Every CVE Search/ Get API key

CVE-2025-22870

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

4.4 MediumPublic exploitFix available

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
Low

Exploit likelihood

0.43%Up 0.4 points since Mar 13, 2025
90%50%10%1%

What each source reports

CVE List Score used 4.4

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
CVE-2025-22870
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-115
Updated
2026-11-02
EUVDEUVD-2025-6690 4.4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
EUVD-2025-6690
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-qxp5-gwg8-xv66 4.4

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
GHSA-qxp5-gwg8-xv66
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-20, CWE-115
Updated
2026-11-02
NVD 4.4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
CVE-2025-22870
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-115
Updated
2026-11-02
OSVALPINE-CVE-2025-22870 4.4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
ALPINE-CVE-2025-22870
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-03
OSVBELL-CVE-2025-22870 4.4
Record
BELL-CVE-2025-22870
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2025-22870 4.4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
DEBIAN-CVE-2025-22870
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVGHSA-qxp5-gwg8-xv66 4.4

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
GHSA-qxp5-gwg8-xv66
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-115, CWE-20
Updated
2026-11-02
OSVOESA-2025-1427 4.4

golang security update

.

Security Fix(es):

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.(CVE-2025-22870)

Record
OESA-2025-1427
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVROOT-APP-GOBINARY-CVE-2025-22870 4.4

CVE-2025-22870 in golang.org/x/net - Patched by Root

Root has patched CVE-2025-22870 in the golang.org/x/net package for Root:Go. Multiple fixed versions available.

Record
ROOT-APP-GOBINARY-CVE-2025-22870
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2025-22870 4.4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
UBUNTU-CVE-2025-22870
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVAZL-58380 No score

CVE-2025-22870 affecting package git-lfs for versions less than 3.5.1-5

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58380
Updated
2026-11-02
OSVAZL-58386 No score

CVE-2025-22870 affecting package influxdb for versions less than 2.6.1-22

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58386
Updated
2026-11-02
OSVAZL-58392 No score

CVE-2025-22870 affecting package golang for versions less than 1.22.7-4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58392
Updated
2026-11-02
OSVAZL-58396 No score

CVE-2025-22870 affecting package packer for versions less than 1.9.5-12

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58396
Updated
2026-11-02
OSVAZL-58402 No score

CVE-2025-22870 affecting package vitess for versions less than 17.0.7-7

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58402
Updated
2026-11-02
OSVAZL-58404 No score

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-5

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58404
Updated
2026-11-02
OSVAZL-58413 No score

CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58413
Updated
2026-11-05
OSVAZL-58416 No score

CVE-2025-22870 affecting package telegraf for versions less than 1.31.0-7

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58416
Updated
2026-11-02
OSVAZL-58419 No score

CVE-2025-22870 affecting package influxdb for versions less than 2.7.5-4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58419
Updated
2026-11-02
OSVAZL-58422 No score

CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58422
Updated
2026-11-05
OSVAZL-58438 No score

CVE-2025-22870 affecting package keda for versions less than 2.4.0-29

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58438
Updated
2026-11-02
OSVAZL-58440 No score

CVE-2025-22870 affecting package telegraf for versions less than 1.29.4-15

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58440
Updated
2026-11-02
OSVAZL-58443 No score

CVE-2025-22870 affecting package vitess for versions less than 19.0.4-7

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58443
Updated
2026-11-02
OSVAZL-58446 No score

CVE-2025-22870 affecting package git-lfs for versions less than 3.6.1-2

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58446
Updated
2026-11-05
OSVAZL-58452 No score

CVE-2025-22870 affecting package golang for versions less than 1.18.8-8

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58452
Updated
2026-11-02
OSVAZL-58455 No score

CVE-2025-22870 affecting package keda for versions less than 2.14.1-7

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58455
Updated
2026-11-02
OSVAZL-58458 No score

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58458
Updated
2026-11-02
OSVAZL-58469 No score

CVE-2025-22870 affecting package packer for versions less than 1.9.5-9

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58469
Updated
2026-11-02
OSVAZL-58472 No score

CVE-2025-22870 affecting package prometheus for versions less than 2.45.4-12

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-58472
Updated
2026-11-02
OSVAZL-79030 No score

CVE-2025-22870 affecting package golang 1.25.7-1

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-79030
Updated
2026-11-02
OSVAZL-98829 No score

CVE-2025-22870 affecting package golang 1.27.1-1

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
AZL-98829
Updated
2026-11-02
OSV No score

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
CVE-2025-22870
Updated
2026-11-02
OSVGO-2025-3503 No score

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Record
GO-2025-3503
Updated
2026-11-02
OSVMGASA-2025-0175 No score

Updated golang packages fix security vulnerabilities

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied - CVE-2025-22870. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext - CVE-2025-22871.

Record
MGASA-2025-0175
Updated
2026-11-02
OSVMGASA-2026-0147 No score

Updated rclone packages fix security vulnerabilities

This update bring new features, bugs and vulnerabilities fixed in rclone and golang components used to build it.

Record
MGASA-2026-0147
Updated
2026-11-02
OSVopenSUSE-SU-2025:14855-1 No score

go1.23-1.23.7-1.1 on GA media

These are all security issues fixed in the go1.23-1.23.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14855-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14856-1 No score

go1.24-1.24.1-1.1 on GA media

These are all security issues fixed in the go1.24-1.24.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14856-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14863-1 No score

teleport-17.3.3-1.1 on GA media

These are all security issues fixed in the teleport-17.3.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14863-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14867-1 No score

amazon-ssm-agent-3.3.1957.0-2.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.1957.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14867-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14889-1 No score

govulncheck-vulndb-0.0.20250312T181707-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250312T181707-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14889-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14906-1 No score

helm-3.17.2-1.1 on GA media

These are all security issues fixed in the helm-3.17.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14906-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14909-1 No score

apptainer-1.3.6-5.1 on GA media

These are all security issues fixed in the apptainer-1.3.6-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14909-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14918-1 No score

warewulf4-4.6.0-2.1 on GA media

These are all security issues fixed in the warewulf4-4.6.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14918-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14988-1 No score

cosign-2.5.0-1.1 on GA media

These are all security issues fixed in the cosign-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14988-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15041-1 No score

golang-github-prometheus-node_exporter-1.9.1-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-node_exporter-1.9.1-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15041-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15054-1 No score

rclone-1.69.2-1.1 on GA media

These are all security issues fixed in the rclone-1.69.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15054-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15145-1 No score

grafana-11.6.1-1.1 on GA media

These are all security issues fixed in the grafana-11.6.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15145-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15162-1 No score

prometheus-blackbox_exporter-0.24.0-3.1 on GA media

These are all security issues fixed in the prometheus-blackbox_exporter-0.24.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15162-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15178-1 No score

golang-github-prometheus-alertmanager-0.28.1-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-alertmanager-0.28.1-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15178-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15253-1 No score

opa-1.6.0-1.1 on GA media

These are all security issues fixed in the opa-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15253-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15487-1 No score

cheat-4.4.2-2.1 on GA media

These are all security issues fixed in the cheat-4.4.2-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15487-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15779-1 No score

helm3-3.19.2-1.1 on GA media

These are all security issues fixed in the helm3-3.19.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15779-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:20177-1 No score

Security update for cheat

This update for cheat fixes the following issues:

  • Security:

  • Packaging improvements:

    • Drop Requires: golang-packaging. The recommended Go toolchain dependency expression is BuildRequires: golang(API) >= 1.x or optionally the metapackage BuildRequires: go
    • Use BuildRequires: golang(API) >= 1.19 matching go.mod
    • Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time.
    • Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
    • Remove go build -o output binary location and name. Default binary has the same name as package of func main() and is placed in the top level of the build directory.
    • Add basic %check to execute binary --help

  • Packaging improvements:

Record
openSUSE-SU-2025:20177-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
golang.org/x/net
Go
 before 0.36.0
0.36.0
go
Alpine:v3.21
 before 1.23.7-r0
1.23.7-r0
go
Alpine:v3.22
 before 1.24.1-r0
1.24.1-r0
go
Alpine:v3.23
 before 1.24.1-r0
1.24.1-r0
go
Alpine:v3.24
 before 1.24.1-r0
1.24.1-r0
rclone
Alpine:v3.22
 before 1.69.2-r0
1.69.2-r0
rclone
Alpine:v3.23
 before 1.69.2-r0
1.69.2-r0
rclone
Alpine:v3.24
 before 1.69.2-r0
1.69.2-r0
git-lfs
Azure Linux:2
 before 3.5.1-5
3.5.1-5
influxdb
Azure Linux:2
 before 2.6.1-22
2.6.1-22
Show 290 moreShow less
Affected packages
PackageAffectedFixed
golang
Azure Linux:2
 1.19.0 up to 1.22.7-4
1.22.7-4
packer
Azure Linux:2
 before 1.9.5-12
1.9.5-12
vitess
Azure Linux:2
 before 17.0.7-7
17.0.7-7
azcopy
Azure Linux:2
 before 10.25.1-5
10.25.1-5
prometheus-process-exporter
Azure Linux:3
 before 0.8.2-2
0.8.2-2
telegraf
Azure Linux:3
 before 1.31.0-7
1.31.0-7
influxdb
Azure Linux:3
 before 2.7.5-4
2.7.5-4
prometheus-node-exporter
Azure Linux:3
 before 1.7.0-3
1.7.0-3
keda
Azure Linux:2
 before 2.4.0-29
2.4.0-29
telegraf
Azure Linux:2
 before 1.29.4-15
1.29.4-15
vitess
Azure Linux:3
 before 19.0.4-7
19.0.4-7
git-lfs
Azure Linux:3
 before 3.6.1-2
3.6.1-2
golang
Azure Linux:2
 1.18.0 up to 1.18.8-8
1.18.8-8
keda
Azure Linux:3
 before 2.14.1-7
2.14.1-7
azcopy
Azure Linux:3
 before 10.25.1-4
10.25.1-4
packer
Azure Linux:3
 before 1.9.5-9
1.9.5-9
prometheus
Azure Linux:3
 before 2.45.4-12
2.45.4-12
golang
Azure Linux:3
 through 1.25.7-1 None known
golang
Azure Linux:3
 1.27.0 to 1.27.1-1 None known
go
Alpaquita:23
 1.19.7-r0 up to 1.21.12-r4
1.21.12-r4
go
Alpaquita:stream
 1.20.5-r2 up to 1.24.1-r0
1.24.1-r0
go
BellSoft Hardened Containers:23
 1.19.7-r0 up to 1.21.12-r4
1.21.12-r4
go
BellSoft Hardened Containers:stream
 1.20.5-r2 up to 1.24.1-r0
1.24.1-r0
golang-1.19
Debian:12
 All versions, plus listed versions
1.19.10-11.19.10-21.19.11-11.19.12-11.19.12-2
Show 7 moreShow less
1.19.12-2~bpo11+11.19.12-2~bpo12+11.19.13-11.19.13-1~bpo11+11.19.13-1~bpo12+11.19.8-21.19.9-1
 None known
golang-1.24
Debian:13
 before 1.24.1-1
1.24.1-1
stdlib
Go
 before 1.23.7, 1.24.0-0 up to 1.24.1
1.23.71.24.1
golang
Mageia:9
From an advisory covering 2 CVEs
 before 1.23.8-1.mga9
1.23.8-1.mga9
rclone
Mageia:9
From an advisory covering 31 CVEs
 before 1.73.5-1.1.mga9
1.73.5-1.1.mga9
golang
openEuler:24.03-LTS
 before 1.21.4-32.oe2403sp1
1.21.4-32.oe2403sp1
golang
openEuler:24.03-LTS-SP1
 before 1.21.4-32.oe2403sp1
1.21.4-32.oe2403sp1
golang
openEuler:20.03-LTS-SP4
 before 1.15.7-51.oe2003sp4
1.15.7-51.oe2003sp4
golang
openEuler:22.03-LTS-SP3
 before 1.17.3-39.oe2203sp3
1.17.3-39.oe2203sp3
golang
openEuler:22.03-LTS-SP4
 before 1.17.3-39.oe2203sp4
1.17.3-39.oe2203sp4
golang.org/x/net
Root:Go
 before v0.34.0-aikido.3
v0.34.0-aikido.3v0.33.0-aikido.7v0.33.0-aikido.4v0.33.0-aikido.5v0.33.0-aikido.6v0.34.0-aikido.2
rootio-golang.org/x/net
Root:Go
 before v0.34.0-root.io.3
v0.34.0-root.io.3v0.33.0-root.io.7v0.33.0-root.io.1v0.33.0-root.io.4v0.33.0-root.io.5v0.33.0-root.io.6v0.34.0-root.io.2
golang-github-QubitProducts-exporter_exporter
SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS
From an advisory covering 3 CVEs
 before 0.4.0-1.9.1
0.4.0-1.9.1
golang-github-prometheus-node_exporter
SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS
From an advisory covering 3 CVEs
 before 1.10.2-1.12.1
1.10.2-1.12.1
prometheus-postgres_exporter
SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS
From an advisory covering 3 CVEs
 before 0.10.1-1.15.1
0.10.1-1.15.1
scap-security-guide
SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS
From an advisory covering 3 CVEs
 before 0.1.80-1.44.1
0.1.80-1.44.1
spacecmd
SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS
From an advisory covering 3 CVEs
 before 5.0.16-1.61.1
5.0.16-1.61.1
uyuni-tools
SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS
From an advisory covering 3 CVEs
 before 0.1.39-1.32.1
0.1.39-1.32.1
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Enterprise Storage 7.1
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
release-notes-susemanager
SUSE:Manager Server 4.3
From an advisory covering 15 CVEs
 before 4.3.15.2-150400.3.133.1
4.3.15.2-150400.3.133.1
golang-github-prometheus-alertmanager
SUSE:Manager Client Tools 12
From an advisory covering 8 CVEs
 before 0.26.0-1.31.2
0.26.0-1.31.2
golang-github-prometheus-node_exporter
SUSE:Manager Client Tools 12
From an advisory covering 8 CVEs
 before 1.9.1-1.36.2
1.9.1-1.36.2
golang-github-prometheus-prometheus
SUSE:Manager Client Tools 12
From an advisory covering 8 CVEs
 before 2.53.4-1.60.2
2.53.4-1.60.2
grafana
SUSE:Manager Client Tools 12
From an advisory covering 8 CVEs
 before 11.5.5-1.79.2
11.5.5-1.79.2
prometheus-blackbox_exporter
SUSE:Manager Client Tools 12
From an advisory covering 8 CVEs
 before 0.26.0-1.27.1
0.26.0-1.27.1
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 8 CVEs
 before 1.9.1-1.36.2
1.9.1-1.36.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 8 CVEs
 before 1.9.1-1.36.2
1.9.1-1.36.2
golang-github-prometheus-node_exporter
SUSE:Manager Client Tools for SLE Micro 5
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Manager Proxy 4.3
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Manager Server 4.3
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 1.9.1-150100.3.35.2
1.9.1-150100.3.35.2
golang-github-prometheus-prometheus
SUSE:Manager Client Tools 15
From an advisory covering 8 CVEs
 before 2.53.4-150000.3.62.2
2.53.4-150000.3.62.2
grafana
SUSE:Manager Client Tools 15
From an advisory covering 8 CVEs
 before 11.5.5-150000.1.79.1
11.5.5-150000.1.79.1
prometheus-blackbox_exporter
SUSE:Manager Client Tools 15
From an advisory covering 8 CVEs
 before 0.26.0-150000.1.27.1
0.26.0-150000.1.27.1
prometheus-blackbox_exporter
SUSE:Manager Client Tools for SLE Micro 5
From an advisory covering 8 CVEs
 before 0.26.0-150000.1.27.1
0.26.0-150000.1.27.1
prometheus-blackbox_exporter
SUSE:Manager Proxy Module 4.3
From an advisory covering 8 CVEs
 before 0.26.0-150000.1.27.1
0.26.0-150000.1.27.1
prometheus-blackbox_exporter
openSUSE:Leap 15.6
From an advisory covering 8 CVEs
 before 0.26.0-150000.1.27.1
0.26.0-150000.1.27.1
golang-github-prometheus-prometheus
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 2 CVEs
 before 2.53.4-150100.4.26.2
2.53.4-150100.4.26.2
golang-github-prometheus-prometheus
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 2 CVEs
 before 2.53.4-150100.4.26.2
2.53.4-150100.4.26.2
golang-github-prometheus-prometheus
SUSE:Manager Proxy Module 4.3
From an advisory covering 2 CVEs
 before 2.53.4-150100.4.26.2
2.53.4-150100.4.26.2
golang-github-prometheus-prometheus
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 2.53.4-150100.4.26.2
2.53.4-150100.4.26.2
grafana
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 8 CVEs
 before 11.5.5-150200.3.72.2
11.5.5-150200.3.72.2
grafana
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 8 CVEs
 before 11.5.5-150200.3.72.2
11.5.5-150200.3.72.2
grafana
openSUSE:Leap 15.6
From an advisory covering 8 CVEs
 before 11.5.5-150200.3.72.2
11.5.5-150200.3.72.2
golang-github-prometheus-alertmanager
SUSE:Manager Client Tools 15
From an advisory covering 2 CVEs
 before 0.26.0-150100.4.25.2
0.26.0-150100.4.25.2
golang-github-prometheus-alertmanager
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 2 CVEs
 before 0.26.0-150100.4.25.2
0.26.0-150100.4.25.2
golang-github-prometheus-alertmanager
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 2 CVEs
 before 0.26.0-150100.4.25.2
0.26.0-150100.4.25.2
golang-github-prometheus-alertmanager
SUSE:Manager Proxy Module 4.3
From an advisory covering 2 CVEs
 before 0.26.0-150100.4.25.2
0.26.0-150100.4.25.2
golang-github-prometheus-alertmanager
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 0.26.0-150100.4.25.2
0.26.0-150100.4.25.2
ignition
SUSE:Linux Enterprise Module for HPC 15 SP6
From an advisory covering 2 CVEs
 before 2.14.0-150400.9.9.1
2.14.0-150400.9.9.1
ignition
SUSE:Linux Enterprise Module for HPC 15 SP7
From an advisory covering 2 CVEs
 before 2.14.0-150400.9.9.1
2.14.0-150400.9.9.1
ignition
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 2.14.0-150400.9.9.1
2.14.0-150400.9.9.1
go1.23-openssl
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 10 CVEs
 before 1.23.12-150600.13.9.1
1.23.12-150600.13.9.1
go1.23-openssl
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 10 CVEs
 before 1.23.12-150600.13.9.1
1.23.12-150600.13.9.1
go1.23-openssl
openSUSE:Leap 15.6
From an advisory covering 10 CVEs
 before 1.23.12-150600.13.9.1
1.23.12-150600.13.9.1
go1.24
SUSE:Linux Enterprise Module for Development Tools 15 SP6
 before 1.24.1-150000.1.12.1
1.24.1-150000.1.12.1
go1.24
openSUSE:Leap 15.6
 before 1.24.1-150000.1.12.1
1.24.1-150000.1.12.1
go1.23
SUSE:Linux Enterprise Module for Development Tools 15 SP6
 before 1.23.7-150000.1.24.1
1.23.7-150000.1.24.1
go1.23
openSUSE:Leap 15.6
 before 1.23.7-150000.1.24.1
1.23.7-150000.1.24.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 12
 before 3.3.1611.0-4.39.1
3.3.1611.0-4.39.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
 before 3.3.1611.0-150000.5.23.1
3.3.1611.0-150000.5.23.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
 before 3.3.1611.0-150000.5.23.1
3.3.1611.0-150000.5.23.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
 before 3.3.1611.0-150000.5.23.1
3.3.1611.0-150000.5.23.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
 before 3.3.1611.0-150000.5.23.1
3.3.1611.0-150000.5.23.1
amazon-ssm-agent
openSUSE:Leap 15.6
 before 3.3.1611.0-150000.5.23.1
3.3.1611.0-150000.5.23.1
apptainer
SUSE:Linux Enterprise Module for HPC 15 SP6
From an advisory covering 6 CVEs
 before 1.3.6-150600.4.9.1
1.3.6-150600.4.9.1
apptainer
openSUSE:Leap 15.6
From an advisory covering 6 CVEs
 before 1.3.6-150600.4.9.1
1.3.6-150600.4.9.1
helm
SUSE:Linux Enterprise Micro 5.5
 before 3.17.2-150000.1.44.1
3.17.2-150000.1.44.1
helm
SUSE:Linux Enterprise Module for Containers 15 SP6
 before 3.17.2-150000.1.44.1
3.17.2-150000.1.44.1
helm
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 3.17.2-150000.1.44.1
3.17.2-150000.1.44.1
helm
openSUSE:Leap 15.6
 before 3.17.2-150000.1.44.1
3.17.2-150000.1.44.1
skopeo
SUSE:Linux Enterprise Micro 5.5
 before 1.14.4-150300.11.22.1
1.14.4-150300.11.22.1
skopeo
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 1.14.4-150300.11.22.1
1.14.4-150300.11.22.1
skopeo
openSUSE:Leap 15.6
 before 1.14.4-150300.11.22.1
1.14.4-150300.11.22.1
warewulf4
SUSE:Linux Enterprise Module for HPC 15 SP6
From an advisory covering 2 CVEs
 before 4.6.0-150500.6.34.1
4.6.0-150500.6.34.1
warewulf4
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 4.6.0-150500.6.34.1
4.6.0-150500.6.34.1
warewulf4
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 4.6.0-150500.6.34.1
4.6.0-150500.6.34.1
warewulf4
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 4.6.0-150500.6.34.1
4.6.0-150500.6.34.1
cosign
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Manager Proxy 4.3
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
SUSE:Manager Server 4.3
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
cosign
openSUSE:Leap 15.6
From an advisory covering 6 CVEs
 before 2.5.0-150400.3.27.1
2.5.0-150400.3.27.1
skopeo
SUSE:Linux Micro 6.0
From an advisory covering 4 CVEs
 before 1.14.4-3.1
1.14.4-3.1
elemental-operator
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 1.6.8-1.1
1.6.8-1.1
helm
SUSE:Linux Micro 6.0
From an advisory covering 5 CVEs
 before 3.17.2-1.1
3.17.2-1.1
elemental-toolkit
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 2.1.3-1.1
2.1.3-1.1
helm
SUSE:Linux Micro 6.1
From an advisory covering 5 CVEs
 before 3.17.2-slfo.1.1_1.1
3.17.2-slfo.1.1_1.1
elemental-operator
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 1.7.2-slfo.1.1_1.1
1.7.2-slfo.1.1_1.1
elemental-toolkit
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 2.2.3-slfo.1.1_1.1
2.2.3-slfo.1.1_1.1
salt
SUSE:Linux Micro 6.0
From an advisory covering 13 CVEs
 before 3006.0-13.1
3006.0-13.1
ignition
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 2.19.0-2.1
2.19.0-2.1
apptainer
SUSE:Linux Enterprise Module for HPC 15 SP7
From an advisory covering 10 CVEs
 before 1.4.5-150600.4.12.1
1.4.5-150600.4.12.1
squashfuse
SUSE:Linux Enterprise Module for HPC 15 SP7
From an advisory covering 10 CVEs
 before 0.5.0-150600.3.2.1
0.5.0-150600.3.2.1
apptainer
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 10 CVEs
 before 1.4.5-150600.4.12.1
1.4.5-150600.4.12.1
squashfuse
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 10 CVEs
 before 0.5.0-150600.3.2.1
0.5.0-150600.3.2.1
apptainer
openSUSE:Leap 15.6
From an advisory covering 10 CVEs
 before 1.4.5-150600.4.12.1
1.4.5-150600.4.12.1
squashfuse
openSUSE:Leap 15.6
From an advisory covering 10 CVEs
 before 0.5.0-150600.3.2.1
0.5.0-150600.3.2.1
vexctl
openSUSE:Leap 15.6
From an advisory covering 9 CVEs
 before 0.4.1+git78.f951e3a-150000.1.11.1
0.4.1+git78.f951e3a-150000.1.11.1
amazon-ssm-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 21 CVEs
 before 3.3.4624.0-160000.1.1
3.3.4624.0-160000.1.1
amazon-ssm-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 21 CVEs
 before 3.3.4624.0-160000.1.1
3.3.4624.0-160000.1.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 21 CVEs
 before 3.3.4624.0-150000.5.37.1
3.3.4624.0-150000.5.37.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 21 CVEs
 before 3.3.4624.0-150000.5.37.1
3.3.4624.0-150000.5.37.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 21 CVEs
 before 3.3.4624.0-150000.5.37.1
3.3.4624.0-150000.5.37.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 21 CVEs
 before 3.3.4624.0-150000.5.37.1
3.3.4624.0-150000.5.37.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 12
From an advisory covering 21 CVEs
 before 3.3.4624.0-4.49.1
3.3.4624.0-4.49.1
containerized-data-importer
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 12 CVEs
 before 1.64.0-150700.9.11.1
1.64.0-150700.9.11.1
fdupes
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.61-90002.3.3.1
1.61-90002.3.3.1
go1.22-EL
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.22.9-90002.1.3.2
1.22.9-90002.1.3.2
golang-github-QubitProducts-exporter_exporter
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.4.0-90002.3.6.4
0.4.0-90002.3.6.4
golang-github-lusitaniae-apache_exporter
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.0.10-90002.3.9.4
1.0.10-90002.3.9.4
golang-github-prometheus-node_exporter
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.10.2-90002.3.3.4
1.10.2-90002.3.3.4
golang-github-prometheus-promu
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.17.0-90002.3.6.3
0.17.0-90002.3.6.3
golang-packaging
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 15.0.17-90002.3.3.1
15.0.17-90002.3.3.1
prometheus-postgres_exporter
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.10.1-90002.3.3.4
0.10.1-90002.3.3.4
saltbundle-libsodium
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.0.21-90002.3.3.1
1.0.21-90002.3.3.1
saltbundle-swig
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 4.1.1-90002.3.3.1
4.1.1-90002.3.3.1
saltbundle-zeromq
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 4.3.5-90002.3.9.1
4.3.5-90002.3.9.1
saltbundlepy
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 3.11.15-90002.4.12.2
3.11.15-90002.4.12.2
saltbundlepy-core
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 3.11.15-90002.4.12.2
3.11.15-90002.4.12.2
saltbundlepy-docker
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 7.1.0-90002.4.3.2
7.1.0-90002.4.3.2
saltbundlepy-lxml
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 6.0.2-90002.3.6.2
6.0.2-90002.3.6.2
saltbundlepy-m2crypto
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.45.1-90002.3.14.1
0.45.1-90002.3.14.1
saltbundlepy-passlib
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.7.4-90002.3.9.2
1.7.4-90002.3.9.2
saltbundlepy-passlib-test
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.7.4-90002.3.9.2
1.7.4-90002.3.9.2
saltbundlepy-pynacl
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.5.0-90002.3.6.2
1.5.0-90002.3.6.2
saltbundlepy-pyopenssl
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 23.2.0-90002.3.6.1
23.2.0-90002.3.6.1
saltbundlepy-requests
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 2.33.1-90002.4.3.2
2.33.1-90002.4.3.2
saltbundlepy-tornado
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 6.3.2-90002.4.9.2
6.3.2-90002.4.9.2
saltbundlepy-urllib3
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 2.0.7-90002.3.3.1
2.0.7-90002.3.3.1
saltbundlepy-wheel
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.45.1-90002.3.8.1
0.45.1-90002.3.8.1
saltbundlepy-wheel-test
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.45.1-90002.3.8.1
0.45.1-90002.3.8.1
scap-security-guide
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.1.79-90002.3.9.1
0.1.79-90002.3.9.1
spacecmd
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 5.2.8-90002.3.12.1
5.2.8-90002.3.12.1
uyuni-tools
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 5.2.12-90002.3.12.1
5.2.12-90002.3.12.1
venv-salt-minion
SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 3006.0-90002.5.19.1
3006.0-90002.5.19.1
golang-github-QubitProducts-exporter_exporter
SUSE:Multi Linux Manager Tools EL-9
From an advisory covering 3 CVEs
 before 0.4.0-90002.3.6.4
0.4.0-90002.3.6.4
golang-github-lusitaniae-apache_exporter
SUSE:Multi Linux Manager Tools EL-9
From an advisory covering 3 CVEs
 before 1.0.10-90002.3.9.4
1.0.10-90002.3.9.4
golang-github-prometheus-node_exporter
SUSE:Multi Linux Manager Tools EL-9
From an advisory covering 3 CVEs
 before 1.10.2-90002.3.3.4
1.10.2-90002.3.3.4
prometheus-postgres_exporter
SUSE:Multi Linux Manager Tools EL-9
From an advisory covering 3 CVEs
 before 0.10.1-90002.3.3.4
0.10.1-90002.3.3.4
scap-security-guide
SUSE:Multi Linux Manager Tools EL-9
From an advisory covering 3 CVEs
 before 0.1.79-90002.3.9.1
0.1.79-90002.3.9.1
spacecmd
SUSE:Multi Linux Manager Tools EL-9
From an advisory covering 3 CVEs
 before 5.2.8-90002.3.12.1
5.2.8-90002.3.12.1
uyuni-tools
SUSE:Multi Linux Manager Tools EL-9
From an advisory covering 3 CVEs
 before 5.2.12-90002.3.12.1
5.2.12-90002.3.12.1
venv-salt-minion
SUSE:Multi Linux Manager Tools EL-9
From an advisory covering 3 CVEs
 before 3006.0-90002.5.19.1
3006.0-90002.5.19.1
go1.22-EL
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.22.9-80002.1.3.5
1.22.9-80002.1.3.5
golang-github-QubitProducts-exporter_exporter
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.4.0-80002.3.6.6
0.4.0-80002.3.6.6
golang-github-lusitaniae-apache_exporter
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.0.10-80002.3.9.6
1.0.10-80002.3.9.6
golang-github-prometheus-node_exporter
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.10.2-80002.3.3.6
1.10.2-80002.3.3.6
golang-github-prometheus-promu
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.17.0-80002.3.6.5
0.17.0-80002.3.6.5
golang-packaging
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 15.0.17-80002.3.3.4
15.0.17-80002.3.3.4
prometheus-postgres_exporter
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.10.1-80002.3.3.6
0.10.1-80002.3.3.6
saltbundle-libsodium
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.0.21-80002.3.3.4
1.0.21-80002.3.3.4
saltbundle-swig
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 4.1.1-80002.3.3.4
4.1.1-80002.3.3.4
saltbundle-zeromq
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 4.3.5-80002.3.9.4
4.3.5-80002.3.9.4
saltbundlepy
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 3.11.15-80002.4.12.4
3.11.15-80002.4.12.4
saltbundlepy-core
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 3.11.15-80002.4.12.4
3.11.15-80002.4.12.4
saltbundlepy-docker
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 7.1.0-80002.4.3.5
7.1.0-80002.4.3.5
saltbundlepy-lxml
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 6.0.2-80002.3.6.5
6.0.2-80002.3.6.5
saltbundlepy-m2crypto
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.45.1-80002.3.14.2
0.45.1-80002.3.14.2
saltbundlepy-passlib
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.7.4-80002.3.9.6
1.7.4-80002.3.9.6
saltbundlepy-passlib-test
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.7.4-80002.3.9.6
1.7.4-80002.3.9.6
saltbundlepy-pynacl
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 1.5.0-80002.3.6.5
1.5.0-80002.3.6.5
saltbundlepy-pyopenssl
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 23.2.0-80002.3.6.5
23.2.0-80002.3.6.5
saltbundlepy-requests
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 2.33.1-80002.4.3.5
2.33.1-80002.4.3.5
saltbundlepy-tornado
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 6.3.2-80002.4.9.5
6.3.2-80002.4.9.5
saltbundlepy-urllib3
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 2.0.7-80002.3.3.4
2.0.7-80002.3.3.4
saltbundlepy-wheel
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.45.1-80002.3.8.2
0.45.1-80002.3.8.2
saltbundlepy-wheel-test
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.45.1-80002.3.8.2
0.45.1-80002.3.8.2
scap-security-guide
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 0.1.79-80002.3.9.6
0.1.79-80002.3.9.6
spacecmd
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 5.2.8-80002.3.12.4
5.2.8-80002.3.12.4
uyuni-tools
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 5.2.12-80002.3.12.4
5.2.12-80002.3.12.4
venv-salt-minion
SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update
From an advisory covering 3 CVEs
 before 3006.0-80002.5.19.1
3006.0-80002.5.19.1
golang-1.10
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~14.04.1
 None known
golang-1.10
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~16.04.11.10.4-2ubuntu1~16.04.2
 None known
golang-1.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.6-0ubuntu11.6-0ubuntu21.6-0ubuntu31.6-0ubuntu41.6-0ubuntu5
Show 5 moreShow less
1.6.1-0ubuntu11.6.2-0ubuntu5~16.041.6.2-0ubuntu5~16.04.21.6.2-0ubuntu5~16.04.31.6.2-0ubuntu5~16.04.4
 None known
golang-1.13
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.13.8-1ubuntu1~16.04.21.13.8-1ubuntu1~16.04.31.13.8-1ubuntu1~16.04.3+esm21.13.8-1ubuntu1~16.04.3+esm3
 None known
golang-1.18
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.18.1-1ubuntu1~16.04.61.18.1-1ubuntu1~16.04.6+esm1
 None known
golang-1.10
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.10~rc1-11.10~rc1-1ubuntu11.10~rc1-2ubuntu11.10~rc2-1ubuntu11.10-1ubuntu11.10.1-1ubuntu21.10.4-2ubuntu1~18.04.11.10.4-2ubuntu1~18.04.2
 None known
golang-1.13
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.13.8-1ubuntu1~18.04.21.13.8-1ubuntu1~18.04.31.13.8-1ubuntu1~18.04.41.13.8-1ubuntu1~18.04.4+esm1
 None known
golang-1.16
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.16.2-0ubuntu1~18.04.21.16.2-0ubuntu1~18.04.2+esm1
 None known
golang-1.18
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.18.1-1ubuntu1~18.04.31.18.1-1ubuntu1~18.04.41.18.1-1ubuntu1~18.04.4+esm1
 None known
golang-1.8
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.8.3-2ubuntu11.8.3-2ubuntu1.18.04.1
 None known
golang-1.9
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.9.1-2ubuntu11.9.2-1ubuntu11.9.2-3ubuntu11.9.3-1ubuntu11.9.4-1ubuntu1
 None known
golang-1.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.13.1-1ubuntu11.13.3-1ubuntu11.13.4-1ubuntu11.13.5-1ubuntu11.13.6-1ubuntu1
Show 5 moreShow less
1.13.6-2ubuntu11.13.7-1ubuntu11.13.8-1ubuntu11.13.8-1ubuntu1.11.13.8-1ubuntu1.2
 None known
golang-1.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.14~beta1-11.14~beta1-21.14~rc1-11.14-11.14.1-1
Show 4 moreShow less
1.14.2-11.14.2-1ubuntu11.14.3-2ubuntu2~20.04.11.14.3-2ubuntu2~20.04.2
 None known
golang-1.16
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.16.2-0ubuntu1~20.041.16.2-0ubuntu1~20.04.11.16.2-0ubuntu1~20.04.1+esm1
 None known
golang-1.18
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.18.1-1ubuntu1~20.04.11.18.1-1ubuntu1~20.04.21.18.1-1ubuntu1~20.04.3
 None known
golang-1.20
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.20.3-1ubuntu0.1~20.041.20.3-1ubuntu0.1~20.04.1
 None known
golang-1.21
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.21.1-1~ubuntu20.04.11.21.1-1~ubuntu20.04.21.21.1-1~ubuntu20.04.3
 None known
golang-1.22
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.22.2-2~20.04.11.22.2-2~20.04.21.22.2-2~20.04.3
 None known
golang-1.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.17-1ubuntu21.17.3-1ubuntu11.17.3-1ubuntu21.17.13-3ubuntu11.17.13-3ubuntu1.21.17.13-3ubuntu1.3
 None known
golang-1.18
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.18~beta1-0ubuntu11.18~beta2-1ubuntu11.18~beta2-1ubuntu21.18~rc1-1ubuntu11.18-1ubuntu1
Show 4 moreShow less
1.18.1-1ubuntu11.18.1-1ubuntu1.11.18.1-1ubuntu1.21.18.1-1ubuntu1.3
 None known
golang-1.20
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.20.3-1ubuntu0.1~22.041.20.3-1ubuntu0.1~22.04.1
 None known
golang-1.21
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.21.1-1~ubuntu22.04.11.21.1-1~ubuntu22.04.21.21.1-1~ubuntu22.04.31.21.1-1~ubuntu22.04.4
 None known
golang-1.22
Ubuntu:22.04:LTS
 before 1.22.2-2~22.04.3, plus listed versions
1.22.2-2~22.041.22.2-2~22.04.11.22.2-2~22.04.2
1.22.2-2~22.04.3
golang-1.23
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.23.1-1~22.041.23.1-1~22.04.21.23.1-1~22.04.3
 None known
golang-1.24
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.24.4-1ubuntu1~22.04.11.24.4-1ubuntu1~22.04.21.24.13-2~22.04.11.24.13-2~22.04.2
 None known
golang-1.13
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1.13.8-1ubuntu21.13.8-1ubuntu2.22.04.11.13.8-1ubuntu2.22.04.1+esm11.13.8-1ubuntu2.22.04.2
 None known
golang-1.21
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.21.1-11.21.3-11.21.4-11.21.5-11.21.6-1
Show 6 moreShow less
1.21.7-11.21.7-21.21.8-11.21.8-1build11.21.9-11.21.9-1ubuntu0.1
 None known
golang-1.22
Ubuntu:24.04:LTS
 before 1.22.2-2ubuntu0.4, plus listed versions
1.22~rc1-21.22.0-11.22.0-21.22.1-11.22.1-1build1
Show 4 moreShow less
1.22.2-21.22.2-2ubuntu0.11.22.2-2ubuntu0.21.22.2-2ubuntu0.3
1.22.2-2ubuntu0.4
golang-1.23
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.23.1-1~24.041.23.1-1~24.04.1
 None known
golang-1.24
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.24.4-1ubuntu1~24.04.11.24.4-1ubuntu1~24.04.21.24.13-2~24.04.1
 None known
golang-1.23
Ubuntu:25.10
 All versions, plus listed versions
1.23.8-11.23.10-11.23.10-1ubuntu0.2
 None known
golang-1.24
Ubuntu:25.10
 All versions, plus listed versions
1.24.2-11.24.2-21.24.4-11.24.4-1ubuntu1
 None known
golang-1.23
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.23.10-1
 None known
golang-1.24
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.24.4-1ubuntu11.24.9-11.24.13-2
 None known
golang-1.22
Ubuntu:22.04:LTS
From an advisory covering 5 CVEs
 before 1.22.2-2~22.04.3, plus listed versions
1.22.2-2~22.041.22.2-2~22.04.11.22.2-2~22.04.2
1.22.2-2~22.04.3
golang-1.22
Ubuntu:24.04:LTS
From an advisory covering 5 CVEs
 before 1.22.2-2ubuntu0.4, plus listed versions
1.22~rc1-21.22.0-11.22.0-21.22.1-11.22.1-1build1
Show 4 moreShow less
1.22.2-21.22.2-2ubuntu0.11.22.2-2ubuntu0.21.22.2-2ubuntu0.3
1.22.2-2ubuntu0.4
go1.23
openSUSE:Tumbleweed
 before 1.23.7-1.1
1.23.7-1.1
go1.24
openSUSE:Tumbleweed
 before 1.24.1-1.1
1.24.1-1.1
teleport
openSUSE:Tumbleweed
 before 17.3.3-1.1
17.3.3-1.1
amazon-ssm-agent
openSUSE:Tumbleweed
 before 3.3.1957.0-2.1
3.3.1957.0-2.1
govulncheck-vulndb
openSUSE:Tumbleweed
From an advisory covering 31 CVEs
 before 0.0.20250312T181707-1.1
0.0.20250312T181707-1.1
helm
openSUSE:Tumbleweed
 before 3.17.2-1.1
3.17.2-1.1
apptainer
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 1.3.6-5.1
1.3.6-5.1
warewulf4
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 4.6.0-2.1
4.6.0-2.1
cosign
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 2.5.0-1.1
2.5.0-1.1
golang-github-prometheus-node_exporter
openSUSE:Tumbleweed
 before 1.9.1-2.1
1.9.1-2.1
rclone
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 1.69.2-1.1
1.69.2-1.1
grafana
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 11.6.1-1.1
11.6.1-1.1
prometheus-blackbox_exporter
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.24.0-3.1
0.24.0-3.1
golang-github-prometheus-alertmanager
openSUSE:Tumbleweed
 before 0.28.1-2.1
0.28.1-2.1
opa
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.6.0-1.1
1.6.0-1.1
cheat
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 4.4.2-2.1
4.4.2-2.1
helm3
openSUSE:Tumbleweed
From an advisory covering 20 CVEs
 before 3.19.2-1.1
3.19.2-1.1
cheat
openSUSE:Leap 16.0
From an advisory covering 8 CVEs
 before 4.4.2-bp160.2.1
4.4.2-bp160.2.1
vexctl
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 0.4.1+git78.f951e3a-1.1
0.4.1+git78.f951e3a-1.1
velociraptor
openSUSE:Tumbleweed
From an advisory covering 49 CVEs
 before 0.7.0.4.git185.a5708584-2.1
0.7.0.4.git185.a5708584-2.1
containerized-data-importer1.65
openSUSE:Tumbleweed
From an advisory covering 13 CVEs
 before 1.65.0-2.1
1.65.0-2.1
amazon-ssm-agent
openSUSE:Leap 16.0
From an advisory covering 21 CVEs
 before 3.3.4624.0-160000.1.1
3.3.4624.0-160000.1.1
golang-github-prometheus-alertmanager
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.28.1-bp160.1.1
0.28.1-bp160.1.1
vexctl
openSUSE:Leap 16.0
From an advisory covering 9 CVEs
 before 0.4.4+git20.5d61136-160000.1.1
0.4.4+git20.5d61136-160000.1.1
govulncheck-vulndb
openSUSE:Leap 16.0
From an advisory covering 1734 CVEs
 before 0.0.20260723T184607-160000.1.1
0.0.20260723T184607-160000.1.1
containerized-data-importer1.65
openSUSE:Leap 16.0
From an advisory covering 39 CVEs
 before 1.65.0-160000.3.1
1.65.0-160000.3.1
prometheus-blackbox_exporter
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 0.26.0-bp160.1.1
0.26.0-bp160.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubJoshuaProvoste/CVE-2025-228702025-06-08

History

History
RecordedChangedSources
affected
factsOSV
affected, aliases, aliases_more, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-22870 is a medium vulnerability (CVSS 4.4) in Go Standard Library Net/http, published March 6, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 36th percentile. Fixed in golang.org/x/net 0.36.0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 51 package rows and 1,921 references. The JSON record has them. Also not on the record: 2 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 52 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open