None reported
Routine CVE-2026-30860 govulncheck-vulndb: GO-2026-4641 GHSA-8w32-6mrw-q5wvn/a 0.0074 None reported
Routine CVE-2026-28229 govulncheck-vulndb: GO-2026-4678 GHSA-56px-hm34-xqj5n/a 0.0073 None reported
Routine CVE-2026-29183 govulncheck-vulndb: GO-2026-4596 GHSA-6865-qjcf-286fn/a 0.0070 None reported
Routine CVE-2026-28406 govulncheck-vulndb: GO-2026-4580 GHSA-6rxq-q92g-4rmfn/a 0.0068 None reported
Routine CVE-2026-30933 govulncheck-vulndb: GO-2026-4659 GHSA-525j-95gf-766fn/a 0.0063 None reported
Routine CVE-2026-26999 govulncheck-vulndb: GO-2026-4594 GHSA-xw98-5q62-jx94n/a 0.0061 None reported
Showing 1 to 25 of 124 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.