CVE-2026-97054: Debian/golang-1.19 vulnerability
Published Nov 10, 2026
·Updated
Affected Software
7 affected components
debian/golang-1.19*
debian/golang-1.24*
debian/golang-1.26*
debian/golang-1.19<=1.19.8-2
debian/golang-1.24<=1.24.4-1
debian/golang-1.26<=1.26.10-1
debian/golang-1.27<=1.27.3-1
Event History
Nov 10, 2026
CVE Published
via OSV·11:47 PM
Data Sourced
via OSV·11:47 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which Debian Go packages are listed as affected?
The listed packages are golang-1.19, golang-1.24, golang-1.26, and golang-1.27.
2
Where can I find the available vendor and upstream tracking information?
Debian tracks this issue in its security tracker and OSV has a Debian vulnerability record. An upstream Go announcement is also referenced.