103 matches found
CVE-2022-44877
использование модуля go-exploit когда режим модуля выключен go get github.com/vulncheck-oss/go-exploit когда режим модуля включен go mod init example.com/myapp go get github.com/vulncheck-oss/go-exploit сборка go build -o cve-2022-44877 main.go...
go-mal-pkgs
go-mal-pkgs Инструмент безопасности для обнаружения вредоносных Go-пакетов путём проверки контрольных сумм в go.sum на соответствие исходному коду, минуя кеш Go Module Proxy. Обзор Этот инструмент помогает защититься от атак на цепочку поставок, эксплуатирующих кеш Go Module Proxy, как было недав...
ROOT-APP-GOBINARY-CVE-2026-42154 CVE-2026-42154 in github.com/prometheus/prometheus - Patched by Root
Root has patched CVE-2026-42154 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-56865 CVE-2026-56865 in golang.org/x/mod - Patched by Root
Root has patched CVE-2026-56865 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...
CLEANSTART-2026-XV99350 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Multiple security vulnerabilities affect the kyverno package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
GO-2026-6311 Vikunja has a project duplication bypasses write-permission check on the target parent project in code.vikunja.io/api
Vikunja has a project duplication bypasses write-permission check on the target parent project in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...
BIT-GOLANG-2026-56865 Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
GO-2026-6140 Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate
Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate...
GO-2026-6158 Wings exposes node configuration secrets through egg configuration-file templating in github.com/pterodactyl/wings
Wings exposes node configuration secrets through egg configuration-file templating in github.com/pterodactyl/wings...
SUSE CVE-2026-56865
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
GO-2024-2907 vulnerabilities
Vulnerabilities for packages: nuclei...
GO-2020-0015 vulnerabilities
Vulnerabilities for packages: vt-cli, k3d...
GO-2023-1795 vulnerabilities
Vulnerabilities for packages: aactl, skaffold...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: dex, kubescape, tkn, tekton-chains, bank-vaults-fips, slsa-verifier, fulcio-fips, argo-workflows, vexctl, flux-kustomize-controller, fulcio, rekor, spire-server-fips, flux-source-controller, terragrunt, spire-server, cloudflared, aactl, gitsign,...
GO-2025-3848 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
Linux Distros Unpatched Vulnerability : CVE-2026-56864
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and...
AZL-96647 CVE-2026-56865 affecting package golang 1.25.12-1
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
UBUNTU-CVE-2026-56865
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
EUVD-2026-58513
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
