CVE-2026-54638
2 advisories.
Go/github.com/gotd/td CVE-2026-54638: high 7.5, EPSS 0.63%
td has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode
Action: Upgrade github.com/gotd/td to 0.145.1 or later.
go get github.com/gotd/td@v0.145.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.145.1 | - |
Fixed versions
| 0.145.1 |
Sources
- osv: GHSA-whmm-qj9r-wvr2
- https://github.com/gotd/td/security/advisories/GHSA-whmm-qj9r-wvr2
- https://github.com/gotd/td/issues/1711
- https://github.com/gotd/td/commit/9d5d1f31ea5022d9798d84ccce15de2e91ba6baa
- https://github.com/gotd/td
- https://github.com/gotd/td/releases/tag/v0.145.1
CVE-2026-54638 · published · modified · JSON
Go/github.com/gotd/td CVE-2026-54638: unknown, EPSS 0.63%
Unbounded memory allocation in proto.UnencryptedMessage.Decode in github.com/gotd/td
Action: Upgrade github.com/gotd/td to 0.145.1 or later.
go get github.com/gotd/td@v0.145.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.145.1 | - |
Fixed versions
| 0.145.1 |
Sources
- osv: GO-2026-6138
- https://github.com/gotd/td/security/advisories/GHSA-whmm-qj9r-wvr2
- https://github.com/gotd/td/commit/9d5d1f31ea5022d9798d84ccce15de2e91ba6baa
- https://github.com/gotd/td/issues/1711
- https://github.com/gotd/td/releases/tag/v0.145.1
CVE-2026-54638 · published · modified · JSON