2256 matches found
github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation
A flaw was found in Expr, an expression language and expression evaluation for Go. This vulnerability allows a denial of service DoS via recursive traversal over user-provided deeply nested or cyclic data structures without enforcing a maximum recursion depth, leading to a stack overflow panic an...
github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation
A flaw was found in Expr, an expression language and expression evaluation for Go. This vulnerability allows a denial of service DoS via recursive traversal over user-provided deeply nested or cyclic data structures without enforcing a maximum recursion depth, leading to a stack overflow panic an...
golang: archive/tar: Unbounded allocation when parsing GNU sparse map
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go...
RHEL 8 : grafana (RHSA-2026:0245)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:0245 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: archive/tar:...
golang: archive/tar: Unbounded allocation when parsing GNU sparse map
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go...
The vulnerability of the Go-based Redis database library go-redis, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of the go-redis library for working with Redis databases is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Medium: golang-github-cpuguy83-go-md2man
Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...
golang-cicd-poc
Golang CI/CD POC Project POC project for trying out different...
[SECURITY] Fedora 42 Update: delve-1.26.0-1.fc42
Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. With that in mind, Delve should stay out ...
[SECURITY] Fedora 43 Update: delve-1.26.0-1.fc43
Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. With that in mind, Delve should stay out ...
Security Bulletin: IBM Storage Ceph is vulnerable to Exposure of Sensitive Information Through Data Queries in Golang Go (CVE-2023-45288)
Summary Golang Go is used by IBM Storage Ceph as part of RGW and in assorted other locations. CVE-2023-45288 Vulnerability Details CVEID:CVE-2023-45288 DESCRIPTION: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION...
[SECURITY] Fedora 42 Update: golang-github-alecthomas-chroma-2-2.14.0-4.fc42
A general purpose syntax highlighter in pure Go...
[SECURITY] Fedora 43 Update: golang-github-jwt-5-5.2.1-6.fc43
A Go implementation of JSON Web Tokens...
Fedora 43 : golang-github-evanw-esbuild (2025-4068748872)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4068748872 advisory. Rebuild for CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
[SECURITY] Fedora 43 Update: gdu-5.32.0-1.fc43
Fast disk usage analyzer with console interface written in Go...
[SECURITY] Fedora 42 Update: gdu-5.32.0-1.fc42
Fast disk usage analyzer with console interface written in Go...
Exploit for CVE-2025-14847
Mongobleed CVE-2025-14847 – Go Proof of Concept This reposi...
The vulnerability of the HostnameError.Error() function in the crypto/x509 package written in the Go programming language allows a attacker to cause a service failure.
The vulnerability of the HostnameError.Error function in the crypto/x509 package in the Go programming language is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
RLSA-2025:23948 Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For more details about the security issues, including the impact, a CVSS score,...