medium5.3
CVE-2026-42505
Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unenc…
Impact
Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Golang | Go | from 1.23.0 before 1.25.12 from 1.26.0 before 1.26.5 Version 1.27 |