Linux · openSUSE Leap · Security advisory · February 6, 2026

SUSE-SU-2026:0403-1: govulncheck-vulndb security update

SUSE-SU-2026:0403-1, released February 6, 2026, fixes 73 CVEs in govulncheck-vulndb (version 0.0.20260205T172317-150000.1.146.1). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
73
1 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0140
72nd percentile

Priority of the 73 CVEs

Patch now 0 Urgent 1 High 4 Routine 68

Fixed package versions

ProductReleaseFixed in
govulncheck-vulndbopensuse-leap 15.60.0.20260205T172317-150000.1.146.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-62878 Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern9.9 0.0064 None reported
High CVE-2025-68121 Unexpected session resumption in crypto/tls10.0 0.0090 None reported
High CVE-2026-23954 govulncheck-vulndb: GO-2026-4357 GHSA-7f67-crqm-jgh78.7 0.0078 None reported
High CVE-2025-61732 Potential code smuggling via doc comments in cmd/cgo8.6 0.0053 None reported
High CVE-2026-23953 govulncheck-vulndb: GO-2026-4359 GHSA-x6jc-phwx-hp328.7 0.0049 None reported
Routine CVE-2026-23829 govulncheck-vulndb: GO-2026-4333 GHSA-54wq-72mp-cq7cn/a 0.0140 None reported
Routine CVE-2025-69820 govulncheck-vulndb: GO-2026-4390 GHSA-73jg-4qh6-3f4gn/a 0.0102 None reported
Routine CVE-2026-25161 govulncheck-vulndb: GO-2026-4415 GHSA-x4q4-7phh-42j9n/a 0.0081 None reported
Routine CVE-2026-24124 govulncheck-vulndb: GO-2026-4356 GHSA-j8hf-cp34-g4j7n/a 0.0078 None reported
Routine CVE-2023-43632 govulncheck-vulndb: GO-2026-4422 GHSA-6jp5-grgh-jw42n/a 0.0066 None reported
Routine CVE-2026-25059 govulncheck-vulndb: GO-2026-4396 GHSA-qmj2-8r24-xxcqn/a 0.0065 None reported
Routine CVE-2026-24735 govulncheck-vulndb: GO-2026-4421 GHSA-5w5r-8xc6-2xhwn/a 0.0065 None reported
Routine CVE-2026-23850 govulncheck-vulndb: GO-2026-4347 GHSA-cv54-7wv7-qxcwn/a 0.0062 None reported
Routine CVE-2026-23881 govulncheck-vulndb: GO-2026-4382 GHSA-r2rj-wwm5-x6mqn/a 0.0062 None reported
Routine CVE-2026-22039 govulncheck-vulndb: GO-2026-4381 GHSA-8p9x-46gm-qfx2n/a 0.0058 None reported
Routine CVE-2026-24058 govulncheck-vulndb: GO-2026-4353 GHSA-pchf-49fh-w34rn/a 0.0058 None reported
Routine CVE-2025-47911 alloy: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents5.3 0.0056 None reported
Routine CVE-2026-21696 govulncheck-vulndb: GO-2026-4329 GHSA-2497-gp99-2m74n/a 0.0055 None reported
Routine CVE-2026-24512 govulncheck-vulndb: GO-2026-4426 GHSA-jx8c-56mg-h6vpn/a 0.0055 None reported
Routine CVE-2025-58190 alloy: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially5.3 0.0054 None reported
Routine CVE-2026-1580 govulncheck-vulndb: GO-2026-4423 GHSA-9h3p-52vh-959wn/a 0.0053 None reported
Routine CVE-2026-23851 govulncheck-vulndb: GO-2026-4346 GHSA-94c7-g2fj-7682n/a 0.0052 None reported
Routine CVE-2026-24514 govulncheck-vulndb: GO-2026-4417 GHSA-2pf9-vr92-6h3vn/a 0.0052 None reported
Routine CVE-2026-23742 govulncheck-vulndb: GO-2026-4327 GHSA-cc8m-98fm-rc9gn/a 0.0051 None reported
Routine CVE-2026-25579 govulncheck-vulndb: GO-2026-4411 GHSA-hrr4-3wgr-68x3n/a 0.0051 None reported
Showing 1 to 25 of 73 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.