Lucene search
+L

105 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.5 views

AlmaLinux 10 : golang-github-openprinting-ipp-usb (ALSA-2026:62631)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:62631 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of Servi...

7.5CVSS7.3AI score0.00568EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.6 views

RockyLinux 9 : grafana (RLSA-2026:62406)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62406 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via...

7.5CVSS7.3AI score0.00798EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
added 2026/09/02 12:00 a.m.9 views

RHEL 9 : osbuild-composer (RHSA-2026:62753)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62753 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

7.5CVSS7.3AI score0.00798EPSS
SaveExploits0References18
OSV
OSV
added 2026/08/30 4:17 a.m.12 views

MGASA-2026-0341 Updated golang packages fix security vulnerabilities

CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary...

9.6CVSS6.7AI score0.00692EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.8 views

SUSE SLES16 Security Update : distribution (SUSE-SU-2026:22945-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22945-1 advisory. This update for distribution fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only...

9.6CVSS6.4AI score0.00692EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/07/27 12:00 a.m.13 views

openSUSE 16 Security Update : distribution (openSUSE-SU-2026:21441-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21441-1 advisory. This update for distribution fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...

9.6CVSS5.9AI score0.00692EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:00 a.m.13 views

Amazon Linux 2023 : golang-github-burntsushi-toml-test, golang-github-burntsushi-toml-test-devel (ALAS2023-2026-1977)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1977 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...

7.8CVSS5.5AI score0.00382EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:00 a.m.13 views

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-1878)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1878 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, . to execute repeatedly on the same...

7.5CVSS6.2AI score0.00591EPSS
SaveExploits0References8
OSV
OSV
added 2026/06/03 5:44 p.m.12 views

OPENSUSE-SU-2026:20902-1 Security update for keybase-client

This update for keybase-client fixes the following issues: Changes in keybase-client: - golang.org/x/crypto/ssh: Fixed multiple issues: CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833, CVE-2026-39830, CVE-2026-39832, CVE-2026-46597,...

10CVSS5.5AI score0.07314EPSS
SaveExploits1References26
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:00 a.m.32 views

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-1743)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1743 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport...

7.5CVSS7.6AI score0.00813EPSS
SaveExploits0References22
Tenable Nessus
Tenable Nessus
added 2026/05/19 12:00 a.m.24 views

RHEL 9 : golang (RHSA-2026:19181)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19181 advisory. The golang packages provide the Go programming language compiler. Security Fixes: crypto/x509: Incorrect enforcement of email constraints i...

7.5CVSS7.3AI score0.00728EPSS
SaveExploits0References7
OSV
OSV
added 2026/05/16 6:17 a.m.26 views

MGASA-2026-0143 Updated golang packages fix security vulnerabilities

We are moving to a supported branch as ver. 1.24 reaches EOL. This update comes with the security vulnerabilities fixed in the 1.25 branch. Please see the links for details...

9.8CVSS5.8AI score0.00728EPSS
SaveExploits0References3
Mageia
Mageia
added 2026/05/16 6:17 a.m.22 views

Updated golang packages fix security vulnerabilities

We are moving to a supported branch as ver. 1.24 reaches EOL. This update comes with the security vulnerabilities fixed in the 1.25 branch. Please see the links for details...

9.8CVSS7.4AI score0.00728EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/13 12:00 a.m.12 views

RHEL 9 : golang (RHSA-2026:16497)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16497 advisory. The golang packages provide the Go programming language compiler. Security Fixes: cmd/go: golang: Go golang and cmd/go: Arbitrary Code Execution via...

9CVSS5.9AI score0.00658EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/13 12:00 a.m.8 views

RHEL 9 : golang (RHSA-2026:7833)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7833 advisory. The golang packages provide the Go programming language compiler. Security Fixes: cmd/go: cmd/go: Arbitrary file write via malicious...

8.6CVSS5.9AI score0.00728EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/03/30 12:00 a.m.26 views

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-1482)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1482 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or...

7.5CVSS7.5AI score0.00728EPSS
SaveExploits0References8
Amazon
Amazon
added 2026/03/27 12:00 a.m.17 views

Medium: golang

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...

7.5CVSS7AI score0.00728EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/03/26 12:00 a.m.6 views

RHEL 10 : golang (RHSA-2026:5941)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:5941 advisory. The golang packages provide the Go programming language compiler. Security Fixes: cmd/go: cmd/go: Arbitrary file write via malicious...

8.6CVSS7.1AI score0.00728EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/03/04 12:00 a.m.51 views

RHEL 9 : golang (RHSA-2026:3472)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3472 advisory. The golang packages provide the Go programming language compiler. Security Fixes: golang: archive/zip: Excessive CPU consumption when buildi...

8.6CVSS6.1AI score0.01979EPSS
SaveExploits1References8
OSV
OSV
added 2026/03/03 12:00 a.m.8 views

ALSA-2026:3668 Important: go-rpm-macros security update

This package provides build-stage rpm automation to simplify the creation of Go language golang packages. It does not need to be included in the default build root: go-srpm-macros will pull it in for Go packages only. Security Fixes: golang: net/url: Memory exhaustion in query parameter parsing i...

7.5CVSS7.1AI score0.01979EPSS
SaveExploits0References4
Rows per page
Query Builder