rhsa-2026:9872
The source describes three vulnerabilities in the Go ecosystem: insufficient validation of malformed URLs, incorrect validation of email constraints in certificate chains, and an authorization bypass in gRPC-Go through a malformed HTTP/2 :path header.
CERT24