15787 matches found
[SECURITY] Fedora 43 Update: gobuster-3.8.2-1.fc43
Directory/File, DNS and VHost busting tool written in Go...
github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation
A flaw was found in Expr, an expression language and expression evaluation for Go. This vulnerability allows a denial of service DoS via recursive traversal over user-provided deeply nested or cyclic data structures without enforcing a maximum recursion depth, leading to a stack overflow panic an...
RHEL 9 : go-rpm-macros (RHSA-2025:23851)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:23851 advisory. This package provides build-stage rpm automation to simplify the creation of Go language golang packages. It does not need to be included in the...
RHEL 8 : go-toolset:rhel8 (RHSA-2025:23740)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23740 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: os/exec: Unexpect...
RHEL 9 : go-rpm-macros (RHSA-2025:23833)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:23833 advisory. This package provides build-stage rpm automation to simplify the creation of Go language golang packages. It does not need to be included in the...
RHEL 9 : go-rpm-macros (RHSA-2025:23834)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:23834 advisory. This package provides build-stage rpm automation to simplify the creation of Go language golang packages. It does not need to be included in the...
Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For more details about the security issues, including the impact, a CVSS score,...
ROS-20251222-7301
A vulnerability in the Golang programming language is related to input validation errors when processing directory traversal sequences in filenames. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...
RHEL 8 : go-toolset:rhel8 (RHSA-2025:23737)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23737 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: os/exec: Unexpect...
ALSA-2025:23948 Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For more details about the security issues, including the impact, a CVSS score,...
RHEL 9 : grafana (RHSA-2025:23746)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:23746 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: archive/tar:...
RHEL 8 : go-toolset:rhel8 (RHSA-2025:23733)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23733 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: os/exec: Unexpect...
RHEL 8 : go-toolset:rhel8 (RHSA-2025:23741)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23741 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: os/exec: Unexpect...
CLSA-2025-1766233299 go-rpm-macros: Fix of CVE-2025-47906
CVE-2025-47906: fix unexpected paths returned from LookPath in os/exec...
CLSA-2025-1766232861 delve: Fix of CVE-2025-58183
rebuild with golang 1.25.3-1 to fix CVE-2025-58183 fix unbounded memory consumption when reading GNU pax 1.0 sparse files - fix failing tests for golang 1.25...
RLSA-2025:23295 Moderate: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For...
[SECURITY] Fedora 43 Update: gosec-2.22.11-2.fc43
Go security checker...
RockyLinux 10 : skopeo (RLSA-2025:23294)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:23294 advisory. golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 Tenable has extracted the preceding description block directly from the...