| Package | Affected versions | Patched versions |
|---|---|---|
| stdlib | ≥ 1.26.0-0, < 1.26.5≥ 1.27.0-0, < 1.27.0-rc.2< 1.25.12 | 1.26.51.27.0-rc.21.25.12 |
| go | = 1.27≥ 1.23.0, < 1.25.12≥ 1.26.0, < 1.26.5 | 1.25.121.26.5 |
Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free