{"action":"Upgrade github.com/refraction-networking/utls to 1.8.2 or later.","affected":[{"fixed":"1.8.2","introduced":"1.6.0"}],"component":"github.com/refraction-networking/utls","cve_ids":["CVE-2026-26995"],"ecosystem":"Go","exploited":false,"fixed_versions":["1.8.2"],"ghsa_id":"GHSA-rrxv-pmq9-x67r","id":"tcs_01M5KFN8BCW4SJSVJ42VW2RN42","modified_at":"2026-09-10T03:50:35.566501674Z","published_at":"2026-02-18T22:33:47Z","references":["https://osv.dev/vulnerability/GHSA-rrxv-pmq9-x67r","https://github.com/refraction-networking/utls/security/advisories/GHSA-rrxv-pmq9-x67r","https://github.com/refraction-networking/utls/commit/8fe0b08e9a0e7e2d08b268f451f2c79962e6acd0","https://github.com/refraction-networking/utls","https://pkg.go.dev/vuln/GO-2026-4512"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-rrxv-pmq9-x67r","url":"https://osv.dev/vulnerability/GHSA-rrxv-pmq9-x67r"}],"summary":"uTLS has a fingerprint vulnerability from missing padding extension for Chrome 120"}