LOWGo
GHSA-7m29-f4hw-g2vx· CVE-2026-27017, GO-2026-4509uTLS has a fingerprint vulnerability from GREASE ECH mismatch for Chrome parrots
Modified: 9/10/2026
package
Go/github.com/refraction-networking/utls
pkg:go/github.com/refraction-networking/utls
MEDIUM6.5Go
GHSA-pmc3-p9hx-jq96· CVE-2026-26994, GO-2025-3638uTLS ServerHellos are accepted without checking TLS 1.3 downgrade canaries
Modified: 9/10/2026
LOWGo
GHSA-rrxv-pmq9-x67r· CVE-2026-26995, GO-2026-4512uTLS has a fingerprint vulnerability from missing padding extension for Chrome 120
Modified: 9/10/2026
—Go
GO-2025-3638· CVE-2026-26994, GHSA-pmc3-p9hx-jq96ServerHellos are accepted without checking TLS 1.3 downgrade canaries in github.com/refraction-networking/utls
Modified: 2/18/2026
—Go
GO-2026-4509· CVE-2026-27017, GHSA-7m29-f4hw-g2vxFingerprint vulnerability in uTLS from GREASE ECH mismatch for Chrome parrots in github.com/refraction-networking/utls
Modified: 2/24/2026
—Go
GO-2026-4512· CVE-2026-26995, GHSA-rrxv-pmq9-x67rFingerprint vulnerability in uTLS from missing padding extension for Chrome 120 in github.com/refraction-networking/utls
Modified: 3/23/2026