Go/github.com/gmrtd/gmrtd CVE-2026-24738: medium 6.5, EPSS 0.28%
gmrtd ReadFile Vulnerable to Denial of Service via Excessive TLV Length Values
Action: Upgrade github.com/gmrtd/gmrtd to 0.17.2 or later.
go get github.com/gmrtd/gmrtd@v0.17.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.2 | - |
Fixed versions
| 0.17.2 |
Sources
- osv: GHSA-j49h-6577-5xwq
- nvd: CVE-2026-24738
- https://github.com/gmrtd/gmrtd/security/advisories/GHSA-j49h-6577-5xwq
- https://github.com/gmrtd/gmrtd/commit/54469a95e5a20a8602ac1457b2110bfeb80c8891
- https://github.com/gmrtd/gmrtd
- https://github.com/gmrtd/gmrtd/releases/tag/v0.17.2
CVE-2026-24738 · published · modified · JSON