Filter
AND
AND
redhat/go-toolsetArbitrary code execution via the go command with cgo in cmd/go
9.8
First published (updated )
redhat/goArbitrary code execution in go command with cgo in cmd/go and cmd/cgo
9.8
First published (updated )
redhat/goCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly ret…
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoAn unspecified error with not treating branches with semantic-version names as releases in cmd/go in…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Golang GoIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely desig…
7.5
First published (updated )
redhat/goencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenRead…
7.5
First published (updated )
Fedoraproject FedoraThe golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attack…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/grafananet/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the…
7.5
First published (updated )
Gjson Project GjsonGJSON <= 1.9.2 allows attackers to cause a redos via crafted JSON input.
7.5
First published (updated )
Fast-xml-parser Project Fast-xml-parserRegex Injection via Doctype Entities
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/goAn unspecified error with the P224() Curve implementation can generate incorrect outputs in Golang G…
6.5
First published (updated )
Apache TomcatApache Tomcat: Open redirect with FORM authentication
6.5
First published (updated )
IBM Cloud Pak for SecurityIBM Cloud Pak for Security information disclosure
6.5
First published (updated )
File-type Project File-typeA flaw was found in the file-type npm package. A malformed MKV file could lead the file type detecto…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.