{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"golang.org/x/crypto","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"id":"tcs_01M5KGQV5G40T8JDHT3T48XBHT","modified_at":"2026-07-10T05:44:31.101996029Z","published_at":"2026-07-07T22:15:29Z","references":["https://osv.dev/vulnerability/GO-2026-5932","https://go.dev/issue/44226"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5932","url":"https://osv.dev/vulnerability/GO-2026-5932"}],"summary":"The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues"}