Skip to contentGolang vulnerabilities
Newest
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +143 more +145 moreIncorrect parsing of IPv6 host literals in net/urlCVE-2026-25679Fix available7.5 High
- go standard library crypto/x509, golang go +1 morePanic in name constraint checking for malformed certificates in crypto/x509CVE-2026-27138Fix available5.9 Medium
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +99 more +101 moreIncorrect enforcement of email constraints in crypto/x509CVE-2026-27137Fix available7.5 High
- go toolchain cmd/cgo, golang go, red hat enterprise linux 10 +31 more +33 morePotential code smuggling via doc comments in cmd/cgoCVE-2025-61732Fix available8.6 High
- go standard library crypto/tls, golang go +1 moreUnexpected session resumption in crypto/tlsCVE-2025-68121Fix available10.0 Critical
- go toolchain cmd/go, golang go, red hat enterprise linux 10 +30 more +32 moreArbitrary file write using cgo pkg-config directive in cmd/goCVE-2025-61731Fix available7.8 High
- go toolchain cmd/go, golang go +1 moreUnexpected code execution when invoking toolchain in cmd/goCVE-2025-68119Fix available7.0 High
- go standard library crypto/tls, golang go +1 moreHandshake messages may be processed at the incorrect encryption level in crypto/tlsCVE-2025-61730Fix available5.3 Medium
- go standard library archive/zip, golang go +1 moreExcessive CPU consumption when building archive index in archive/zipCVE-2025-61728Fix available6.5 Medium
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High
- go standard library crypto/x509, golang go +1 moreImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x509CVE-2025-61727Fix available6.5 Medium
- go standard library crypto/x509, golang go +1 moreExcessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729Fix available7.5 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 moreUnbounded memory consumption in golang.org/x/crypto/sshCVE-2025-58181Fix available5.3 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent +1 moreMalformed constraint may cause denial of service in golang.org/x/crypto/ssh/agentCVE-2025-47914Fix available5.3 Medium
- go standard library net/textproto, golang go +1 moreExcessive CPU consumption in Reader.ReadResponse in net/textprotoCVE-2025-61724Fix available5.3 Medium
- go standard library encoding/pem, golang go +1 moreQuadratic complexity when parsing some invalid inputs in encoding/pemCVE-2025-61723Fix available7.5 High
- go standard library crypto/tls, golang go +1 moreALPN negotiation error contains attacker controlled information in crypto/tlsCVE-2025-58189Fix available5.3 Medium
- go standard library crypto/x509, golang go +1 morePanic when validating certificates with DSA public keys in crypto/x509CVE-2025-58188Fix available7.5 High
- go standard library crypto/x509, golang go +1 moreQuadratic complexity when checking name constraints in crypto/x509CVE-2025-58187Fix available7.5 High
- go standard library encoding/asn1, golang go +1 moreParsing DER payload can cause memory exhaustion in encoding/asn1CVE-2025-58185Fix available5.3 Medium
- go standard library net/url, golang go +1 moreInsufficient validation of bracketed IPv6 hostnames in net/urlCVE-2025-47912Fix available5.3 Medium
- go standard library database/sql, golang go +1 moreIncorrect results returned from Rows.Scan in database/sqlCVE-2025-47907Fix available7.0 High
- go standard library os/exec, golang go +1 moreUnexpected paths returned from LookPath in os/execCVE-2025-47906Fix available6.5 Medium
- go toolchain cmd/go, golang go +1 moreUnexpected command execution in untrusted VCS repositories in cmd/goCVE-2025-4674Fix available8.6 High
- go standard library os, syscall, golang go +2 moreInconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscallCVE-2025-0913Fix available5.5 Medium
- go standard library os, golang go +1 moreImproper access to parent directory of root in osCVE-2025-22873Fix available3.8 Low
- golang crypto, golang.org/x/crypto golang.org/x/crypto/acme/autocert +1 moreLimited directory traversal vulnerability on Windows in golang.org/x/cryptoCVE-2022-30636Fix available7.5 High
- golang image, golang.org/x/image golang.org/x/image/tiff +1 morePanic when parsing invalid palette-color images in golang.org/x/imageCVE-2024-24792Fix available7.5 High
- go standard library net/netip, golang go +1 moreUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netipCVE-2024-24790Fix available9.8 Critical
- go standard library archive/zip, golang go +1 moreMishandling of corrupt central directory record in archive/zipCVE-2024-24789Fix available5.5 Medium
- go toolchain cmd/go, golang go +1 moreArbitrary code execution during build on Darwin in cmd/goCVE-2024-24787Public exploitFix available6.4 Medium
- go standard library net/http, net\/http, golang http2 +1 more +3 moreHTTP/2 CONTINUATION flood in net/httpCVE-2023-45288Public exploitFix availableEPSS 89.5%7.5 High
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- go toolchain cmd/go, golang go +1 moreCommand 'go get' may unexpectedly fallback to insecure git in cmd/goCVE-2023-45285Fix available7.5 High
- go standard library net/http/internal, golang go +1 moreDenial of service via chunk extensions in net/httpCVE-2023-39326Fix available5.3 Medium
- go standard library crypto/tls, golang go +1 moreBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channelCVE-2023-45287Fix available7.5 High
- go standard library path/filepath, golang go +1 moreIncorrect detection of reserved device names on Windows in path/filepathCVE-2023-45284Fix available5.3 Medium
- go standard library path/filepath, golang go, go standard library internal/safefilepath +2 moreInsecure parsing of Windows paths with a \??\ prefix in path/filepathCVE-2023-45283Fix available7.5 High
- golang go, traefik, red hat openshift ai (rhoai) +2 more +4 moreTraefik - Denial of Service via HTTP/2 Request HandlingCVE-2023-54365Fix available8.7 High
- go standard library net/http, golang go, http2 +4 more +6 moreHTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325Public exploitFix available7.5 High
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreArbitrary code execution during build via line directives in cmd/goCVE-2023-39323Fix available8.1 High
- go standard library crypto/tls, golang go +1 morePanic when processing post-handshake message on QUIC connections in crypto/tlsCVE-2023-39321Fix available7.5 High
- go standard library crypto/tls, crypto tls, golang go +2 moreMemory exhaustion in QUIC connection handling in crypto/tlsCVE-2023-39322Fix available7.5 High
- go standard library html/template, golang go +1 moreImproper handling of special tags within script contexts in html/templateCVE-2023-39319Fix available6.1 Medium
- go toolchain cmd/go, golang go +1 moreArbitrary code execution via go.mod toolchain directive in cmd/goCVE-2023-39320Public exploitFix available9.8 Critical
- go standard library html/template, golang go +1 moreImproper handling of HTML-like comments in script contexts in html/templateCVE-2023-39318Fix available6.1 Medium
- go standard library crypto/tls, golang go +1 moreLarge RSA keys can cause high CPU usage in crypto/tlsCVE-2023-29409Public exploitFix available5.3 Medium
- golang.org/x/net golang.org/x/net/html, golang networking +1 moreImproper rendering of text nodes in golang.org/x/net/htmlCVE-2023-3978Fix available6.1 Medium
- golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 moreExcessive CPU consumption when decoding 0-height images in golang.org/x/image/tiffCVE-2023-29407Fix available6.5 Medium
- golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 moreExcessive resource consumption in golang.org/x/image/tiffCVE-2023-29408Fix available6.5 Medium
- Show moreLoading…