274 matches found
ROOT-APP-GOBINARY-CVE-2025-58181 CVE-2025-58181 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2025-58181 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
CVE-2026-39822 affecting package golang for versions less than 1.25.12-1
CVE-2026-39822 affecting package golang for versions less than 1.25.12-1. A patched version of the package is available...
RHEL 10 : golang (RHSA-2026:37436)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:37436 advisory. The golang packages provide the Go programming language compiler. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna:...
CVE-2026-39821 affecting package golang for versions less than 1.25.11-2
CVE-2026-39821 affecting package golang for versions less than 1.25.11-2. A patched version of the package is available...
OPENSUSE-SU-2026:11012-1 golang-github-prometheus-node_exporter-1.11.1-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-nodeexporter-1.11.1-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-27145 affecting package golang for versions less than 1.26.4-1
CVE-2026-27145 affecting package golang for versions less than 1.26.4-1. A patched version of the package is available...
CVE-2026-42504 affecting package golang for versions less than 1.26.4-1
CVE-2026-42504 affecting package golang for versions less than 1.26.4-1. A patched version of the package is available...
CVE-2026-27145 affecting package golang for versions less than 1.25.11-1
CVE-2026-27145 affecting package golang for versions less than 1.25.11-1. A patched version of the package is available...
CVE-2026-42504 affecting package golang for versions less than 1.25.11-1
CVE-2026-42504 affecting package golang for versions less than 1.25.11-1. A patched version of the package is available...
Cross-site Scripting (XSS)
Overview golang.org/x/net/html is a package that implements an HTML5-compliant tokenizer and parser. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the inBodyEndTagOther function, when rendering sanitized HTML. An attacker can cause the execution of scripts in the...
CVE-2026-33814 affecting package golang for versions less than 1.26.3-1
CVE-2026-33814 affecting package golang for versions less than 1.26.3-1. An upgraded version of the package is available that resolves this issue...
Unity Linux 20.1050e / 20.1070e Security Update: golang (UTSA-2026-016809)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016809 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. Tenable has extracted the preceding description block directly from t...
RHEL 9 : golang (RHSA-2026:7883)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7883 advisory. The golang packages provide the Go programming language compiler. Security Fixes: cmd/go: cmd/go: Arbitrary file write via malicious...
MiracleLinux 9 : golang-1.25.8-1.el9_7 (AXSA:2026-370:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-370:03 advisory. cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive CVE-2025-61731 net/url: Incorrect parsing of IPv6 host literals in net/url...
OPENSUSE-SU-2026:10432-1 golang-github-v2fly-v2ray-core-5.47.0-1.1 on GA media
These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.47.0-1.1 package on the GA media of openSUSE Tumbleweed...
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2026-1310)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-27137 affecting package golang for versions less than 1.25.8-1
CVE-2026-27137 affecting package golang for versions less than 1.25.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-27137 affecting package golang for versions less than 1.26.1-1
CVE-2026-27137 affecting package golang for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2026-1240)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...