# CVE-2026-33809: govulncheck-vulndb: GO-2026-4815 * GO-2026-4816 CVE-2026-3864 GHSA-2mjq-54qg-7w6j * GO-2026-4817 CVE-2026-33528 GHSA-4753-cmc8-8j9v * GO-...

CVE-2026-33809 is fixed in 4 products on 1 platform, first by DEBIAN-CVE-2026-33809, released March 25, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-33809
- Priority: Routine
- CVSS: 5.3 (medium)
- EPSS: 0.0034
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 25, 2026

## Description

GO-2026-4815 * GO-2026-4816 CVE-2026-3864 GHSA-2mjq-54qg-7w6j * GO-2026-4817 CVE-2026-33528 GHSA-4753-cmc8-8j9v * GO-2026-4818 CVE-2026-33525 GHSA-gmfg-3v4q-9qr4 * GO-2026-4820 GHSA-7789-65hx-f26w * GO-2026-4821 CVE-2026-33621 GHSA-j65m-hv65-r264 * GO-2026-4822 CVE-2026-33620 GHSA-mrqc-3276-74f8 * GO-2026-4823 CVE-2026-33623 GHSA-p8mm-644p-phmh * GO-2026-4824 CVE-2026-33622 GHSA-w5pc-m664-r62v * GO-2026-4825 CVE-2026-33619 GHSA-xqq2-4j46-vwp7 * GO-2026-4826 CVE-2026-33249 GHSA-8m2x-3m6q-6w8j * GO-2026-4827 CVE-2026-33247 GHSA-x6g4-f6q3-fqvv * GO-2026-4828 CVE-2026-33248 GHSA-3f24-pcvm-5jqc * GO-2026-4829 CVE-2026-29785 GHSA-52jh-2xxh-pwh6 * GO-2026-4830 CVE-2026-33246 GHSA-55h8-8g96-x4hj * GO-2026-4831 CVE-2026-33219 GHSA-8r68-gvr4-jh7j * GO-2026-4832 CVE-2026-33222 GHSA-9983-vrx2-fg9c * GO-2026-4833 CVE-2026-33215 GHSA-fcjp-h8cc-6879 * GO-2026-4834 CVE-2026-33217 GHSA-jxxm-27vp-c3m5 * GO-2026-4835 CVE-2026-33223 GHSA-pwx7-fx9r-hr4h * GO-2026-4836 CVE-2026-33216 GHSA-v722-jcv5-w7mc *…

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | golang-golang-x-image Debian 14 | 0.38.0-1 | [DEBIAN-CVE-2026-33809](https://patchblox.com/security/data/fix/linux/debian-cve-2026-33809.md) | Mar 25, 2026 |
| Linux | govulncheck-vulndb opensuse-leap 15.6 | 0.0.20260326T203309-150000.1.155.2 | [SUSE-SU-2026:1135-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1135-1.md) | Mar 27, 2026 |
| Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 |
| Linux | neonmodem opensuse-leap 16.0 | 1.0.7+git0.346d1d3-bp160.1.1 | [OPENSUSE-SU-2026:20963-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20963-1.md) | Jun 12, 2026 |
| Linux | rclone opensuse-leap 16.0 | 1.74.4-bp160.1.1 | [OPENSUSE-SU-2026:21436-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21436-1.md) | Jul 22, 2026 |

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.