16489 matches found
Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
...
Possible private key restoration in go package github.com/ecies/go
...
Infinite loop in parsing in go/scanner
...
Command 'go get' may unexpectedly fallback to insecure git in cmd/go
...
Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http
...
Insufficient sanitization of Host header in net/http
...
Memory exhaustion in multipart form parsing in net/textproto and net/http
...
Incorrect results returned from Rows.Scan in database/sql
...
Stack exhaustion in all Parse functions in go/parser
...
Unexpected command execution in untrusted VCS repositories in cmd/go
...
Arbitrary code execution during build via line directives in cmd/go
...
Go Snowflake Driver has race condition when checking access to Easy Logging configuration file
...
Stack exhaustion in Parse in go/build/constraint
...
Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
...
Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.
...
Arbitrary code execution during build on Darwin in cmd/go
...
Output of "go env" does not sanitize values in cmd/go
...
drm/amd/display: Fix disable_otg_wa logic
...
Linux Distros Unpatched Vulnerability : CVE-2025-47909
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hosts listed in TrustedOrigins implicitly allow requests from the corresponding HTTP origins, allowing network MitMs to perform CSRF attacks. After the...
Linux Distros Unpatched Vulnerability : CVE-2022-37315
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser. CVE-2022-37315 Note that Nessus relies on the presence of the...