Hi!
Golang 1.26.4 is flagging for being vulnerable to CVE-2026-39822. I know the codepath doesn't touch os.Root as far as I can tell, but it's still flagging on security scans. Any timeline for bumping this version to 1.26.5 and making our scanners a little quieter? :)
Ref: https://app.opencve.io/cve/CVE-2026-39822
Thanks!
Hi!
Golang 1.26.4 is flagging for being vulnerable to CVE-2026-39822. I know the codepath doesn't touch os.Root as far as I can tell, but it's still flagging on security scans. Any timeline for bumping this version to 1.26.5 and making our scanners a little quieter? :)
Ref: https://app.opencve.io/cve/CVE-2026-39822
Thanks!