quic-go 安全漏洞

quic-go is an implementation of the QUIC protocol, RFC 9000 protocol in Go by Lucas Clemente, a personal developer. A security vulnerability in quic-go versions prior to 0.49.0, prior to 0.54.1, and prior to 0.55.0, which stems from improper handling of assertion failures, could lead to a denial ...

AlmaLinux 10 : golang (ALSA-2025:13941)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:13941 advisory. cmd/go: Go VCS Command Execution Vulnerability CVE-2025-4674 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...

EUVD-2016-4968

Malware in sbrugna...

EUVD-2014-7066

Malware in sbrugna...

EUVD-2020-21877

Malware in sbrugna...

EUVD-2021-1212

Malware in sbrugna...

EUVD-2021-16397

Malware in sbrugna...

EUVD-2016-4967

Malware in sbrugna...

RockyLinux 9 : golang (RLSA-2025:13935)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:13935 advisory. cmd/go: Go VCS Command Execution Vulnerability CVE-2025-4674 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

EUVD-2023-2633

Malicious code in bioql PyPI...

EUVD-2022-32037

Malicious code in bioql PyPI...

EUVD-2022-32613

Malicious code in bioql PyPI...

EUVD-2024-0394

Malicious code in bioql PyPI...

EUVD-2022-6561

Malicious code in bioql PyPI...

EUVD-2022-34125

Malicious code in bioql PyPI...

EUVD-2022-52464

Malicious code in bioql PyPI...

EUVD-2024-2773

Malicious code in bioql PyPI...

GO-2025-3970 DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly

DragonFly vulnerable to panics due to nil pointer dereference when using variables created alongside an error in d7y.io/dragonfly...

Always-Incorrect Control Flow Implementation

Overview std/net/http is a Go standard library package std/net/http Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation. Go Vulnerability Report: When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20250918T182144 2025-09-18T18:21:44Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3915 CVE-2025-5187 GHSA-4x4m-3c2p-qppc GO-2025-3956 CVE-2025-47906 CVE-2025-47906 Update to...