This release includes 1 security fix for security teams reviewing exposed deployments.
Affected surfaces
ReleasePort's take
Moderate signalThe Go runtime has been updated to version 1.26.5 to fix a security vulnerability in the crypto package.
Why it matters: Addresses a high‑severity (90) crypto vulnerability; upgrade to Go 1.26.5 is required for affected deployments.
Summary
AI summaryUpdates Go runtime to version 1.26.5 to address a crypto package security vulnerability.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Updates Go runtime to version 1.26.5 to address a crypto package security vulnerability. Updates Go runtime to version 1.26.5 to address a crypto package security vulnerability. Source: llm_adapter@2026-07-15 Confidence: high |
— |
Changelog
- SECURITY: Updates to go 1.26.5 to update crypto package security issue (842049d by Amin Persia)
Security Fixes
- Updates to go 1.26.5 address a crypto package security issue
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]