2383 matches found
Fedora 43 : golang-github-evanw-esbuild (2025-4068748872)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4068748872 advisory. Rebuild for CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
[SECURITY] Fedora 43 Update: gdu-5.32.0-1.fc43
Fast disk usage analyzer with console interface written in Go...
[SECURITY] Fedora 42 Update: gdu-5.32.0-1.fc42
Fast disk usage analyzer with console interface written in Go...
Exploit for CVE-2025-14847
Mongobleed CVE-2025-14847 – Go Proof of Concept This reposi...
The vulnerability of the HostnameError.Error() function in the crypto/x509 package written in the Go programming language allows a attacker to cause a service failure.
The vulnerability of the HostnameError.Error function in the crypto/x509 package in the Go programming language is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
RLSA-2025:23948 Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For more details about the security issues, including the impact, a CVSS score,...
[SECURITY] Fedora 42 Update: gobuster-3.8.2-2.fc42
Directory/File, DNS and VHost busting tool written in Go...
[SECURITY] Fedora 43 Update: gobuster-3.8.2-1.fc43
Directory/File, DNS and VHost busting tool written in Go...
github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation
A flaw was found in Expr, an expression language and expression evaluation for Go. This vulnerability allows a denial of service DoS via recursive traversal over user-provided deeply nested or cyclic data structures without enforcing a maximum recursion depth, leading to a stack overflow panic an...
ROS-20251222-7301
A vulnerability in the Golang programming language is related to input validation errors when processing directory traversal sequences in filenames. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...
RLSA-2025:23295 Moderate: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For...
RockyLinux 10 : skopeo (RLSA-2025:23294)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:23294 advisory. golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 Tenable has extracted the preceding description block directly from the...
CLSA-2025-1766138358 Update of golang
Update to Go 1.25.3...
SUSE SLES15 / openSUSE 15 Security Update : buildah (SUSE-SU-2025:4421-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4421-1 advisory. This update for buildah rebuilds it against the current security release of GO. Tenable has extracted the preceding descriptio...
CVE-2025-14764
The CVE-2025-14764 entry concerns the Amazon S3 Encryption Client for Go. The identified issue is a missing cryptographic key commitment when the encrypted data key (EDK) is stored in an Instruction File, which could allow a user with write access to the S3 bucket to introduce a rogue EDK that de...
CVE-2025-14764
Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigat...
CLSA-2025-1765987793 grafana: Fix of CVE-2025-58183
rebuild with newer golang to fix CVE-2025-58183 fix unbounded memory consumption when reading GNU pax 1.0 sparse files...
SUSE-SU-2025:4437-1 Security update for helm
This update for helm rebuilds it against current GO to fix security issues in go-stdlib...
Security update for buildah
This update for buildah rebuilds it against the current security release of GO. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...