GO-2025-4017 Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go...

CVE-2025-11602

A flaw was found in Neo4j. A potential information leak in the bolt protocol handshake allows an attacker to obtain one byte of information from previous connections. However, the attacker has no control over the information leaked in server responses. Mitigation Mitigation for this issue is eith...

EUVD-2025-37324

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses...

CVE-2025-11602

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses...

Sensitive Information in Resource Not Removed Before Reuse

Overview Affected versions of this package are vulnerable to Sensitive Information in Resource Not Removed Before Reuse in the Bolt protocol handshake. An attacker can obtain one byte of information from previous connections by sending crafted requests during the protocol negotiation phase. The...

CVE-2025-11602 Untargeted information leak in Bolt protocol handshake

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses...

CVE-2025-11602 Untargeted information leak in Bolt protocol handshake

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses...

CVE-2025-11602

The CVE-2025-11602 issue affects Neo4j Bolt protocol handshakes in both Neo4j Enterprise and Community editions. The flaw allows an attacker to obtain one byte of information from a previous connection during the bolt handshake, with the leaked data being under attacker control over the responses...

CVE-2025-11602 Untargeted information leak in Bolt protocol handshake

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses...

PT-2025-44600

Name of the Vulnerable Software and Affected Versions Neo4j versions prior to 2025-11602 Description A potential information leak exists in the bolt protocol handshake within Neo4j Enterprise and Community editions. This allows an attacker to obtain one byte of information from previous...

CVE-2025-11602: Sensitive Information in Resource Not Removed Before Reuse

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses...

Neo4j Enterprise Edition and Neo4j Community Edition security vulnerabilities

Neo4j Enterprise Edition and Neo4j Community Edition are both graph databases from Neo4j USA. A security vulnerability exists in Neo4j Enterprise Edition and Neo4j Community Edition that stems from information disclosure during the bolt protocol handshake, which could lead to an attacker obtainin...

CVE-2025-58189

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

EUVD-2025-36737

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...

CVE-2025-58189

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...

AZL-78917 CVE-2025-58189 affecting package golang 1.25.7-1

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...

UBUNTU-CVE-2025-58189

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...

CVE-2025-58189 ALPN negotiation error contains attacker controlled information in crypto/tls

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...

CVE-2025-58189

The Go programming language (affected in various Linux distributions like Rocky Linux and AlmaLinux ) is vulnerable to a flaw where a failed Conn.Handshake during ALPN negotiation produces an error containing unescaped, attacker-controlled information (the ALPN protocols sent by the client). This...

CVE-2025-58189 ALPN negotiation error contains attacker controlled information in crypto/tls

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...