Every CVE Search/ Get API key

CVE-2026-33814

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

7.5 HighFix available

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.84%Up 0.8 points since May 8, 2026
90%50%10%1%

What each source reports

NVD Score used 7.5

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
CVE-2026-33814
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835, CWE-606
Updated
2026-11-02
CVE List 7.5

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
CVE-2026-33814
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-606
Updated
2026-11-02
EUVDEUVD-2026-28420 7.5

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
EUVD-2026-28420
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-33814 7.5
Record
BELL-CVE-2026-33814
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
CVE-2026-33814
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-33814 7.5

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
DEBIAN-CVE-2026-33814
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVOESA-2026-3560 7.5

buildah security update

The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container's root file system for manipulation * save container's root file system layer to create a new image * delete a working container or an image

Security Fix(es):

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.(CVE-2026-33814)

Record
OESA-2026-3560
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-3561 7.5

buildah security update

The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container's root file system for manipulation * save container's root file system layer to create a new image * delete a working container or an image

Security Fix(es):

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.(CVE-2026-33814)

Record
OESA-2026-3561
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-3562 7.5

buildah security update

The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container's root file system for manipulation * save container's root file system layer to create a new image * delete a working container or an image

Security Fix(es):

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.(CVE-2026-33814)

Record
OESA-2026-3562
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-3563 7.5

buildah security update

The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container's root file system for manipulation * save container's root file system layer to create a new image * delete a working container or an image

Security Fix(es):

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.(CVE-2026-33814)

Record
OESA-2026-3563
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:22112 7.5

Red Hat Security Advisory: go-toolset:rhel8 security update

Record
RHSA-2026:22112
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:22120 7.5

Red Hat Security Advisory: golang security update

Record
RHSA-2026:22120
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:22121 7.5

Red Hat Security Advisory: golang security update

Record
RHSA-2026:22121
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:23262 8.2

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:23262
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:23264 8.2

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:23264
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:49702 8.8

Red Hat Security Advisory: golang security update

Record
RHSA-2026:49702
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:49712 8.8

Red Hat Security Advisory: golang security update

Record
RHSA-2026:49712
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:57649 8.8

Red Hat Security Advisory: golang security update

Record
RHSA-2026:57649
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:57845 8.2

Red Hat Security Advisory: Red Hat build of MicroShift 4.16.69 security update

Record
RHSA-2026:57845
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:60668 7.5

Red Hat Security Advisory: Red Hat build of MicroShift 4.21.31 security update

Record
RHSA-2026:60668
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:61253 8.8

Red Hat Security Advisory: golang security update

Record
RHSA-2026:61253
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:63091 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.22.13 packages and security update

Record
RHSA-2026:63091
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:63636 7.5

Red Hat Security Advisory: Red Hat build of MicroShift 4.19.46 security update

Record
RHSA-2026:63636
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:63637 7.5

Red Hat Security Advisory: Red Hat build of MicroShift 4.20.37 security update

Record
RHSA-2026:63637
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:63639 7.5

Red Hat Security Advisory: Red Hat build of MicroShift 4.22.13 security update

Record
RHSA-2026:63639
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:66350 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.21.33 packages and security update

Record
RHSA-2026:66350
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:71443 8.1

Red Hat Security Advisory: OpenShift Container Platform 4.21.35 packages and security update

Record
RHSA-2026:71443
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:74376 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.20.41 packages and security update

Record
RHSA-2026:74376
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:74427 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.22.17 packages and security update

Record
RHSA-2026:74427
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:74581 7.5

Red Hat Security Advisory: skopeo security update

Record
RHSA-2026:74581
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:77547 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.17.59 packages and security update

Record
RHSA-2026:77547
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:79034 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.18.57 packages and security update

Record
RHSA-2026:79034
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:79166 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.19.51 packages and security update

Record
RHSA-2026:79166
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80167 8.1

Red Hat Security Advisory: Red Hat build of MicroShift 4.18.57 security update

Record
RHSA-2026:80167
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:22112 7.5

Important: go-toolset:rhel8 security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

  • net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)

  • cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)

  • html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)

  • cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)

  • net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)

  • net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)

  • net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)

  • net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)

  • cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)

  • html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)

  • net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows (CVE-2026-39836)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:22112
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:22120 7.5

Important: golang security update

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)

  • cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)

  • html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)

  • cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)

  • net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)

  • net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)

  • net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)

  • net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)

  • cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)

  • html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)

  • net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows (CVE-2026-39836)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:22120
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:22121 7.5

Important: golang security update

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)

  • cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)

  • html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)

  • cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)

  • net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)

  • net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)

  • net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)

  • net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)

  • cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)

  • html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)

  • net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows (CVE-2026-39836)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:22121
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-APP-GOBINARY-CVE-2026-33814 7.5

CVE-2026-33814 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-33814 in the golang.org/x/net package for Root:Go. Multiple fixed versions available.

Record
ROOT-APP-GOBINARY-CVE-2026-33814
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVUBUNTU-CVE-2026-33814 7.5

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
UBUNTU-CVE-2026-33814
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVALSA-2026:22112 No score

Important: go-toolset:rhel8 security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

  • net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
  • cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)
  • html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)
  • cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)
  • net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)
  • net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)
  • net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
  • net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)
  • cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)
  • html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)
  • net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows (CVE-2026-39836)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:22112
Updated
2026-11-02
OSVALSA-2026:22121 No score

Important: golang security update

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
  • cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)
  • html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)
  • cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)
  • net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)
  • net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)
  • net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
  • net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)
  • cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)
  • html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)
  • net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows (CVE-2026-39836)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:22121
Updated
2026-11-02
OSVAZL-111659 No score

CVE-2026-33814 affecting package kubevirt-openvmm 1.9.0-1

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-111659
Updated
2026-11-05
OSVAZL-86288 No score

CVE-2026-33814 affecting package golang for versions less than 1.26.3-1

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86288
Updated
2026-11-05
OSVAZL-86394 No score

CVE-2026-33814 affecting package azl-otel-collector 0.127.0-1

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86394
Updated
2026-11-05
OSVAZL-86396 No score

CVE-2026-33814 affecting package buildah 1.43.1-3

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86396
Updated
2026-11-05
OSVAZL-86399 No score

CVE-2026-33814 affecting package cri-o 1.30.1-1

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86399
Updated
2026-11-05
OSVAZL-86409 No score

CVE-2026-33814 affecting package kata-containers-preview 3.27.0~preview2-2

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86409
Updated
2026-11-05
OSVAZL-86420 No score

CVE-2026-33814 affecting package podman 5.6.1-10

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86420
Updated
2026-11-05
OSVAZL-86424 No score

CVE-2026-33814 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86424
Updated
2026-11-05
OSVAZL-86430 No score

CVE-2026-33814 affecting package azurelinux-image-tools for versions less than 1.4.0-2

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86430
Updated
2026-11-02
OSVAZL-86433 No score

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86433
Updated
2026-11-05
OSVAZL-86445 No score

CVE-2026-33814 affecting package containerd2 for versions less than 2.2.4-2

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86445
Updated
2026-11-02
OSVAZL-86448 No score

CVE-2026-33814 affecting package containerized-data-importer for versions less than 1.62.0-6

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Record
AZL-86448
Updated
2026-11-05

Affected products

Show 97 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
delve
AlmaLinux:8
From an advisory covering 13 CVEs
 before 1.25.2-1.module_el8.10.0+4074+24330916
1.25.2-1.module_el8.10.0+4074+24330916
go-toolset
AlmaLinux:8
From an advisory covering 13 CVEs
 before 1.25.10-1.module_el8.10.0+4187+c45165c4
1.25.10-1.module_el8.10.0+4187+c45165c4
golang
AlmaLinux:8
From an advisory covering 13 CVEs
 before 1.25.10-1.module_el8.10.0+4187+c45165c4
1.25.10-1.module_el8.10.0+4187+c45165c4
golang-bin
AlmaLinux:8
From an advisory covering 13 CVEs
 before 1.25.10-1.module_el8.10.0+4187+c45165c4
1.25.10-1.module_el8.10.0+4187+c45165c4
golang-docs
AlmaLinux:8
From an advisory covering 13 CVEs
 before 1.25.10-1.module_el8.10.0+4187+c45165c4
1.25.10-1.module_el8.10.0+4187+c45165c4
golang-misc
AlmaLinux:8
From an advisory covering 13 CVEs
 before 1.25.10-1.module_el8.10.0+4187+c45165c4
1.25.10-1.module_el8.10.0+4187+c45165c4
golang-race
AlmaLinux:8
From an advisory covering 13 CVEs
 before 1.25.10-1.module_el8.10.0+4187+c45165c4
1.25.10-1.module_el8.10.0+4187+c45165c4
golang-src
AlmaLinux:8
From an advisory covering 13 CVEs
 before 1.25.10-1.module_el8.10.0+4187+c45165c4
1.25.10-1.module_el8.10.0+4187+c45165c4
golang-tests
AlmaLinux:8
From an advisory covering 13 CVEs
 before 1.25.10-1.module_el8.10.0+4187+c45165c4
1.25.10-1.module_el8.10.0+4187+c45165c4
go-toolset
AlmaLinux:9
From an advisory covering 11 CVEs
 before 1.26.3-1.el9_8
1.26.3-1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
golang
AlmaLinux:9
From an advisory covering 11 CVEs
 before 1.26.3-1.el9_8
1.26.3-1.el9_8
golang-bin
AlmaLinux:9
From an advisory covering 11 CVEs
 before 1.26.3-1.el9_8
1.26.3-1.el9_8
golang-docs
AlmaLinux:9
From an advisory covering 11 CVEs
 before 1.26.3-1.el9_8
1.26.3-1.el9_8
golang-misc
AlmaLinux:9
From an advisory covering 11 CVEs
 before 1.26.3-1.el9_8
1.26.3-1.el9_8
golang-race
AlmaLinux:9
From an advisory covering 11 CVEs
 before 1.26.3-1.el9_8
1.26.3-1.el9_8
golang-src
AlmaLinux:9
From an advisory covering 11 CVEs
 before 1.26.3-1.el9_8
1.26.3-1.el9_8
golang-tests
AlmaLinux:9
From an advisory covering 11 CVEs
 before 1.26.3-1.el9_8
1.26.3-1.el9_8
kubevirt-openvmm
Azure Linux:3
 through 1.9.0-1 None known
golang
Azure Linux:3
 before 1.26.3-1
1.26.3-1
azl-otel-collector
Azure Linux:3
 through 0.127.0-1 None known
buildah
Azure Linux:3
 through 1.43.1-3 None known
cri-o
Azure Linux:3
 through 1.30.1-1 None known
kata-containers-preview
Azure Linux:3
 through 3.27.0~preview2-2 None known
podman
Azure Linux:3
 through 5.6.1-10 None known
application-gateway-kubernetes-ingress
Azure Linux:3
 before 1.7.7-5
1.7.7-5
azurelinux-image-tools
Azure Linux:3
 before 1.4.0-2
1.4.0-2
cert-manager
Azure Linux:3
 before 1.12.15-9
1.12.15-9
containerd2
Azure Linux:3
 before 2.2.4-2
2.2.4-2
containerized-data-importer
Azure Linux:3
 before 1.62.0-6
1.62.0-6
etcd
Azure Linux:3
 before 3.5.30-2
3.5.30-2
ignition-flatcar
Azure Linux:3
 before 2.22.0-5
2.22.0-5
kata-containers
Azure Linux:3
 before 3.19.1.kata3-4
3.19.1.kata3-4
kata-containers-cc
Azure Linux:3
 before 3.15.0.aks0-12
3.15.0.aks0-12
kubevirt
Azure Linux:3
 before 1.7.1-7
1.7.1-7
packer
Azure Linux:3
 before 1.9.5-15
1.9.5-15
go
Alpaquita:23
 1.19.7-r0 up to 1.25.10-r0
1.25.10-r0
go
Alpaquita:25
 1.24.3-r0 up to 1.25.10-r0
1.25.10-r0
go
Alpaquita:stream
 1.20.5-r2 up to 1.26.3-r0
1.26.3-r0
go
BellSoft Hardened Containers:23
 1.19.7-r0 up to 1.25.10-r0
1.25.10-r0
go
BellSoft Hardened Containers:25
 1.24.3-r0 up to 1.25.10-r0
1.25.10-r0
go
BellSoft Hardened Containers:stream
 1.20.5-r2 up to 1.26.3-r0
1.26.3-r0
golang
Bitnami
 before 1.25.10, 1.26.0-0 up to 1.26.3
1.25.101.26.3
go-toolset
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 1.25.7-1.el9_6.tuxcare.els8
1.25.7-1.el9_6.tuxcare.els8
golang
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 1.25.7-1.el9_6.tuxcare.els8
1.25.7-1.el9_6.tuxcare.els8
golang-bin
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 1.25.7-1.el9_6.tuxcare.els8
1.25.7-1.el9_6.tuxcare.els8
golang-docs
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 1.25.7-1.el9_6.tuxcare.els8
1.25.7-1.el9_6.tuxcare.els8
golang-misc
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 1.25.7-1.el9_6.tuxcare.els8
1.25.7-1.el9_6.tuxcare.els8
golang-race
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 1.25.7-1.el9_6.tuxcare.els8
1.25.7-1.el9_6.tuxcare.els8
golang-src
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 1.25.7-1.el9_6.tuxcare.els8
1.25.7-1.el9_6.tuxcare.els8
golang-tests
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 1.25.7-1.el9_6.tuxcare.els8
1.25.7-1.el9_6.tuxcare.els8
golang-golang-x-net
Debian:12
 All versions, plus listed versions
1:0.10.0-11:0.11.0-11:0.14.0-11:0.15.0-11:0.15.0-2
Show 24 moreShow less
1:0.17.0+dfsg-11:0.19.0+dfsg-11:0.20.0+dfsg-11:0.21.0+dfsg-11:0.22.0+dfsg-11:0.23.0+dfsg-11:0.24.0+dfsg-11:0.25.0+dfsg-11:0.26.0+dfsg-11:0.26.0+dfsg-21:0.27.0-11:0.27.0-21:0.47.0-11:0.47.0-21:0.53.0-11:0.53.0-21:0.53.0-2~bpo13+11:0.55.0-11:0.56.0-11:0.57.0-11:0.58.0-11:0.60.0-11:0.61.0-11:0.7.0+dfsg-1
 None known
golang-golang-x-net
Debian:13
 All versions, plus listed versions
1:0.27.0-21:0.47.0-11:0.47.0-21:0.53.0-11:0.53.0-2
Show 7 moreShow less
1:0.53.0-2~bpo13+11:0.55.0-11:0.56.0-11:0.57.0-11:0.58.0-11:0.60.0-11:0.61.0-1
 None known
golang-golang-x-net
Debian:14
 before 1:0.53.0-1, plus listed versions
1:0.27.0-21:0.47.0-11:0.47.0-2
1:0.53.0-1
golang.org/x/net
Go
 before 0.53.0
0.53.0
stdlib
Go
 before 1.25.10, 1.26.0-0 up to 1.26.3
1.25.101.26.3
buildah
openEuler:22.03-LTS-SP4
 before 1.26.1-14.oe2203sp4
1.26.1-14.oe2203sp4
buildah
openEuler:24.03-LTS-SP1
 before 1.34.1-16.oe2403sp1
1.34.1-16.oe2403sp1
buildah
openEuler:24.03-LTS-SP3
 before 1.34.1-16.oe2403sp3
1.34.1-16.oe2403sp3
buildah
openEuler:24.03-LTS-SP4
 before 1.34.1-16.oe2403sp4
1.34.1-16.oe2403sp4
delve
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.2-1.module+el8.10.0+23746+9db33b5e
0:1.25.2-1.module+el8.10.0+23746+9db33b5e
delve-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.2-1.module+el8.10.0+23746+9db33b5e
0:1.25.2-1.module+el8.10.0+23746+9db33b5e
delve-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.2-1.module+el8.10.0+23746+9db33b5e
0:1.25.2-1.module+el8.10.0+23746+9db33b5e
go-toolset
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
golang
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
golang-bin
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
golang-docs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
golang-misc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
golang-race
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
golang-src
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
golang-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 13 CVEs
 before 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
0:1.25.10-1.module+el8.10.0+24308+5c4a16b7
go-toolset
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:1.26.3-4.el10_2
0:1.26.3-4.el10_2
golang
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:1.26.3-4.el10_2
0:1.26.3-4.el10_2
golang-bin
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:1.26.3-4.el10_2
0:1.26.3-4.el10_2
golang-docs
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:1.26.3-4.el10_2
0:1.26.3-4.el10_2
golang-misc
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:1.26.3-4.el10_2
0:1.26.3-4.el10_2
golang-race
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:1.26.3-4.el10_2
0:1.26.3-4.el10_2
golang-src
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:1.26.3-4.el10_2
0:1.26.3-4.el10_2
golang-tests
Red Hat:enterprise_linux:10.2
From an advisory covering 11 CVEs
 before 0:1.26.3-4.el10_2
0:1.26.3-4.el10_2
go-toolset
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.26.3-1.el9_8
0:1.26.3-1.el9_8
golang
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.26.3-1.el9_8
0:1.26.3-1.el9_8
golang-bin
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.26.3-1.el9_8
0:1.26.3-1.el9_8
golang-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.26.3-1.el9_8
0:1.26.3-1.el9_8
golang-misc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.26.3-1.el9_8
0:1.26.3-1.el9_8
golang-race
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.26.3-1.el9_8
0:1.26.3-1.el9_8
golang-src
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.26.3-1.el9_8
0:1.26.3-1.el9_8
golang-tests
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:1.26.3-1.el9_8
0:1.26.3-1.el9_8
golang1.25
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.25.11-2.hum1
0:1.25.11-2.hum1
golang1.25-bin
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.25.11-2.hum1
0:1.25.11-2.hum1
golang1.25-docs
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.25.11-2.hum1
0:1.25.11-2.hum1
golang1.25-misc
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.25.11-2.hum1
0:1.25.11-2.hum1
golang1.25-src
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.25.11-2.hum1
0:1.25.11-2.hum1
golang1.25-tests
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.25.11-2.hum1
0:1.25.11-2.hum1
golang1.26
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.26.4-2.hum1
0:1.26.4-2.hum1
golang1.26-bin
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.26.4-2.hum1
0:1.26.4-2.hum1
golang1.26-docs
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.26.4-2.hum1
0:1.26.4-2.hum1
golang1.26-misc
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.26.4-2.hum1
0:1.26.4-2.hum1
golang1.26-src
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.26.4-2.hum1
0:1.26.4-2.hum1
golang1.26-tests
Red Hat:hummingbird:1
From an advisory covering 14 CVEs
 before 0:1.26.4-2.hum1
0:1.26.4-2.hum1
go-toolset
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 16 CVEs
 before 0:1.26.5-1.el10_0
0:1.26.5-1.el10_0
golang
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 16 CVEs
 before 0:1.26.5-1.el10_0
0:1.26.5-1.el10_0
golang-bin
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 16 CVEs
 before 0:1.26.5-1.el10_0
0:1.26.5-1.el10_0
golang-docs
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 16 CVEs
 before 0:1.26.5-1.el10_0
0:1.26.5-1.el10_0
golang-misc
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 16 CVEs
 before 0:1.26.5-1.el10_0
0:1.26.5-1.el10_0
golang-race
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 16 CVEs
 before 0:1.26.5-1.el10_0
0:1.26.5-1.el10_0
golang-src
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 16 CVEs
 before 0:1.26.5-1.el10_0
0:1.26.5-1.el10_0
golang-tests
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 16 CVEs
 before 0:1.26.5-1.el10_0
0:1.26.5-1.el10_0
go-toolset
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_6
0:1.26.5-1.el9_6
golang
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_6
0:1.26.5-1.el9_6
golang-bin
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_6
0:1.26.5-1.el9_6
golang-docs
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_6
0:1.26.5-1.el9_6
golang-misc
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_6
0:1.26.5-1.el9_6
golang-race
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_6
0:1.26.5-1.el9_6
golang-src
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_6
0:1.26.5-1.el9_6
golang-tests
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_6
0:1.26.5-1.el9_6
go-toolset
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_4
0:1.26.5-1.el9_4
golang
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_4
0:1.26.5-1.el9_4
golang-bin
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_4
0:1.26.5-1.el9_4
golang-docs
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 17 CVEs
 before 0:1.26.5-1.el9_4
0:1.26.5-1.el9_4
delve
Rocky Linux:8
From an advisory covering 11 CVEs
 before 0:1.25.2-1.module+el8.10.0+40035+ee0a7047
0:1.25.2-1.module+el8.10.0+40035+ee0a7047
golang
Rocky Linux:8
From an advisory covering 11 CVEs
 before 0:1.25.10-1.module+el8.10.0+40200+0fd0f175
0:1.25.10-1.module+el8.10.0+40200+0fd0f175
golang
Rocky Linux:10
From an advisory covering 11 CVEs
 before 0:1.26.3-4.el10_2
0:1.26.3-4.el10_2
golang
Rocky Linux:9
From an advisory covering 11 CVEs
 before 0:1.26.3-1.el9_8
0:1.26.3-1.el9_8
golang.org/x/net
Root:Go
 before v0.42.0-aikido.3
v0.42.0-aikido.3v0.39.0-aikido.4v0.34.0-aikido.3v0.33.0-aikido.7v0.38.0-aikido.1v0.35.0-aikido.3v0.38.0-aikido.2v0.26.0-aikido.1v0.35.0-aikido.2v0.40.0-aikido.1v0.26.0-aikido.2v0.50.0-aikido.2v0.38.0-aikido.3v0.41.0-aikido.1v0.42.0-aikido.1v0.48.0-aikido.1v0.33.0-aikido.5v0.39.0-aikido.1v0.52.0-aikido.1v0.47.0-aikido.1v0.39.0-aikido.2v0.35.0-aikido.1v0.33.0-aikido.6v0.39.0-aikido.3v0.42.0-aikido.2v0.48.0-aikido.2v0.34.0-aikido.1v0.52.0-aikido.2v0.34.0-aikido.2v0.37.0-aikido.1v0.47.0-aikido.2v0.43.0-aikido.1v0.29.0-aikido.1v0.41.0-aikido.2v0.40.0-aikido.2v0.38.0-aikido.4v0.23.0-aikido.1v0.29.0-aikido.2v0.29.0-aikido.3v0.47.0-aikido.3v0.35.0-aikido.4v0.38.0-aikido.5v0.40.0-aikido.3v0.35.0-aikido.5v0.41.0-aikido.3v0.47.0-aikido.4v0.49.0-aikido.1v0.52.0-aikido.3v0.52.0-aikido.4v0.29.0-aikido.4v0.38.0-aikido.6v0.41.0-aikido.4v0.40.0-aikido.4v0.47.0-aikido.5v0.52.0-aikido.5v0.29.0-aikido.5v0.43.0-aikido.2v0.23.0-aikido.2v0.23.0-aikido.3v0.29.0-aikido.6v0.39.0-aikido.5v0.42.0-aikido.4v0.39.0-aikido.6
rootio-golang.org/x/net
Root:Go
 before v0.42.0-root.io.3
v0.42.0-root.io.3v0.39.0-root.io.4v0.38.0-root.io.1v0.34.0-root.io.3v0.33.0-root.io.7v0.35.0-root.io.3v0.38.0-root.io.2v0.26.0-root.io.1v0.41.0-root.io.1v0.35.0-root.io.2v0.40.0-root.io.1v0.26.0-root.io.2v0.38.0-root.io.3v0.50.0-root.io.2v0.42.0-root.io.1v0.48.0-root.io.1v0.33.0-root.io.5v0.39.0-root.io.1v0.52.0-root.io.1v0.47.0-root.io.1v0.39.0-root.io.2v0.35.0-root.io.1v0.33.0-root.io.6v0.39.0-root.io.3v0.42.0-root.io.2v0.48.0-root.io.2v0.34.0-root.io.1v0.52.0-root.io.2v0.34.0-root.io.2v0.37.0-root.io.1v0.47.0-root.io.2v0.43.0-root.io.1v0.29.0-root.io.1v0.41.0-root.io.2v0.40.0-root.io.2v0.38.0-root.io.4v0.23.0-root.io.1v0.29.0-root.io.2v0.29.0-root.io.3v0.47.0-root.io.3v0.35.0-root.io.4v0.38.0-root.io.5v0.40.0-root.io.3v0.35.0-root.io.5v0.41.0-root.io.3v0.47.0-root.io.4v0.49.0-root.io.1v0.52.0-root.io.3v0.52.0-root.io.4v0.29.0-root.io.4v0.38.0-root.io.6v0.41.0-root.io.4v0.40.0-root.io.4v0.47.0-root.io.5v0.52.0-root.io.5v0.29.0-root.io.5v0.43.0-root.io.2v0.23.0-root.io.2v0.23.0-root.io.3v0.29.0-root.io.6v0.39.0-root.io.5v0.42.0-root.io.4v0.39.0-root.io.6
helm
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 3.21.0-160000.1.1
3.21.0-160000.1.1
helm
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 3.21.0-160000.1.1
3.21.0-160000.1.1
elemental-operator
SUSE:Linux Micro 6.0
From an advisory covering 9 CVEs
 before 1.6.11-1.1
1.6.11-1.1
elemental-operator
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 1.7.5-slfo.1.1_1.1
1.7.5-slfo.1.1_1.1
google-guest-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 6 CVEs
 before 20260430.00-160000.1.1
20260430.00-160000.1.1
google-guest-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 6 CVEs
 before 20260430.00-160000.1.1
20260430.00-160000.1.1
google-guest-agent
SUSE:Linux Micro 6.1
From an advisory covering 6 CVEs
 before 20260430.00-slfo.1.1_1.1
20260430.00-slfo.1.1_1.1
distribution
SUSE:Linux Enterprise Server 16.0
From an advisory covering 16 CVEs
 before 3.1.1-160000.1.1
3.1.1-160000.1.1
distribution
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 16 CVEs
 before 3.1.1-160000.1.1
3.1.1-160000.1.1
ignition
SUSE:Linux Enterprise Server 16.0
 before 2.21.0-160000.4.1
2.21.0-160000.4.1
ignition
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 2.21.0-160000.4.1
2.21.0-160000.4.1
mcphost
SUSE:Linux Enterprise Server 16.0
From an advisory covering 20 CVEs
 before 0.34.0-160000.2.1
0.34.0-160000.2.1
mcphost
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 20 CVEs
 before 0.34.0-160000.2.1
0.34.0-160000.2.1
ignition
SUSE:Linux Micro 6.2
 before 2.21.0-160000.4.1
2.21.0-160000.4.1
mcphost
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 0.34.0-160000.2.1
0.34.0-160000.2.1
google-osconfig-agent
SUSE:Linux Micro 6.0
From an advisory covering 23 CVEs
 before 20260615.01-1.1
20260615.01-1.1
google-osconfig-agent
SUSE:Linux Micro 6.1
From an advisory covering 22 CVEs
 before 20260615.01-slfo.1.1_1.1
20260615.01-slfo.1.1_1.1
docker
SUSE:Linux Micro 6.2
From an advisory covering 4 CVEs
 before 29.4.0_ce-160000.7.1
29.4.0_ce-160000.7.1
amazon-ecs-init
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 1.103.2-160000.1.1
1.103.2-160000.1.1
amazon-ecs-init
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 1.103.2-160000.1.1
1.103.2-160000.1.1
google-cloud-sap-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 3.15-160000.1.1
3.15-160000.1.1
google-cloud-sap-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 3.15-160000.1.1
3.15-160000.1.1
docker
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 29.4.0_ce-160000.7.1
29.4.0_ce-160000.7.1
docker
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 29.4.0_ce-160000.7.1
29.4.0_ce-160000.7.1
containerd
SUSE:Linux Micro 6.0
From an advisory covering 3 CVEs
 before 1.7.29-3.1
1.7.29-3.1
containerd
SUSE:Linux Micro 6.1
From an advisory covering 3 CVEs
 before 1.7.29-slfo.1.1_3.1
1.7.29-slfo.1.1_3.1
docker
SUSE:Linux Micro 6.1
From an advisory covering 4 CVEs
 before 29.4.0_ce-slfo.1.1_10.1
29.4.0_ce-slfo.1.1_10.1
docker
SUSE:Linux Micro 6.0
From an advisory covering 4 CVEs
 before 29.4.0_ce-11.1
29.4.0_ce-11.1
docker-compose
SUSE:Linux Micro 6.2
From an advisory covering 4 CVEs
 before 2.33.1-160000.5.1
2.33.1-160000.5.1
google-osconfig-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
google-osconfig-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
docker-compose
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 2.33.1-160000.5.1
2.33.1-160000.5.1
docker-compose
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 2.33.1-160000.5.1
2.33.1-160000.5.1
go1.26-openssl
SUSE:Linux Enterprise Server 16.0
From an advisory covering 24 CVEs
 before 1.26.4-160000.1.1
1.26.4-160000.1.1
go1.26-openssl
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 24 CVEs
 before 1.26.4-160000.1.1
1.26.4-160000.1.1
go1.25-openssl
SUSE:Linux Enterprise Server 16.0
From an advisory covering 30 CVEs
 before 1.25.12-160000.1.1
1.25.12-160000.1.1
go1.25-openssl
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 30 CVEs
 before 1.25.12-160000.1.1
1.25.12-160000.1.1
docker-compose
SUSE:Linux Micro 6.0
From an advisory covering 4 CVEs
 before 2.33.1-5.1
2.33.1-5.1
containerd
SUSE:Linux Micro 6.0
From an advisory covering 4 CVEs
 before 1.7.29-4.1
1.7.29-4.1
docker-compose
SUSE:Linux Micro 6.1
From an advisory covering 4 CVEs
 before 2.33.1-slfo.1.1_3.1
2.33.1-slfo.1.1_3.1
containerd
SUSE:Linux Micro 6.1
From an advisory covering 4 CVEs
 before 1.7.29-slfo.1.1_4.1
1.7.29-slfo.1.1_4.1
kubernetes1.23
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 1.23.17-150300.7.17.1
1.23.17-150300.7.17.1
kubernetes1.23
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.23.17-150300.7.17.1
1.23.17-150300.7.17.1
kubernetes1.23
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.23.17-150300.7.17.1
1.23.17-150300.7.17.1
kubernetes1.23
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 1.23.17-150300.7.17.1
1.23.17-150300.7.17.1
kubernetes1.24
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 1.24.17-150400.9.27.1
1.24.17-150400.9.27.1
kubernetes1.24
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.24.17-150400.9.27.1
1.24.17-150400.9.27.1
kubernetes1.24
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.24.17-150400.9.27.1
1.24.17-150400.9.27.1
kubernetes1.24
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 1.24.17-150400.9.27.1
1.24.17-150400.9.27.1
kubernetes1.26
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 1.26.15-150400.9.27.1
1.26.15-150400.9.27.1
kubernetes1.26
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.26.15-150400.9.27.1
1.26.15-150400.9.27.1
kubernetes1.26
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 1.26.15-150400.9.27.1
1.26.15-150400.9.27.1
kubernetes1.26
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.26.15-150400.9.27.1
1.26.15-150400.9.27.1
kubernetes1.26
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.26.15-150400.9.27.1
1.26.15-150400.9.27.1
kubernetes1.26
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.26.15-150400.9.27.1
1.26.15-150400.9.27.1
kubernetes1.26
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 1.26.15-150400.9.27.1
1.26.15-150400.9.27.1
kubernetes1.26
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 1.26.15-150400.9.27.1
1.26.15-150400.9.27.1
kubernetes1.27
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 1.27.16-150400.9.21.1
1.27.16-150400.9.21.1
kubernetes1.27
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 1.27.16-150400.9.21.1
1.27.16-150400.9.21.1
golang-1.10
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~14.04.1
 None known
golang-1.10
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~16.04.11.10.4-2ubuntu1~16.04.2
 None known
golang-1.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.6-0ubuntu11.6-0ubuntu21.6-0ubuntu31.6-0ubuntu41.6-0ubuntu5
Show 5 moreShow less
1.6.1-0ubuntu11.6.2-0ubuntu5~16.041.6.2-0ubuntu5~16.04.21.6.2-0ubuntu5~16.04.31.6.2-0ubuntu5~16.04.4
 None known
golang-golang-x-net-dev
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.0+git20150226.3d87fd6-30.0+git20151007.b846920+dfsg-11:0.0+git20150817.66f0418-11:0.0+git20160110.4fd4a9f-11:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm11:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2
 None known
juju-core
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.24.6-0ubuntu31.25.0-0ubuntu11.25.0-0ubuntu21.25.0-0ubuntu32.0~beta4-0ubuntu2
Show 12 moreShow less
2.0~beta6-0ubuntu1.16.04.12.0~beta7-0ubuntu1.16.04.12.0~beta12-0ubuntu1.16.04.12.0~beta15-0ubuntu2.16.04.12.0.0-0ubuntu0.16.04.22.0.2-0ubuntu0.16.04.12.0.2-0ubuntu0.16.04.22.3.1-0ubuntu0.16.04.12.3.2-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.1+esm12.3.7-0ubuntu0.16.04.1+esm2
 None known
lxd
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.20-0ubuntu40.21-0ubuntu30.21-0ubuntu50.22-0ubuntu10.22-0ubuntu2
Show 45 moreShow less
0.23-0ubuntu10.23-0ubuntu20.23-0ubuntu30.24-0ubuntu20.24-0ubuntu30.24-0ubuntu40.25-0ubuntu10.26-0ubuntu20.26-0ubuntu30.27-0ubuntu10.27-0ubuntu22.0.0~beta1-0ubuntu32.0.0~beta1-0ubuntu42.0.0~beta2-0ubuntu12.0.0~beta2-0ubuntu22.0.0~beta3-0ubuntu12.0.0~beta3-0ubuntu22.0.0~beta3-0ubuntu32.0.0~beta3-0ubuntu42.0.0~beta4-0ubuntu12.0.0~beta4-0ubuntu22.0.0~beta4-0ubuntu32.0.0~beta4-0ubuntu42.0.0~beta4-0ubuntu52.0.0~beta4-0ubuntu62.0.0~beta4-0ubuntu72.0.0~rc1-0ubuntu12.0.0~rc1-0ubuntu22.0.0~rc1-0ubuntu32.0.0~rc2-0ubuntu22.0.0~rc2-0ubuntu32.0.0~rc3-0ubuntu12.0.0~rc3-0ubuntu22.0.0~rc3-0ubuntu32.0.0~rc3-0ubuntu42.0.0~rc4-0ubuntu12.0.0~rc5-0ubuntu12.0.0~rc6-0ubuntu12.0.0~rc6-0ubuntu22.0.0~rc7-0ubuntu12.0.0~rc7-0ubuntu22.0.0~rc8-0ubuntu12.0.0~rc8-0ubuntu22.0.0~rc8-0ubuntu32.0.0~rc8-0ubuntu5
 None known
containerd
Ubuntu:Pro:16.04:LTS
 before 1.2.6-0ubuntu1~16.04.6+esm7, plus listed versions
0.2.1-0ubuntu4~16.040.2.3-0ubuntu1~16.040.2.5-0ubuntu1~16.04.11.2.6-0ubuntu1~16.04.21.2.6-0ubuntu1~16.04.3
Show 8 moreShow less
1.2.6-0ubuntu1~16.04.41.2.6-0ubuntu1~16.04.51.2.6-0ubuntu1~16.04.61.2.6-0ubuntu1~16.04.6+esm11.2.6-0ubuntu1~16.04.6+esm21.2.6-0ubuntu1~16.04.6+esm41.2.6-0ubuntu1~16.04.6+esm51.2.6-0ubuntu1~16.04.6+esm6
1.2.6-0ubuntu1~16.04.6+esm7
golang-1.13
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.13.8-1ubuntu1~16.04.21.13.8-1ubuntu1~16.04.31.13.8-1ubuntu1~16.04.3+esm21.13.8-1ubuntu1~16.04.3+esm3
 None known
golang-1.18
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.18.1-1ubuntu1~16.04.61.18.1-1ubuntu1~16.04.6+esm1
 None known
google-guest-agent
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
20201217.02-0ubuntu1~16.04.020230426.00-0ubuntu2~16.04.320231004.02-0ubuntu1~16.04.120231004.02-0ubuntu1~16.04.220240716.00-0ubuntu1~16.04.020240716.00-0ubuntu1~16.04.0+esm120240716.00-0ubuntu1~16.04.0+esm220240716.00-0ubuntu1~16.04.0+esm3
 None known
google-osconfig-agent
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
20210219.00-0ubuntu1~16.04.020230504.00-0ubuntu1~16.04.020240320.00-0ubuntu1~16.04.020240524.03-0ubuntu2~16.04.020251028.00-0ubuntu2~16.04.1
 None known
golang-1.10
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.10~rc1-11.10~rc1-1ubuntu11.10~rc1-2ubuntu11.10~rc2-1ubuntu11.10-1ubuntu11.10.1-1ubuntu21.10.4-2ubuntu1~18.04.11.10.4-2ubuntu1~18.04.2
 None known
lxd
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.18-0ubuntu62.19-0ubuntu12.20-0ubuntu32.20-0ubuntu42.21-0ubuntu1
Show 18 moreShow less
2.21-0ubuntu22.21-0ubuntu32.21-0ubuntu43.0.0~beta2-0ubuntu33.0.0~beta3-0ubuntu33.0.0~beta5-0ubuntu23.0.0~beta7-0ubuntu13.0.0-0ubuntu13.0.0-0ubuntu23.0.0-0ubuntu33.0.0-0ubuntu43.0.1-0ubuntu1~18.04.13.0.2-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.23.0.3-0ubuntu1~18.04.2+esm13.0.3-0ubuntu1~18.04.2+esm23.0.3-0ubuntu1~18.04.2+esm3
 None known
containerd
Ubuntu:Pro:18.04:LTS
 before 1.6.12-0ubuntu1~18.04.1+esm4, plus listed versions
0.2.5-0ubuntu21.2.6-0ubuntu1~18.04.11.2.6-0ubuntu1~18.04.21.3.3-0ubuntu1~18.04.11.3.3-0ubuntu1~18.04.2
Show 14 moreShow less
1.3.3-0ubuntu1~18.04.31.3.3-0ubuntu1~18.04.41.4.4-0ubuntu1~18.04.21.5.2-0ubuntu1~18.04.11.5.2-0ubuntu1~18.04.21.5.2-0ubuntu1~18.04.31.5.5-0ubuntu3~18.04.11.5.5-0ubuntu3~18.04.21.5.9-0ubuntu1~18.04.11.5.9-0ubuntu1~18.04.21.6.12-0ubuntu1~18.04.11.6.12-0ubuntu1~18.04.1+esm11.6.12-0ubuntu1~18.04.1+esm21.6.12-0ubuntu1~18.04.1+esm3
1.6.12-0ubuntu1~18.04.1+esm4
golang-1.13
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.13.8-1ubuntu1~18.04.21.13.8-1ubuntu1~18.04.31.13.8-1ubuntu1~18.04.41.13.8-1ubuntu1~18.04.4+esm1
 None known
golang-1.16
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.16.2-0ubuntu1~18.04.21.16.2-0ubuntu1~18.04.2+esm1
 None known
golang-1.18
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.18.1-1ubuntu1~18.04.31.18.1-1ubuntu1~18.04.41.18.1-1ubuntu1~18.04.4+esm1
 None known
golang-1.8
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.8.3-2ubuntu11.8.3-2ubuntu1.18.04.1
 None known
golang-1.9
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.9.1-2ubuntu11.9.2-1ubuntu11.9.2-3ubuntu11.9.3-1ubuntu11.9.4-1ubuntu1
 None known
golang-golang-x-net-dev
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1:0.0+git20170629.c81e7f2+dfsg-1ubuntu11:0.0+git20170629.c81e7f2+dfsg-1ubuntu21:0.0+git20170629.c81e7f2+dfsg-21:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm11:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm21:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm3
 None known
google-guest-agent
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
20201217.02-0ubuntu1~18.04.020210414.00-0ubuntu1~18.04.020210629.00-0ubuntu1~18.04.120220622.00-0ubuntu2~18.04.020220622.00-0ubuntu2~18.04.1
Show 8 moreShow less
20230426.00-0ubuntu2~18.04.020231004.02-0ubuntu1~18.04.220231004.02-0ubuntu1~18.04.320240716.00-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.0+esm120241011.01-0ubuntu1~18.04.0+esm220241011.01-0ubuntu1~18.04.0+esm3
 None known
google-osconfig-agent
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
20210219.00-0ubuntu1~18.04.020210608.1-0ubuntu1~18.04.120210608.1-0ubuntu1~18.04.220220824.00-0ubuntu1~18.04.120230504.00-0ubuntu1~18.04.0
Show 4 moreShow less
20240320.00-0ubuntu1~18.04.020240524.03-0ubuntu2~18.04.020240926.03-0ubuntu1~18.04.020251028.00-0ubuntu2~18.04.0
 None known
adsys
Ubuntu:Pro:20.04:LTS
 before 0.9.2~20.04.2ubuntu0.1+esm2, plus listed versions
0.8~22.040.9.2~20.040.9.2~20.04.10.9.2~20.04.20.9.2~20.04.2ubuntu0.10.9.2~20.04.2ubuntu0.1+esm1
0.9.2~20.04.2ubuntu0.1+esm2
containerd
Ubuntu:Pro:20.04:LTS
 before 1.6.12-0ubuntu1~20.04.8+esm2, plus listed versions
1.2.10-0ubuntu11.3.2-0ubuntu11.3.3-0ubuntu11.3.3-0ubuntu21.3.3-0ubuntu2.1
Show 19 moreShow less
1.3.3-0ubuntu2.21.3.3-0ubuntu2.31.4.4-0ubuntu1~20.04.21.5.2-0ubuntu1~20.04.11.5.2-0ubuntu1~20.04.21.5.2-0ubuntu1~20.04.31.5.5-0ubuntu3~20.04.11.5.5-0ubuntu3~20.04.21.5.9-0ubuntu1~20.04.11.5.9-0ubuntu1~20.04.41.5.9-0ubuntu1~20.04.51.5.9-0ubuntu1~20.04.61.6.12-0ubuntu1~20.04.11.6.12-0ubuntu1~20.04.31.6.12-0ubuntu1~20.04.51.6.12-0ubuntu1~20.04.61.6.12-0ubuntu1~20.04.71.6.12-0ubuntu1~20.04.81.6.12-0ubuntu1~20.04.8+esm1
1.6.12-0ubuntu1~20.04.8+esm2
golang-1.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.13.1-1ubuntu11.13.3-1ubuntu11.13.4-1ubuntu11.13.5-1ubuntu11.13.6-1ubuntu1
Show 5 moreShow less
1.13.6-2ubuntu11.13.7-1ubuntu11.13.8-1ubuntu11.13.8-1ubuntu1.11.13.8-1ubuntu1.2
 None known
golang-1.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.14~beta1-11.14~beta1-21.14~rc1-11.14-11.14.1-1
Show 4 moreShow less
1.14.2-11.14.2-1ubuntu11.14.3-2ubuntu2~20.04.11.14.3-2ubuntu2~20.04.2
 None known
google-guest-agent
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
20201217.02-0ubuntu1~20.04.020210414.00-0ubuntu1~20.04.020210629.00-0ubuntu1~20.04.020220622.00-0ubuntu2~20.04.020220622.00-0ubuntu2~20.04.2
Show 11 moreShow less
20230426.00-0ubuntu2~20.04.020231004.02-0ubuntu1~20.04.120231004.02-0ubuntu1~20.04.220231004.02-0ubuntu1~20.04.320231004.02-0ubuntu1~20.04.420240716.00-0ubuntu1~20.04.020241011.01-0ubuntu1~20.04.120250116.00-0ubuntu1~20.04.020250116.00-0ubuntu1~20.04.0+esm120250116.00-0ubuntu1~20.04.0+esm220250116.00-0ubuntu1~20.04.0+esm3
 None known
containerd-app
Ubuntu:Pro:20.04:LTS
 before 1.7.24-0ubuntu1~20.04.2+esm2, plus listed versions
1.7.2-0ubuntu1~20.04.11.7.12-0ubuntu2~20.04.11.7.24-0ubuntu1~20.04.11.7.24-0ubuntu1~20.04.21.7.24-0ubuntu1~20.04.2+esm1
1.7.24-0ubuntu1~20.04.2+esm2
golang-1.16
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.16.2-0ubuntu1~20.041.16.2-0ubuntu1~20.04.11.16.2-0ubuntu1~20.04.1+esm1
 None known
golang-1.18
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.18.1-1ubuntu1~20.04.11.18.1-1ubuntu1~20.04.21.18.1-1ubuntu1~20.04.3
 None known
golang-1.20
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.20.3-1ubuntu0.1~20.041.20.3-1ubuntu0.1~20.04.1
 None known
golang-1.21
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.21.1-1~ubuntu20.04.11.21.1-1~ubuntu20.04.21.21.1-1~ubuntu20.04.3
 None known
golang-1.22
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.22.2-2~20.04.11.22.2-2~20.04.21.22.2-2~20.04.3
 None known
golang-golang-x-net-dev
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1:0.0+git20190811.74dc4d7+dfsg-11:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm11:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm21:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm3
 None known
google-osconfig-agent
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
20210219.00-0ubuntu1~20.04.020210608.1-0ubuntu1~20.04.020210608.1-0ubuntu1~20.04.120220824.00-0ubuntu1~20.04.120230504.00-0ubuntu1~20.04.0
Show 6 moreShow less
20240320.00-0ubuntu1~20.04.020240320.00-0ubuntu1~20.04.120240524.03-0ubuntu2~20.04.020240926.03-0ubuntu1~20.04.020250115.01-0ubuntu1~20.04.020251028.00-0ubuntu2~20.04.0
 None known
lxd
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:0.71:0.81:0.91:0.10
 None known
adsys
Ubuntu:22.04:LTS
 before 0.16.3~22.04.2ubuntu0.22.04.1, plus listed versions
0.7.10.7.1build10.80.8ubuntu10.8.1
Show 14 moreShow less
0.8.20.8.30.8.40.8.5~22.040.9.2~22.040.9.2~22.04.10.9.2~22.04.20.14.1~22.040.14.2~22.040.14.2~22.04ubuntu0.10.14.3~22.040.14.3~22.04ubuntu0.10.16.3~22.04.10.16.3~22.04.2
0.16.3~22.04.2ubuntu0.22.04.1
containerd
Ubuntu:22.04:LTS
 before 1.6.12-0ubuntu1~22.04.11, plus listed versions
1.5.5-0ubuntu31.5.9-0ubuntu11.5.9-0ubuntu21.5.9-0ubuntu31.5.9-0ubuntu3.1
Show 8 moreShow less
1.6.12-0ubuntu1~22.04.11.6.12-0ubuntu1~22.04.31.6.12-0ubuntu1~22.04.51.6.12-0ubuntu1~22.04.61.6.12-0ubuntu1~22.04.71.6.12-0ubuntu1~22.04.81.6.12-0ubuntu1~22.04.91.6.12-0ubuntu1~22.04.10
1.6.12-0ubuntu1~22.04.11
containerd-app
Ubuntu:22.04:LTS
 before 2.2.1-0ubuntu1~22.04.2, plus listed versions
1.7.2-0ubuntu1~22.04.11.7.12-0ubuntu2~22.04.11.7.24-0ubuntu1~22.04.11.7.24-0ubuntu1~22.04.21.7.27-0ubuntu1~22.04.11.7.28-0ubuntu1~22.04.12.2.1-0ubuntu1~22.04.1
2.2.1-0ubuntu1~22.04.2
golang-1.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.17-1ubuntu21.17.3-1ubuntu11.17.3-1ubuntu21.17.13-3ubuntu11.17.13-3ubuntu1.21.17.13-3ubuntu1.3
 None known
golang-1.18
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.18~beta1-0ubuntu11.18~beta2-1ubuntu11.18~beta2-1ubuntu21.18~rc1-1ubuntu11.18-1ubuntu1
Show 4 moreShow less
1.18.1-1ubuntu11.18.1-1ubuntu1.11.18.1-1ubuntu1.21.18.1-1ubuntu1.3
 None known
golang-1.20
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.20.3-1ubuntu0.1~22.041.20.3-1ubuntu0.1~22.04.1
 None known
golang-1.21
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.21.1-1~ubuntu22.04.11.21.1-1~ubuntu22.04.21.21.1-1~ubuntu22.04.31.21.1-1~ubuntu22.04.4
 None known
golang-1.22
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.22.2-2~22.041.22.2-2~22.04.11.22.2-2~22.04.21.22.2-2~22.04.31.22.2-2~22.04.4
 None known
golang-1.23
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.23.1-1~22.041.23.1-1~22.04.21.23.1-1~22.04.3
 None known
golang-1.24
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.24.4-1ubuntu1~22.04.11.24.4-1ubuntu1~22.04.21.24.13-2~22.04.11.24.13-2~22.04.2
 None known
golang-1.25
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.25.14-1~ubuntu0.22.04.1
 None known
google-guest-agent
Ubuntu:22.04:LTS
 All versions, plus listed versions
20210629.00-0ubuntu120210629.00-0ubuntu220220104.00-0ubuntu120220104.00-0ubuntu220220622.00-0ubuntu2~22.04.0
Show 14 moreShow less
20220622.00-0ubuntu2~22.04.120230426.00-0ubuntu2~22.04.020231004.02-0ubuntu1~22.04.120231004.02-0ubuntu1~22.04.220231004.02-0ubuntu1~22.04.320231004.02-0ubuntu1~22.04.420231004.02-0ubuntu1~22.04.520240716.00-0ubuntu1~22.04.020241011.01-0ubuntu1~22.04.020250116.00-0ubuntu1~22.04.020250116.00-0ubuntu1~22.04.120250116.00-0ubuntu1~22.04.220250116.00-0ubuntu1~22.04.320250116.00-0ubuntu1~22.04.4
 None known
google-osconfig-agent
Ubuntu:22.04:LTS
 All versions, plus listed versions
20210608.1-0ubuntu120210608.1-0ubuntu220210608.1-0ubuntu320220824.00-0ubuntu1~22.04.120220824.00-0ubuntu1~22.04.2
Show 10 moreShow less
20230504.00-0ubuntu1~22.04.020230504.00-0ubuntu1~22.04.120240320.00-0ubuntu1~22.04.020240320.00-0ubuntu1~22.04.120240524.03-0ubuntu2~22.04.020240524.03-0ubuntu2~22.04.120240926.03-0ubuntu1~22.04.020250115.01-0ubuntu1~22.04.020251028.00-0ubuntu2~22.04.020251028.00-0ubuntu2~22.04.1
 None known
golang-1.13
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1.13.8-1ubuntu21.13.8-1ubuntu2.22.04.11.13.8-1ubuntu2.22.04.1+esm11.13.8-1ubuntu2.22.04.2
 None known
golang-golang-x-net
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-11:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm11:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm21:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm31:0.0+git20211209.491a49a+dfsg-1ubuntu0.1
 None known
adsys
Ubuntu:24.04:LTS
 before 0.16.3~24.04.2ubuntu0.24.04.1, plus listed versions
0.13.10.13.20.13.30.14.10.14.1build1
Show 7 moreShow less
0.14.1ubuntu0.24.04.10.14.2~24.040.14.2~24.04ubuntu0.10.14.3~24.040.14.3~24.04ubuntu0.10.16.3~24.04.10.16.3~24.04.2
0.16.3~24.04.2ubuntu0.24.04.1
containerd-app
Ubuntu:24.04:LTS
 before 2.2.1-0ubuntu1~24.04.3, plus listed versions
1.7.2-0ubuntu21.7.12-0ubuntu11.7.12-0ubuntu21.7.12-0ubuntu31.7.12-0ubuntu4
Show 9 moreShow less
1.7.12-0ubuntu4.11.7.19-0ubuntu1~24.04.11.7.19+really1.7.12-0ubuntu4.21.7.24-0ubuntu1~24.04.11.7.24-0ubuntu1~24.04.21.7.27-0ubuntu1~24.04.11.7.28-0ubuntu1~24.04.11.7.28-0ubuntu1~24.04.22.2.1-0ubuntu1~24.04.2
2.2.1-0ubuntu1~24.04.3
golang-1.21
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.21.1-11.21.3-11.21.4-11.21.5-11.21.6-1
Show 6 moreShow less
1.21.7-11.21.7-21.21.8-11.21.8-1build11.21.9-11.21.9-1ubuntu0.1
 None known
golang-1.22
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.22~rc1-21.22.0-11.22.0-21.22.1-11.22.1-1build1
Show 6 moreShow less
1.22.2-21.22.2-2ubuntu0.11.22.2-2ubuntu0.21.22.2-2ubuntu0.31.22.2-2ubuntu0.41.22.2-2ubuntu0.5
 None known
golang-1.23
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.23.1-1~24.041.23.1-1~24.04.1
 None known
golang-1.24
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.24.4-1ubuntu1~24.04.11.24.4-1ubuntu1~24.04.21.24.13-2~24.04.1
 None known
golang-1.25
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.25.14-1~ubuntu0.24.04.1
 None known
golang-1.26
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.26.8-1~ubuntu0.24.04.2
 None known
dnscrypt-proxy
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 2.1.16-bp160.1.1
2.1.16-bp160.1.1
go1.25
openSUSE:Tumbleweed
From an advisory covering 11 CVEs
 before 1.25.10-1.1
1.25.10-1.1
go1.26
openSUSE:Tumbleweed
From an advisory covering 11 CVEs
 before 1.26.3-1.1
1.26.3-1.1
rclone
openSUSE:Tumbleweed
 before 1.74.1-1.1
1.74.1-1.1
regclient
openSUSE:Tumbleweed
 before 0.11.4-1.1
0.11.4-1.1
hauler
openSUSE:Tumbleweed
 before 1.4.3-2.1
1.4.3-2.1
helm
openSUSE:Tumbleweed
 before 4.2.0-2.1
4.2.0-2.1
helm3
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.21.0-1.1
3.21.0-1.1
trivy
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.70.0-2.1
0.70.0-2.1
apptainer
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 1.4.5-5.1
1.4.5-5.1
mcphost
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 0.34.0-5.1
0.34.0-5.1
rqlite
openSUSE:Tumbleweed
 before 10.1.0-1.1
10.1.0-1.1
amazon-ecs-init
openSUSE:Tumbleweed
 before 1.103.0-2.1
1.103.0-2.1
azure-storage-azcopy
openSUSE:Tumbleweed
 before 10.32.2-3.1
10.32.2-3.1
yq
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 4.53.2-1.1
4.53.2-1.1
distribution
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 3.1.1-3.1
3.1.1-3.1
ignition
openSUSE:Tumbleweed
 before 2.26.0-4.1
2.26.0-4.1
cloudflared
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2026.5.2-1.1
2026.5.2-1.1
restic
openSUSE:Tumbleweed
 before 0.18.1-3.1
0.18.1-3.1
google-guest-agent
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 20260529.00-1.1
20260529.00-1.1
google-osconfig-agent
openSUSE:Tumbleweed
 before 20260611.00-1.1
20260611.00-1.1
warewulf4
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 4.7.0-1.1
4.7.0-1.1
docker-stable
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 24.0.9_ce-18.1
24.0.9_ce-18.1
containerd
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 1.7.33-1.1
1.7.33-1.1
velociraptor
openSUSE:Tumbleweed
From an advisory covering 49 CVEs
 before 0.7.0.4.git185.a5708584-2.1
0.7.0.4.git185.a5708584-2.1
docker
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 29.4.0_ce-40.1
29.4.0_ce-40.1
flannel
openSUSE:Tumbleweed
 before 0.28.7-1.1
0.28.7-1.1
kubevirt1.8
openSUSE:Tumbleweed
From an advisory covering 7 CVEs
 before 1.8.4-2.1
1.8.4-2.1
alloy
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 1.18.0-1.1
1.18.0-1.1
grafana
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 12.4.5-4.1
12.4.5-4.1
syncthing
openSUSE:Tumbleweed
 before 2.1.5-1.1
2.1.5-1.1
percona-toolkit
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 3.7.1.4-1.1
3.7.1.4-1.1
kured
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 1.23.0-1.1
1.23.0-1.1
trivy
openSUSE:Leap 16.0
From an advisory covering 21 CVEs
 before 0.71.0-160000.1.1
0.71.0-160000.1.1
google-guest-agent
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 20260430.00-160000.1.1
20260430.00-160000.1.1
google-cloud-sap-agent
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 3.15-160000.1.1
3.15-160000.1.1
amazon-ecs-init
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.103.2-160000.1.1
1.103.2-160000.1.1
docker
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 29.4.0_ce-160000.7.1
29.4.0_ce-160000.7.1
distribution
openSUSE:Leap 16.0
From an advisory covering 16 CVEs
 before 3.1.1-160000.1.1
3.1.1-160000.1.1
ignition
openSUSE:Leap 16.0
 before 2.21.0-160000.4.1
2.21.0-160000.4.1
mcphost
openSUSE:Leap 16.0
From an advisory covering 20 CVEs
 before 0.34.0-160000.2.1
0.34.0-160000.2.1
warewulf4
openSUSE:Leap 16.0
From an advisory covering 5 CVEs
 before 4.7.0-bp160.1.1
4.7.0-bp160.1.1
docker-stable
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 24.0.9_ce-160000.6.1
24.0.9_ce-160000.6.1
google-osconfig-agent
openSUSE:Leap 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
containerd
openSUSE:Leap 16.0
From an advisory covering 10 CVEs
 before 1.7.33-160000.1.1
1.7.33-160000.1.1
docker-compose
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 2.33.1-160000.5.1
2.33.1-160000.5.1
go1.26-openssl
openSUSE:Leap 16.0
From an advisory covering 24 CVEs
 before 1.26.4-160000.1.1
1.26.4-160000.1.1
go1.25-openssl
openSUSE:Leap 16.0
From an advisory covering 30 CVEs
 before 1.25.12-160000.1.1
1.25.12-160000.1.1
ctop
openSUSE:Leap 16.0
From an advisory covering 5 CVEs
 before 0.7.7-bp160.2.1
0.7.7-bp160.2.1
rclone
openSUSE:Leap 16.0
From an advisory covering 37 CVEs
 before 1.74.4-bp160.1.1
1.74.4-bp160.1.1
govulncheck-vulndb
openSUSE:Leap 16.0
From an advisory covering 1734 CVEs
 before 0.0.20260723T184607-160000.1.1
0.0.20260723T184607-160000.1.1
kubevirt1.8
openSUSE:Leap 16.0
From an advisory covering 25 CVEs
 before 1.8.4-160000.1.1
1.8.4-160000.1.1
glab
openSUSE:Leap 16.0
From an advisory covering 24 CVEs
 before 1.114.0-bp160.1.1
1.114.0-bp160.1.1
containerized-data-importer1.65
openSUSE:Leap 16.0
From an advisory covering 39 CVEs
 before 1.65.0-160000.3.1
1.65.0-160000.3.1
alloy
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 1.18.0-160000.1.1
1.18.0-160000.1.1
helm
openSUSE:Leap 16.0
From an advisory covering 18 CVEs
 before 4.3.0-160000.1.1
4.3.0-160000.1.1
grafana
openSUSE:Leap 16.0
From an advisory covering 17 CVEs
 before 12.4.10-bp160.1.1
12.4.10-bp160.1.1
docker
openSUSE:Leap 16.0
From an advisory covering 5 CVEs
 before 29.7.2_ce-160000.8.1
29.7.2_ce-160000.8.1

History

History
RecordedChangedSources
affectedOSV
affected
affected, factsOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-33814 is a high vulnerability (CVSS 7.5) in Go Standard Library Net/http, published May 7, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.84%, the 58th percentile. Fixed in golang 1.26.3-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 390 package rows, 26 versions and 2,478 references. The JSON record has them. Also not on the record: 126 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 176 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open