Filter
IBM ConcertIBM Concert improper certificate validation
9.8
First published (updated )
Golang GoBackticks not treated as string delimiters in html/template
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoImproper handling of JavaScript whitespace in html/template
9.8
First published (updated )
pip/werkzeugWerkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
8
First published (updated )
Golang GoEmpty Cmd.Path can trigger unintended binary in os/exec on Windows
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoUnsafe behavior in setuid/setgid binaries in runtime
7.8
First published (updated )
IBM Concert SoftwareIBM Concert Software SQL injection
7.6
First published (updated )
pip/cryptographycryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
7.5
EPSS
0.04%
First published (updated )
redhat/goComments in display names are incorrectly handled in net/mail
7.5
EPSS
0.04%
First published (updated )
debian/golang-google-protobufInfinite loop in JSON unmarshaling in google.golang.org/protobuf
7.5
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/python-werkzeugWerkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution
7.5
EPSS
0.04%
First published (updated )
IBM Concert SoftwareDenial of service due to improper 100-continue handling in net/http
7.5
First published (updated )
Golang GoExcessive resource consumption in net/http, net/textproto and mime/multipart
7.5
First published (updated )
Golang GoExcessive memory allocation in net/http and net/textproto
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoExcessive resource consumption in mime/multipart
7.5
First published (updated )
redhat/golangPanic when decoding Float and Rat types in math/big
7.5
First published (updated )
redhat/golangStack exhaustion when reading certain archives in compress/gzip
7.5
First published (updated )
redhat/golangStack exhaustion in Glob on certain paths in io/fs
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/go-toolsetMemory exhaustion when compiling regular expressions in regexp/syntax
7.5
First published (updated )
redhat/skupper-cliDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
7.5
First published (updated )
redhat/go-toolsetIncorrect sanitization of forwarded query parameters in net/http/httputil
7.5
First published (updated )
redhat/golangStack exhaustion on crafted paths in path/filepath
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.