Google github.com/google/go-eventlog vulnerabilities

Latest Google github.com/google/go-eventlog CVEs

Newest publication first

1. GO-2026-6893 Event type spoofing via UntrustedType in github.com/google/go-eventlog

   Published 2026-11-05

   Unknown

   In github.com/google/go-eventlog/tcg, Event exposes UntrustedType, which returns the raw event type header from the TCG event log without verifying that the event data matches its digest. Callers that dispatch on Event.UntrustedType after ParseAndReplay can be tricked by a modifi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.