EUVD-2020-21877

Malware in sbrugna...

EUVD-2021-1212

Malware in sbrugna...

EUVD-2021-16397

Malware in sbrugna...

EUVD-2016-4967

Malware in sbrugna...

RockyLinux 9 : golang (RLSA-2025:13935)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:13935 advisory. cmd/go: Go VCS Command Execution Vulnerability CVE-2025-4674 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

EUVD-2023-2633

Malicious code in bioql PyPI...

EUVD-2022-32613

Malicious code in bioql PyPI...

EUVD-2022-32037

Malicious code in bioql PyPI...

EUVD-2024-0394

Malicious code in bioql PyPI...

EUVD-2022-34125

Malicious code in bioql PyPI...

EUVD-2022-6561

Malicious code in bioql PyPI...

EUVD-2022-52464

Malicious code in bioql PyPI...

EUVD-2024-2773

Malicious code in bioql PyPI...

GO-2025-3970 DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly

DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly...

Always-Incorrect Control Flow Implementation

Overview std/net/http is a Go standard library package std/net/http Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation. Go Vulnerability Report: When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20250918T182144 2025-09-18T18:21:44Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3915 CVE-2025-5187 GHSA-4x4m-3c2p-qppc GO-2025-3956 CVE-2025-47906 CVE-2025-47906 Update to...

Google Go 安全漏洞

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. A security vulnerability exists in Google Go, which stems from the fact that passing a specific string to LookPath when the PATH environment variable contains the path to an...

Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.

...

Linux Distros Unpatched Vulnerability : CVE-2015-5740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request...

Linux Distros Unpatched Vulnerability : CVE-2017-15042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on...