View Ridge Security
Back to Cyber Hose

Critical TLS verification flaws in gopay and go-micro libraries

Two CVSS 9.1 flaws disabling TLS certificate verification in gopay and go-micro headline today's CVE roundup.

🔓 CVEs & KEV

  • The CVE roundup for today includes critical issues in popular libraries and frameworks:

  • • CVE-2026-105218 — go-pay gopay — CVSS 9.1 — gopay before 1.5.119 Disabled TLS Certificate Verification in xhttp Clientgop...

  • • CVE-2026-105216 — micro go-micro — CVSS 9.1 — go-micro before 6.0.0 Disabled TLS Certificate Verification via tls.Config He...

  • • CVE-2026-102282 — cthackers adm-zip — CVSS 7.1 — adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local priv...

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check