VDB
KO

GO-2026-5611

Elastic Package Registry has Improper Verification of Cryptographic Signature in github.com/elastic/package-registry

Details

Elastic Package Registry has Improper Verification of Cryptographic Signature in github.com/elastic/package-registry

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/elastic/package-registry
Introduced in: 0 Fixed in: 1.38.0
Fix go get github.com/elastic/package-registry@v1.38.0

References