Google go-attestation

• CVE-2026-19201 Medium 6.6 Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser 0.3%
• CVE-2026-12681 High 8.9 Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-attestation. parseEfiSignatureList() does not advance the buffer past vendor bytes before reading entrie 0.3%