—
GO-2026-6180
Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb
빠른 조치
GO-2026-6180 — toolchain: 아래 명령으로 수정 버전으로 올리세요.
go get toolchain@v1.25.13상세
A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log.
This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log.
In order to determine if you have been affected:
rm -r go.sum go.work.sum vendor/ && go mod tidy
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.