CYBERSECURITYTRACKER
Permanent story citation

Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10729

As cited

Copy frozen at (site build).

vulnerabilities

Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns

Go released emergency updates version 1.27.3 and 1.26.10 on October 20, 2026, to block certificate chains passing through eight intermediate certificate authority keys over undisclosed security concerns. Programs built with these versions will reject connections to sites and services using certificates issued under those keys.

Why it matters: Go users and any services built on Go need to update immediately to prevent certificate validation failures for legitimate connections, as the specific security issue remains undisclosed and the affected certificate authority is unnamed.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns

Go released emergency updates version 1.27.3 and 1.26.10 on October 20, 2026, to block certificate chains passing through eight intermediate certificate authority keys over undisclosed security concerns. Programs built with these versions will reject connections to sites and services using certificates issued under those keys.

Why it matters: Go users and any services built on Go need to update immediately to prevent certificate validation failures for legitimate connections, as the specific security issue remains undisclosed and the affected certificate authority is unnamed.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary