CVE-2026-105218 Blast Radius

HIGH • CVSS 7.4gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to imperson…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-105218.

Book a Demo →← Back to CVE-2026-105218