Filters
Versions
1.20.0
20
1.18.0
18
1.16.0
10
1.17.0
9
1.19.0
8
1.21.0
8
1.15
6
1.12
4
1.13
4
1.21.0-0
4
1.11.0
3
1.5
3
1.9
3
1.14.0
2
1.20.0-rc1
2
1.20.0-rc2
2
1.20.0-rc3
2
1.22.0
2
1.4.2
2
1.6
2
1.7
2
1.8.3
2
1.0
1
1.0.2
1
1.1
1
1.1.1
1
1.1.2
1
1.10
1
1.10-beta1
1
1.10-beta2
1
1.10-rc1
1
1.11.1
1
1.11.5
1
1.12.0
1
1.12.5
1
1.14
1
1.15.0
1
1.15.12
1
1.15.4
1
1.16.4
1
1.17
1
1.19.0-beta1
1
1.19.0-rc1
1
1.19.0-rc2
1
1.2
1
1.2.1
1
1.2.2
1
1.21.0-rc1
1
1.21.0-rc2
1
1.21.0-rc3
1
1.3
1
1.3.1
1
1.5.1
1
1.5.2
1
1.7-rc1
1
1.7.5
1
1.8
1
1.8.1
1
1.8.6
1
1.9.1
1
1.9.2
1
1.9.3
1
Golang GoMishandling of corrupt central directory record in archive/zip
5.5
First published (updated )
Golang GoUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
9.8
First published (updated )
Golang GoDenial of service via chunk extensions in net/http
5.3
First published (updated )
Golang GoCommand 'go get' may unexpectedly fallback to insecure git in cmd/go
7.5
First published (updated )
Golang GoBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoIncorrect detection of reserved device names on Windows in path/filepath
5.3
First published (updated )
Golang GoInsecure parsing of Windows paths with a \??\ prefix in path/filepath
7.5
First published (updated )
Free5gc Udmpkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve A…
7.5
First published (updated )
Fedoraproject FedoraHTTP/2 rapid reset can cause excessive work in net/http
7.5
First published (updated )
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraArbitrary code execution during build via line directives in cmd/go
9.8
First published (updated )
Golang GoArbitrary code execution via go.mod toolchain directive in cmd/go
9.8
First published (updated )
redhat/golangMemory exhaustion in QUIC connection handling in crypto/tls
7.5
First published (updated )
Golang GoImproper handling of HTML-like comments in script contexts in html/template
6.1
First published (updated )
redhat/golangPanic when processing post-handshake message on QUIC connections in crypto/tls
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoImproper handling of special tags within script contexts in html/template
6.1
First published (updated )
Libp2p Go-libp2plibp2p nodes vulnerable to attack using large RSA keys
7.5
First published (updated )
Golang GoLarge RSA keys can cause high CPU usage in crypto/tls
5.3
First published (updated )
Golang GoInsufficient sanitization of Host header in net/http
6.5
First published (updated )
IBM Cloud Pak for Business AutomationImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
IBM Cloud Pak for Business AutomationImproper handling of non-optional LDFLAGS in go command with cgo in cmd/go
9.8
First published (updated )
Golang GoUnsafe behavior in setuid/setgid binaries in runtime
7.8
First published (updated )
IBM Cloud Pak for Business AutomationCode injection via go command with cgo in cmd/go
9.8
First published (updated )
Golang GoImproper handling of empty HTML attributes in html/template
7.3
First published (updated )
Golang GoImproper handling of JavaScript whitespace in html/template
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoImproper sanitization of CSS values in html/template
7.3
First published (updated )
Golang GoExcessive memory allocation in net/http and net/textproto
7.5
First published (updated )
Golang GoExcessive resource consumption in net/http, net/textproto and mime/multipart
7.5
First published (updated )
Golang GoBackticks not treated as string delimiters in html/template
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoIncorrect calculation on P256 curves in crypto/internal/nistec
5.3
First published (updated )
Golang GoPanic on large handshake records in crypto/tls
7.5
First published (updated )
Golang GoExcessive resource consumption in mime/multipart
7.5
First published (updated )
redhat/skupper-cliDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoExcessive memory growth in net/http and golang.org/x/net/http2
5.3
First published (updated )
Golang GoRestricted file access on Windows in os and net/http
7.5
First published (updated )
Golang GoUnsanitized NUL in environment variables on Windows in syscall and os/exec
7.5
First published (updated )
redhat/go-toolsetMemory exhaustion when compiling regular expressions in regexp/syntax
7.5
First published (updated )
redhat/go-toolsetIncorrect sanitization of forwarded query parameters in net/http/httputil
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/go-toolsetUnbounded memory consumption when reading headers in archive/tar
7.5
First published (updated )
Golang GoFailure to strip relative path components in net/url
7.5
First published (updated )
Golang GoEmpty Cmd.Path can trigger unintended binary in os/exec on Windows
7.8
First published (updated )
Golang GoPath traversal via Clean on Windows in path/filepath
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/golangPanic when decoding Float and Rat types in math/big
7.5
First published (updated )
Golang GoIndefinite hang with large buffers on Windows in crypto/rand
7.5
First published (updated )
redhat/golangImproper sanitization of Transfer-Encoding headers in net/http
6.5
First published (updated )
redhat/golangStack exhaustion when reading certain archives in compress/gzip
7.5
First published (updated )
redhat/golangStack exhaustion when decoding certain messages in encoding/gob
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.