{"id":"GO-2026-4923","summary":"Vulnerability in go.etcd.io/bbolt","details":"Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt","aliases":["CVE-2026-33817"],"modified":"2026-04-06T18:17:47.802045Z","published":"2026-04-06T17:49:14Z","database_specific":{"url":"https://pkg.go.dev/vuln/GO-2026-4923","review_status":"REVIEWED"},"references":[{"type":"FIX","url":"https://github.com/etcd-io/bbolt/pull/1171/changes/386d5b69785937d1aa20cb25c8439404cf398143"},{"type":"REPORT","url":"https://github.com/golang/vulndb/issues/4923"}],"affected":[{"package":{"name":"go.etcd.io/bbolt","ecosystem":"Go","purl":"pkg:golang/go.etcd.io/bbolt"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"ecosystem_specific":{"imports":[{"symbols":["Bucket.CreateBucket","Bucket.CreateBucketIfNotExists","Bucket.Delete","Bucket.DeleteBucket","Bucket.ForEach","Bucket.ForEachBucket","Bucket.MoveBucket","Bucket.NextSequence","Bucket.Put","Bucket.SetSequence","Bucket.Stats","Compact","Cursor.Delete","DB.Batch","DB.Begin","DB.Close","DB.Sync","DB.Update","DB.View","DefaultLogger.Debug","DefaultLogger.Debugf","DefaultLogger.Error","DefaultLogger.Errorf","DefaultLogger.Fatal","DefaultLogger.Fatalf","DefaultLogger.Info","DefaultLogger.Infof","DefaultLogger.Panic","DefaultLogger.Panicf","DefaultLogger.Warning","DefaultLogger.Warningf","Open","Tx.Check","Tx.Commit","Tx.Copy","Tx.CopyFile","Tx.CreateBucket","Tx.CreateBucketIfNotExists","Tx.DeleteBucket","Tx.ForEach","Tx.MoveBucket","Tx.Rollback","Tx.WriteTo"],"path":"go.etcd.io/bbolt"}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-4923.json"}}],"schema_version":"1.7.5","credits":[{"name":"Quoc Bui (github.com/quocvibui)"}]}