go
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 74 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 7, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Multiple TLS libraries: X.509 Name Constraints enforcement bypasses (CVE-2026-34073, CVE-2026-3833, CVE-2026-5263, CVE-2026-33810; CERT/CC VU#573195, VU#948176, VU#410595)
HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http
Double flow control refund on HTTP/2 server streams in net/http
Lack of limit on size of parsed Range headers in net/http
Excessive CPU consumption from repeated initial window changes in net/http
HTTP/2 server memory exhaustion due to Trailer headers in net/http
Checksum bypass for golang.org/fips140 in cmd/go
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http
Enforce maximum recursion depth in encoding/asn1
Go 1.26.6 and Go 1.25.13 aleased with 10 security fixes
Monitor go in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.