Vulnerability GO-2026-5841
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 months ago
July 27, 2026 at 04:16 PM UTC
OOB read in github.com/klauspost/compress/s2
v1.16.0 - v1.18.6
v1.16.0 - v1.18.6
Summary
OOB read in github.com/klauspost/compress/s2
Details
Providing a specially crafted dictionary to s2.NewDict and using it to encode data can make the encoder read out of bounds.
References
Impacted packages
Timeline
Published
2 months ago
July 27, 2026 at 04:16 PM UTC
Last Modified
5 hours ago
September 30, 2026 at 03:55 AM UTC