Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

32673 matches found

UbuntuCve
UbuntuCve•added 2026/05/07 8:16 p.m.•29 views

CVE-2026-42501

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy GOMODPROXY or checksum database GOSUMDB. A malicious module proxy can serve altered versions o...

7.5CVSS5.8AI score0.00231EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu•added 2026/05/07 8:16 p.m.•28 views

UBUNTU-CVE-2026-42501

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy GOMODPROXY or checksum database GOSUMDB. A malicious module proxy can serve altered versions o...

7.5CVSS7.3AI score0.00231EPSS
SaveExploits0References8
Cvelist
Cvelist•added 2026/05/07 7:41 p.m.•79 views

CVE-2026-42501 Malicious module proxy can bypass checksum database in cmd/go

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy GOMODPROXY or checksum database GOSUMDB. A malicious module proxy can serve altered versions o...

0.00231EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2026/05/07 7:41 p.m.•25 views

CVE-2026-42501 Malicious module proxy can bypass checksum database in cmd/go

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy GOMODPROXY or checksum database GOSUMDB. A malicious module proxy can serve altered versions o...

7.3AI score0.00231EPSS
SaveExploits0References4
osv_cve
osv_cve•added 2026/05/07 7:41 p.m.•28 views

CVE-2026-42501 Malicious module proxy can bypass checksum database in cmd/go

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy GOMODPROXY or checksum database GOSUMDB. A malicious module proxy can serve altered versions o...

7.5CVSS7.1AI score
SaveExploits0References7
CVE
CVE•added 2026/05/07 7:41 p.m.•163 views

CVE-2026-42501

The golang toolchain is vulnerable to a flaw in how the go command validates module checksums. When a module is not listed in the go.sum file, the command queries the checksum database; however, if the database returns a successful response without an entry for the module, the command incorrectly...

7.5CVSS7.3AI score0.00231EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE•added 2026/05/07 7:41 p.m.•56 views

CVE-2026-42501

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy GOMODPROXY or checksum database GOSUMDB. A malicious module proxy can serve altered versions o...

7.5CVSS7.2AI score0.00231EPSS
SaveExploits0
AlpineLinux
AlpineLinux•added 2026/05/07 7:41 p.m.•68 views

CVE-2026-42501

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy GOMODPROXY or checksum database GOSUMDB. A malicious module proxy can serve altered versions o...

7.5CVSS7.3AI score0.00231EPSS
SaveExploits0
attackerkb
attackerkb•added 2026/05/07 7:41 p.m.•23 views

CVE-2026-42501

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy GOMODPROXY or checksum database GOSUMDB. A malicious module proxy can serve altered versions o...

7.2AI score0.00231EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb•added 2026/05/07 7:41 p.m.•114 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.8AI score0.0039EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment•added 2026/05/07 7:41 p.m.•21 views

CVE-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.8AI score0.0039EPSS
SaveExploits0References4
Debian CVE
Debian CVE•added 2026/05/07 7:41 p.m.•47 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS6.4AI score0.0039EPSS
SaveExploits0
AlpineLinux
AlpineLinux•added 2026/05/07 7:41 p.m.•52 views

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS6.5AI score0.0039EPSS
SaveExploits0
CVE
CVE•added 2026/05/07 7:41 p.m.•136 views

CVE-2026-39825

The Go programming language 's built-in ReverseProxy component is vulnerable to a logic error where it fails to account for the url.ParseQuery limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N). This allows ReverseProxy to forward a request containing query ...

5.3CVSS6.4AI score0.0039EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist•added 2026/05/07 7:41 p.m.•70 views

CVE-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

0.0039EPSS
SaveExploits0References4
Snyk
Snyk•added 2026/05/07 7:21 p.m.•26 views

Information Exposure

Overview std/net/http/httputil is a Go standard library package std/net/http/httputil Affected versions of this package are vulnerable to Information Exposure. Go Vulnerability Report: ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrit...

6.9CVSS5.8AI score0.0039EPSS
SaveExploits0References3
osv_go
osv_go•added 2026/05/07 7:21 p.m.•42 views

GO-2026-4984 Malicious module proxy can bypass checksum database in cmd/go

A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module proxy GOMODPROXY or checksum database GOSUMDB. A malicious module proxy can serve altered versions o...

7.5CVSS7.3AI score0.00231EPSS
SaveExploits0References3
Snyk
Snyk•added 2026/05/07 7:21 p.m.•15 views

Resources Downloaded over Insecure Protocol

Overview Affected versions of this package are vulnerable to Resources Downloaded over Insecure Protocol. Go Vulnerability Report: A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any...

7.5CVSS5.8AI score0.00231EPSS
SaveExploits0References3
osv_go
osv_go•added 2026/05/07 7:21 p.m.•42 views

GO-2026-4976 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

5.3CVSS6.5AI score0.0039EPSS
SaveExploits0References3
Debian
Debian•added 2026/05/07 7:05 p.m.•46 views

[SECURITY] [DSA 6252-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6252-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 07, 2026 https://www.debian.org/security/faq -...

7.5CVSS5.8AI score0.00348EPSS
SaveExploits0
Rows per page
Query Builder