Debian/gopls: high 8.8
gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopls
Action: Upgrade gopls to 2:0.22.0+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:0.22.0+ds-1 | - |
Fixed versions
| 2:0.22.0+ds-1 |
Sources
- osv: DEBIAN-CVE-2026-42503#Debian:14/gopls
- https://security-tracker.debian.org/tracker/CVE-2026-42503
published · modified · JSON