Go/github.com/ethereum/go-ethereum CVE-2026-26315: unknown, EPSS 0.51%
Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake in github.com/ethereum/go-ethereum
Action: Upgrade github.com/ethereum/go-ethereum to 1.16.9 or later.
go get github.com/ethereum/go-ethereum@v1.16.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.9 | - |
Fixed versions
| 1.16.9 |
Sources
- osv: GO-2026-4511
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-m6j8-rg6r-7mv8
- https://github.com/ethereum/go-ethereum/commit/46bee92f9e64c0a06a12586a5d21cffc49d1ba8e
- https://github.com/ethereum/go-ethereum/pull/33669
- https://github.com/ethereum/go-ethereum/releases/tag/v1.16.9
CVE-2026-26315 · published · modified · JSON