{"action":"Upgrade github.com/refraction-networking/utls to 1.8.2 or later.","affected":[{"fixed":"1.8.2","introduced":"1.6.0"}],"component":"github.com/refraction-networking/utls","cve_ids":["CVE-2026-26995"],"ecosystem":"Go","exploited":false,"fixed_versions":["1.8.2"],"ghsa_id":"GHSA-rrxv-pmq9-x67r","id":"tcs_01M5KGE5PX67XPHTBP37HXC6KQ","modified_at":"2026-03-23T05:08:54.583072199Z","published_at":"2026-02-24T23:10:26Z","references":["https://osv.dev/vulnerability/GO-2026-4512","https://github.com/refraction-networking/utls/security/advisories/GHSA-rrxv-pmq9-x67r","https://github.com/refraction-networking/utls/commit/8fe0b08e9a0e7e2d08b268f451f2c79962e6acd0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4512","url":"https://osv.dev/vulnerability/GO-2026-4512"}],"summary":"Fingerprint vulnerability in uTLS from missing padding extension for Chrome 120 in github.com/refraction-networking/utls"}