9083 matches found
cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction
A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...
net/textproto: golang: Golang net/textproto: Misleading error messages via input injection
A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead...
RLSA-2026:57126 Important: yggdrasil security update
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fixes: crypto/x509: golang: Go crypto/x509: Certificate...
GO-2026-6223 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips...
GO-2026-6099 vulnerabilities
Vulnerabilities for packages: k3s, kubo, ipfs-cluster, spegel...
GO-2026-6163 vulnerabilities
Vulnerabilities for packages: k3s, kubo, ipfs-cluster, spegel...
cngo
cngo v1 Strumento Golang veloce che prende un file con domini e ottiene il cname per ogni dominio s Installazione root@kitploit: $ go get -u github.com/yghonem14/cngo Utilizzo Base cngo accetta solo file di testo: root@kitploit: $ cngo -f /targets/spotify.txt creativeservice.spotify.com -...
CVE-2026-46600 affecting package golang for versions less than 1.26.6-1
CVE-2026-46600 affecting package golang for versions less than 1.26.6-1. An upgraded version of the package is available that resolves this issue...
Golang 1.26.x < 1.26.6 DoS
The version of Golang running on the remote host is 1.26.x prior to 1.26.6. It is, therefore, affected by a denial of service vulnerability in the bundled golang.org/x/net/dns/dnsmessage package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the messag...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.43 security update
Red Hat build of MicroShift release 4.19.43 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
ROOT-APP-GOBINARY-CVE-2026-25681 CVE-2026-25681 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-25681 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-39821 CVE-2026-39821 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-39821 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2025-47911 CVE-2025-47911 in golang.org/x/net - Patched by Root
Root has patched CVE-2025-47911 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-27136 CVE-2026-27136 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-27136 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-42502 CVE-2026-42502 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-42502 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2025-58190 CVE-2025-58190 in golang.org/x/net - Patched by Root
Root has patched CVE-2025-58190 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2025-22870 CVE-2025-22870 in golang.org/x/net - Patched by Root
Root has patched CVE-2025-22870 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...