Root has patched CVE-2026-35469 in the rootio-github.com/moby/spdystream package for Root:Go. Multiple fixed versions available.
{ "distro": "gobinary", "source": "Root", "distro_version": "" }
[ "v0.4.0-root.io.1", "v0.2.0-root.io.1" ]
""
"v0.2.0-root.io.1"
true
"https://api.root.io/external/osv/ROOT-APP-GOBINARY-CVE-2026-35469.json"
2.0