CVE-2026-42501 — A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module — CVE Database · The Intelligence Room