rhsa-2026:9453 – Five vulnerabilities in Go and BuildKit components
The source describes five related vulnerabilities affecting the Go standard library, gRPC-Go, BuildKit, and Go JOSE. The issues involve insufficient validation of invalid URLs, authorization bypass, unauthorized file writing, access to files outside a Git repository root, and denial of service.
CERT24