103 matches found
ROOT-APP-GOBINARY-CVE-2026-42154 CVE-2026-42154 in github.com/prometheus/prometheus - Patched by Root
Root has patched CVE-2026-42154 in the github.com/prometheus/prometheus package for Root:Go. Multiple fixed versions available...
CVE-2022-44877
usa el módulo go-exploit cuando el modo de módulo está desactivado go get github.com/vulncheck-oss/go-exploit cuando el modo de módulo está activado go mod init example.com/myapp go get github.com/vulncheck-oss/go-exploit construcción go build -o cve-2022-44877 main.go...
ROOT-APP-GOBINARY-CVE-2026-56865 CVE-2026-56865 in golang.org/x/mod - Patched by Root
Root has patched CVE-2026-56865 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...
go-mal-pkgs
go-mal-pkgs A security tool to detect malicious Go packages by verifying checksums in go.sum against the original source code, bypassing the Go Module Proxy cache. Overview This tool helps protect against supply chain attacks that exploit the Go Module Proxy cache, as recently demonstrated by the...
CLEANSTART-2026-XV99350 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Multiple security vulnerabilities affect the kyverno package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
GO-2026-6311 Vikunja has a project duplication bypasses write-permission check on the target parent project in code.vikunja.io/api
Vikunja has a project duplication bypasses write-permission check on the target parent project in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...
BIT-GOLANG-2026-56865 Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
GO-2026-6140 Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate
Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate...
GO-2026-6158 Wings exposes node configuration secrets through egg configuration-file templating in github.com/pterodactyl/wings
Wings exposes node configuration secrets through egg configuration-file templating in github.com/pterodactyl/wings...
SUSE CVE-2026-56865
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
GO-2024-2907 vulnerabilities
Vulnerabilities for packages: nuclei...
GO-2020-0015 vulnerabilities
Vulnerabilities for packages: vt-cli, k3d...
GO-2023-1795 vulnerabilities
Vulnerabilities for packages: skaffold, aactl...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: cosign-fips, argo-workflows, spire-server-fips, cloudflared, tkn, dex, spire-server, bank-vaults-fips, kubescape, gitsign, fulcio-fips, timestamp-authority-fips, vexctl, fulcio, terragrunt, sops, slsa-verifier, kots, falcoctl-fips, oauth2-proxy,...
GO-2025-3848 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
Linux Distros Unpatched Vulnerability : CVE-2026-56864
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and...
AZL-96647 CVE-2026-56865 affecting package golang 1.25.12-1
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
UBUNTU-CVE-2026-56865
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
EUVD-2026-58513
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
