9118 matches found
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
...
Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
...
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
...
Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
...
Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
...
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
...
Invoking duplicate attributes can cause XSS in golang.org/x/net/html
...
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
...
Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
...
Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html
...
Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
...
Amazon Linux 2 : golang, --advisory ALAS2-2026-3313 (ALAS-2026-3313)
The version of golang installed on the remote host is prior to 1.25.10-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3313 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a...
Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-1743)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1743 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport...
GHSA-5CV4-JP36-H3MW Go Net HTML parser is vulnerable to denial of service
In Go Net golang.org/x/net before verion 0.55.0, parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation
A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...
crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation
A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...
ROS-20260526-73-0013
Vulnerability in golang-x-image related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
The vulnerability of the golang.org/x/image/tiff library in the Go programming language, which allows attackers to execute arbitrary code.
The vulnerability of the golang.org/x/image/tiff library in the Go programming language is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260524-73-0058
Vulnerability in golang-x-crypto related to the use of insufficiently randomized values. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...
CVE-2026-39824
In CVE-2026-39824, the issue is in golang.org/x/sys/windows: NewNTUnicodeString does not validate string length against the 16-bit NTUnicodeString size. This can cause an overflow and result in a truncated string instead of an error. Public references indicate the vulnerability affects Go-related...