| busybox |
CVE-2023-42366 |
MEDIUM |
1.35.0-r17 |
1.35.0-r18 |
https://access.redhat.com/security/cve/CVE-2023-42366
https://bugs.busybox.net/show_bug.cgi?id=15874
https://nvd.nist.gov/vuln/detail/CVE-2023-42366
https://security.netapp.com/advisory/ntap-20241206-0007/
https://www.cve.org/CVERecord?id=CVE-2023-42366
|
| libcrypto1.1 |
CVE-2023-5678 |
MEDIUM |
1.1.1v-r0 |
1.1.1w-r1 |
http://www.openwall.com/lists/oss-security/2024/03/11/1
https://access.redhat.com/errata/RHSA-2024:2447
https://access.redhat.com/security/cve/CVE-2023-5678
https://bugzilla.redhat.com/2223016
https://bugzilla.redhat.com/2224962
https://bugzilla.redhat.com/2227852
https://bugzilla.redhat.com/2248616
https://bugzilla.redhat.com/2257571
https://bugzilla.redhat.com/2258502
https://bugzilla.redhat.com/2259944
https://bugzilla.redhat.com/show_bug.cgi?id=2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2227852
https://bugzilla.redhat.com/show_bug.cgi?id=2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2270358
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408
https://errata.almalinux.org/9/ALSA-2024-2447.html
https://errata.rockylinux.org/RLSA-2023:7877
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6
https://linux.oracle.com/cve/CVE-2023-5678.html
https://linux.oracle.com/errata/ELSA-2024-2447.html
https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html
https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2023-5678
https://security.netapp.com/advisory/ntap-20231130-0010/
https://ubuntu.com/security/notices/USN-6622-1
https://ubuntu.com/security/notices/USN-6632-1
https://ubuntu.com/security/notices/USN-6709-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-5678
https://www.openssl.org/news/secadv/20231106.txt
|
| libssl1.1 |
CVE-2023-5678 |
MEDIUM |
1.1.1v-r0 |
1.1.1w-r1 |
http://www.openwall.com/lists/oss-security/2024/03/11/1
https://access.redhat.com/errata/RHSA-2024:2447
https://access.redhat.com/security/cve/CVE-2023-5678
https://bugzilla.redhat.com/2223016
https://bugzilla.redhat.com/2224962
https://bugzilla.redhat.com/2227852
https://bugzilla.redhat.com/2248616
https://bugzilla.redhat.com/2257571
https://bugzilla.redhat.com/2258502
https://bugzilla.redhat.com/2259944
https://bugzilla.redhat.com/show_bug.cgi?id=2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2227852
https://bugzilla.redhat.com/show_bug.cgi?id=2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2270358
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408
https://errata.almalinux.org/9/ALSA-2024-2447.html
https://errata.rockylinux.org/RLSA-2023:7877
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6
https://linux.oracle.com/cve/CVE-2023-5678.html
https://linux.oracle.com/errata/ELSA-2024-2447.html
https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html
https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2023-5678
https://security.netapp.com/advisory/ntap-20231130-0010/
https://ubuntu.com/security/notices/USN-6622-1
https://ubuntu.com/security/notices/USN-6632-1
https://ubuntu.com/security/notices/USN-6709-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-5678
https://www.openssl.org/news/secadv/20231106.txt
|
| musl |
CVE-2025-26519 |
HIGH |
1.2.3-r3 |
1.2.3-r4 |
http://www.openwall.com/lists/oss-security/2025/02/13/2
http://www.openwall.com/lists/oss-security/2025/02/13/3
http://www.openwall.com/lists/oss-security/2025/02/13/4
http://www.openwall.com/lists/oss-security/2025/02/13/5
http://www.openwall.com/lists/oss-security/2025/02/14/5
http://www.openwall.com/lists/oss-security/2025/02/14/6
https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da
https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659
https://www.openwall.com/lists/oss-security/2025/02/13/2
|
| musl-utils |
CVE-2025-26519 |
HIGH |
1.2.3-r3 |
1.2.3-r4 |
http://www.openwall.com/lists/oss-security/2025/02/13/2
http://www.openwall.com/lists/oss-security/2025/02/13/3
http://www.openwall.com/lists/oss-security/2025/02/13/4
http://www.openwall.com/lists/oss-security/2025/02/13/5
http://www.openwall.com/lists/oss-security/2025/02/14/5
http://www.openwall.com/lists/oss-security/2025/02/14/6
https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da
https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659
https://www.openwall.com/lists/oss-security/2025/02/13/2
|
| ssl_client |
CVE-2023-42366 |
MEDIUM |
1.35.0-r17 |
1.35.0-r18 |
https://access.redhat.com/security/cve/CVE-2023-42366
https://bugs.busybox.net/show_bug.cgi?id=15874
https://nvd.nist.gov/vuln/detail/CVE-2023-42366
https://security.netapp.com/advisory/ntap-20241206-0007/
https://www.cve.org/CVERecord?id=CVE-2023-42366
|
| No Misconfigurations found |
| github.com/Azure/azure-sdk-for-go/sdk/azidentity |
CVE-2024-35255 |
MEDIUM |
v1.2.0 |
1.6.0-beta.4.0.20240610221955-50774cd97099 |
https://access.redhat.com/security/cve/CVE-2024-35255
https://github.com/Azure/azure-sdk-for-go/commit/50774cd9709905523136fb05e8c85a50e8984499
https://github.com/Azure/azure-sdk-for-java/commit/5bf020d6ea056de40e2738e3647a4e06f902c18d
https://github.com/Azure/azure-sdk-for-js/commit/c6aa75d312ae463e744163cedfd8fc480cc8d492
https://github.com/Azure/azure-sdk-for-net/commit/9279a4f38bf69b457cfb9b354f210e0a540a5c53
https://github.com/Azure/azure-sdk-for-python/commit/cb065acd7d0f957327dc4f02d1646d4e51a94178
https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/4806#issuecomment-2178960340
https://github.com/advisories/GHSA-m5vv-6r4h-3vj9
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255
https://nvd.nist.gov/vuln/detail/CVE-2024-35255
https://www.cve.org/CVERecord?id=CVE-2024-35255
|
| github.com/buger/jsonparser |
CVE-2026-32285 |
HIGH |
v1.1.1 |
1.1.2 |
https://access.redhat.com/security/cve/CVE-2026-32285
https://github.com/buger/jsonparser
https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0
https://github.com/buger/jsonparser/issues/275
https://github.com/buger/jsonparser/pull/276
https://github.com/buger/jsonparser/releases/tag/v1.1.2
https://github.com/golang/vulndb/issues/4514
https://nvd.nist.gov/vuln/detail/CVE-2026-32285
https://pkg.go.dev/vuln/GO-2026-4514
https://securityinfinity.com/research/buger-jsonparser-negative-slice-panic-dos-2026
https://www.cve.org/CVERecord?id=CVE-2026-32285
|
| github.com/golang-jwt/jwt/v4 |
CVE-2025-30204 |
HIGH |
v4.5.0 |
4.5.2 |
https://access.redhat.com/errata/RHSA-2025:7425
https://access.redhat.com/security/cve/CVE-2025-30204
https://bugzilla.redhat.com/2354195
https://bugzilla.redhat.com/show_bug.cgi?id=2347423
https://bugzilla.redhat.com/show_bug.cgi?id=2348366
https://bugzilla.redhat.com/show_bug.cgi?id=2352914
https://bugzilla.redhat.com/show_bug.cgi?id=2354195
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29786
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30204
https://errata.almalinux.org/9/ALSA-2025-7425.html
https://errata.rockylinux.org/RLSA-2025:7479
https://github.com/golang-jwt/jwt
https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3
https://github.com/golang-jwt/jwt/commit/bf316c48137a1212f8d0af9288cc9ce8e59f1afb
https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp
https://linux.oracle.com/cve/CVE-2025-30204.html
https://linux.oracle.com/errata/ELSA-2025-7967.html
https://nvd.nist.gov/vuln/detail/CVE-2025-30204
https://pkg.go.dev/vuln/GO-2025-3553
https://security.netapp.com/advisory/ntap-20250404-0002
https://security.netapp.com/advisory/ntap-20250404-0002/
https://www.cve.org/CVERecord?id=CVE-2025-30204
|
| github.com/golang-jwt/jwt/v4 |
CVE-2024-51744 |
LOW |
v4.5.0 |
4.5.1 |
https://access.redhat.com/security/cve/CVE-2024-51744
https://github.com/golang-jwt/jwt
https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c
https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r
https://nvd.nist.gov/vuln/detail/CVE-2024-51744
https://www.cve.org/CVERecord?id=CVE-2024-51744
|
| github.com/hashicorp/go-retryablehttp |
CVE-2024-6104 |
MEDIUM |
v0.7.2 |
0.7.7 |
https://access.redhat.com/errata/RHSA-2024:9115
https://access.redhat.com/security/cve/CVE-2024-6104
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2292668
https://bugzilla.redhat.com/2292787
https://bugzilla.redhat.com/2294000
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2262921
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268021
https://bugzilla.redhat.com/show_bug.cgi?id=2274767
https://bugzilla.redhat.com/show_bug.cgi?id=2292668
https://bugzilla.redhat.com/show_bug.cgi?id=2294000
https://bugzilla.redhat.com/show_bug.cgi?id=2295010
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1394
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24784
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24789
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37298
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104
https://discuss.hashicorp.com/c/security
https://discuss.hashicorp.com/t/hcsec-2024-12-go-retryablehttp-can-leak-basic-auth-credentials-to-log-files/68027
https://errata.almalinux.org/9/ALSA-2024-9115.html
https://errata.rockylinux.org/RLSA-2024:5258
https://github.com/advisories/GHSA-v6v8-xj6m-xwqh
https://github.com/hashicorp/go-retryablehttp
https://github.com/hashicorp/go-retryablehttp/commit/a99f07beb3c5faaa0a283617e6eb6bcf25f5049a
https://github.com/hashicorp/go-retryablehttp/pull/158
https://linux.oracle.com/cve/CVE-2024-6104.html
https://linux.oracle.com/errata/ELSA-2024-9115.html
https://nvd.nist.gov/vuln/detail/CVE-2024-6104
https://www.cve.org/CVERecord?id=CVE-2024-6104
|
| github.com/prometheus/alertmanager |
CVE-2023-40577 |
MEDIUM |
v0.25.0 |
0.25.1 |
https://access.redhat.com/security/cve/CVE-2023-40577
https://github.com/prometheus/alertmanager
https://github.com/prometheus/alertmanager/security/advisories/GHSA-v86x-5fm3-5p7j
https://lists.debian.org/debian-lts-announce/2023/10/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-40577
https://ubuntu.com/security/notices/USN-6935-1
https://www.cve.org/CVERecord?id=CVE-2023-40577
|
| github.com/prometheus/prometheus |
CVE-2026-40179 |
MEDIUM |
v0.43.1-0.20230419161410-69155c6ba1e9 |
0.311.2-0.20260410083055-07c6232d159b |
https://github.com/prometheus/prometheus
https://github.com/prometheus/prometheus/commit/07c6232d159bfb474a077788be184d87adcfac3c
https://github.com/prometheus/prometheus/pull/18506
https://github.com/prometheus/prometheus/security/advisories/GHSA-vffh-x6r8-xx99
|
| go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp |
CVE-2023-45142 |
HIGH |
v0.40.0 |
0.44.0 |
https://access.redhat.com/security/cve/CVE-2023-45142
https://github.com/advisories/GHSA-cg3q-j54f-5p7p
https://github.com/open-telemetry/opentelemetry-go-contrib
https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65
https://github.com/open-telemetry/opentelemetry-go-contrib/pull/4277
https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.19.0
https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-5r5m-65gx-7vrh
https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr
https://github.com/open-telemetry/opentelemetry-go/blob/38e1b499c3da3107694ad2660b3888eee9c8b896/semconv/internal/v2/http.go#L223
https://github.com/open-telemetry/opentelemetry-go/blob/v1.12.0/semconv/internal/v2/http.go#L159
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2UTRJ54INZG3OC2FTAN6AFB2RYNY2GAD
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2UTRJ54INZG3OC2FTAN6AFB2RYNY2GAD/
https://nvd.nist.gov/vuln/detail/CVE-2023-45142
https://www.cve.org/CVERecord?id=CVE-2023-45142
|
| golang.org/x/crypto |
CVE-2024-45337 |
CRITICAL |
v0.11.0 |
0.31.0 |
http://www.openwall.com/lists/oss-security/2024/12/11/2
https://access.redhat.com/security/cve/CVE-2024-45337
https://github.com/golang/crypto
https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909
https://go-review.googlesource.com/c/crypto/+/635315/
https://go.dev/cl/635315
https://go.dev/issue/70779
https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ
https://nvd.nist.gov/vuln/detail/CVE-2024-45337
https://pkg.go.dev/vuln/GO-2024-3321
https://security.netapp.com/advisory/ntap-20250131-0007
https://security.netapp.com/advisory/ntap-20250131-0007/
https://ubuntu.com/security/notices/USN-7839-1
https://ubuntu.com/security/notices/USN-7839-2
https://www.cve.org/CVERecord?id=CVE-2024-45337
|
| golang.org/x/crypto |
CVE-2025-22869 |
HIGH |
v0.11.0 |
0.35.0 |
https://access.redhat.com/errata/RHSA-2025:3833
https://access.redhat.com/security/cve/CVE-2025-22869
https://bugzilla.redhat.com/2348367
https://bugzilla.redhat.com/show_bug.cgi?id=2348367
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869
https://errata.almalinux.org/9/ALSA-2025-3833.html
https://errata.rockylinux.org/RLSA-2025:7484
https://github.com/golang/crypto
https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22
https://go-review.googlesource.com/c/crypto/+/652135
https://go.dev/cl/652135
https://go.dev/issue/71931
https://linux.oracle.com/cve/CVE-2025-22869.html
https://linux.oracle.com/errata/ELSA-2025-7484.html
https://nvd.nist.gov/vuln/detail/CVE-2025-22869
https://pkg.go.dev/vuln/GO-2025-3487
https://security.netapp.com/advisory/ntap-20250411-0010
https://security.netapp.com/advisory/ntap-20250411-0010/
https://www.cve.org/CVERecord?id=CVE-2025-22869
|
| golang.org/x/crypto |
CVE-2023-48795 |
MEDIUM |
v0.11.0 |
0.17.0, 0.0.0-20231218163308-9d2ee975ef9f |
http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html
http://seclists.org/fulldisclosure/2024/Mar/21
http://www.openwall.com/lists/oss-security/2023/12/18/3
http://www.openwall.com/lists/oss-security/2023/12/19/5
http://www.openwall.com/lists/oss-security/2023/12/20/3
http://www.openwall.com/lists/oss-security/2024/03/06/3
http://www.openwall.com/lists/oss-security/2024/04/17/8
https://access.redhat.com/errata/RHSA-2024:1150
https://access.redhat.com/security/cve/CVE-2023-48795
https://access.redhat.com/security/cve/cve-2023-48795
https://access.redhat.com/solutions/7071748
https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack
https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/
https://bugs.gentoo.org/920280
https://bugzilla.redhat.com/2254210
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugzilla.suse.com/show_bug.cgi?id=1217950
https://crates.io/crates/thrussh/versions
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
https://errata.almalinux.org/9/ALSA-2024-1150.html
https://errata.rockylinux.org/RLSA-2024:0628
https://filezilla-project.org/versions.php
https://forum.netgate.com/topic/184941/terrapin-ssh-attack
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6
https://github.com/NixOS/nixpkgs/pull/275249
https://github.com/PowerShell/Win32-OpenSSH/issues/2189
https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta
https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0
https://github.com/TeraTermProject/teraterm/releases/tag/v5.1
https://github.com/advisories/GHSA-45x7-px36-x8w8
https://github.com/apache/mina-sshd/issues/445
https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab
https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22
https://github.com/cyd01/KiTTY/issues/520
https://github.com/drakkan/sftpgo/releases/tag/v2.5.6
https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42
https://github.com/erlang/otp/releases/tag/OTP-26.2.1
https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
https://github.com/hierynomus/sshj/issues/916
https://github.com/janmojzis/tinyssh/issues/81
https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5
https://github.com/libssh2/libssh2/pull/1291
https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25
https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15
https://github.com/mwiede/jsch/issues/457
https://github.com/mwiede/jsch/pull/461
https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16
https://github.com/openssh/openssh-portable/commits/master
https://github.com/paramiko/paramiko/issues/2337
https://github.com/paramiko/paramiko/issues/2337#issuecomment-1887642773
https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES
https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES
https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
https://github.com/proftpd/proftpd/issues/456
https://github.com/rapier1/hpn-ssh/releases
https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
https://github.com/ronf/asyncssh/security/advisories/GHSA-hfmc-7525-mj55
https://github.com/ronf/asyncssh/tags
https://github.com/ssh-mitm/ssh-mitm/issues/165
https://github.com/warp-tech/russh
https://github.com/warp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951
https://github.com/warp-tech/russh/releases/tag/v0.40.2
https://github.com/warp-tech/russh/security/advisories/GHSA-45x7-px36-x8w8
https://gitlab.com/libssh/libssh-mirror/-/tags
https://go.dev/cl/550715
https://go.dev/issue/64784
https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ
https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg
https://help.panic.com/releasenotes/transmit5
https://help.panic.com/releasenotes/transmit5/
https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795
https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/
https://linux.oracle.com/cve/CVE-2023-48795.html
https://linux.oracle.com/errata/ELSA-2024-2988.html
https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html
https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html
https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html
https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html
https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/
https://matt.ucc.asn.au/dropbear/CHANGES
https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC
https://news.ycombinator.com/item?id=38684904
https://news.ycombinator.com/item?id=38685286
https://news.ycombinator.com/item?id=38732005
https://nova.app/releases/#v11.8
https://nvd.nist.gov/vuln/detail/CVE-2023-48795
https://oryx-embedded.com/download/#changelog
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002
https://roumenpetrov.info/secsh/#news20231220
https://security-tracker.debian.org/tracker/CVE-2023-48795
https://security-tracker.debian.org/tracker/source-package/libssh2
https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg
https://security-tracker.debian.org/tracker/source-package/trilead-ssh2
https://security.gentoo.org/glsa/202312-16
https://security.gentoo.org/glsa/202312-17
https://security.netapp.com/advisory/ntap-20240105-0004
https://security.netapp.com/advisory/ntap-20240105-0004/
https://support.apple.com/kb/HT214084
https://terrapin-attack.com/
https://thorntech.com/cve-2023-48795-and-sftp-gateway
https://thorntech.com/cve-2023-48795-and-sftp-gateway/
https://twitter.com/TrueSkrillor/status/1736774389725565005
https://ubuntu.com/security/CVE-2023-48795
https://ubuntu.com/security/notices/USN-6560-1
https://ubuntu.com/security/notices/USN-6560-2
https://ubuntu.com/security/notices/USN-6561-1
https://ubuntu.com/security/notices/USN-6585-1
https://ubuntu.com/security/notices/USN-6589-1
https://ubuntu.com/security/notices/USN-6598-1
https://ubuntu.com/security/notices/USN-6738-1
https://ubuntu.com/security/notices/USN-7051-1
https://ubuntu.com/security/notices/USN-7292-1
https://ubuntu.com/security/notices/USN-7297-1
https://winscp.net/eng/docs/history#6.2.2
https://www.bitvise.com/ssh-client-version-history#933
https://www.bitvise.com/ssh-server-version-history
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
https://www.cve.org/CVERecord?id=CVE-2023-48795
https://www.debian.org/security/2023/dsa-5586
https://www.debian.org/security/2023/dsa-5588
https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc
https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508
https://www.netsarang.com/en/xshell-update-history
https://www.netsarang.com/en/xshell-update-history/
https://www.openssh.com/openbsd.html
https://www.openssh.com/txt/release-9.6
https://www.openwall.com/lists/oss-security/2023/12/18/2
https://www.openwall.com/lists/oss-security/2023/12/18/3
https://www.openwall.com/lists/oss-security/2023/12/20/3
https://www.paramiko.org/changelog.html
https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed
https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/
https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795
https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/
https://www.terrapin-attack.com
https://www.theregister.com/2023/12/20/terrapin_attack_ssh
https://www.vandyke.com/products/securecrt/history.txt
https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit
https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability
|
| golang.org/x/crypto |
CVE-2025-47914 |
MEDIUM |
v0.11.0 |
0.45.0 |
https://access.redhat.com/security/cve/CVE-2025-47914
https://go.dev/cl/721960
https://go.dev/issue/76364
https://go.googlesource.com/crypto
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
https://nvd.nist.gov/vuln/detail/CVE-2025-47914
https://pkg.go.dev/vuln/GO-2025-4135
https://www.cve.org/CVERecord?id=CVE-2025-47914
|
| golang.org/x/crypto |
CVE-2025-58181 |
MEDIUM |
v0.11.0 |
0.45.0 |
https://access.redhat.com/security/cve/CVE-2025-58181
https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c
https://github.com/golang/go/issues/76363
https://go.dev/cl/721961
https://go.dev/issue/76363
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA?pli=1
https://nvd.nist.gov/vuln/detail/CVE-2025-58181
https://pkg.go.dev/vuln/GO-2025-4134
https://ubuntu.com/security/notices/USN-7956-1
https://www.cve.org/CVERecord?id=CVE-2025-58181
|
| golang.org/x/net |
CVE-2023-39325 |
HIGH |
v0.12.0 |
0.17.0 |
golang.org/x/net
https://access.redhat.com/errata/RHSA-2023:6077
https://access.redhat.com/security/cve/CVE-2023-39325
https://access.redhat.com/security/cve/CVE-2023-44487
https://bugzilla.redhat.com/2242803
https://bugzilla.redhat.com/2243296
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://bugzilla.redhat.com/show_bug.cgi?id=2243296
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487
https://errata.almalinux.org/9/ALSA-2023-6077.html
https://errata.rockylinux.org/RLSA-2023:6077
https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21]
https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20]
https://github.com/golang/go/issues/63417
https://go.dev/cl/534215
https://go.dev/cl/534235
https://go.dev/issue/63417
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
https://linux.oracle.com/cve/CVE-2023-39325.html
https://linux.oracle.com/errata/ELSA-2023-5867.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/
https://nvd.nist.gov/vuln/detail/CVE-2023-39325
https://pkg.go.dev/vuln/GO-2023-2102
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231110-0008
https://security.netapp.com/advisory/ntap-20231110-0008/
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
https://www.cve.org/CVERecord?id=CVE-2023-39325
|
| golang.org/x/net |
CVE-2023-3978 |
MEDIUM |
v0.12.0 |
0.13.0 |
https://access.redhat.com/errata/RHSA-2023:6474
https://access.redhat.com/security/cve/CVE-2023-3978
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/9/ALSA-2023-6474.html
https://errata.rockylinux.org/RLSA-2023:6939
https://go.dev/cl/514896
https://go.dev/issue/61615
https://linux.oracle.com/cve/CVE-2023-3978.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://nvd.nist.gov/vuln/detail/CVE-2023-3978
https://pkg.go.dev/vuln/GO-2023-1988
https://ubuntu.com/security/notices/USN-8089-1
https://ubuntu.com/security/notices/USN-8089-2
https://ubuntu.com/security/notices/USN-8089-3
https://www.cve.org/CVERecord?id=CVE-2023-3978
|
| golang.org/x/net |
CVE-2023-44487 |
MEDIUM |
v0.12.0 |
0.17.0 |
http://www.openwall.com/lists/oss-security/2023/10/10/6
http://www.openwall.com/lists/oss-security/2023/10/10/7
http://www.openwall.com/lists/oss-security/2023/10/13/4
http://www.openwall.com/lists/oss-security/2023/10/13/9
http://www.openwall.com/lists/oss-security/2023/10/18/4
http://www.openwall.com/lists/oss-security/2023/10/18/8
http://www.openwall.com/lists/oss-security/2023/10/19/6
http://www.openwall.com/lists/oss-security/2023/10/20/8
http://www.openwall.com/lists/oss-security/2025/08/13/6
https://access.redhat.com/errata/RHSA-2023:6746
https://access.redhat.com/security/cve/CVE-2023-44487
https://access.redhat.com/security/cve/cve-2023-44487
https://akka.io/security/akka-http-cve-2023-44487.html
https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size
https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/
https://aws.amazon.com/security/security-bulletins/AWS-2023-011
https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack
https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty
https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/
https://blog.powerdns.com/2024/02/16/powerdns-dnsdist-1.9.0-released
https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack
https://blog.vespa.ai/cve-2023-44487
https://blog.vespa.ai/cve-2023-44487/
https://bugzilla.proxmox.com/show_bug.cgi?id=4988
https://bugzilla.redhat.com/2242803
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://bugzilla.suse.com/show_bug.cgi?id=1216123
https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9
https://chaos.social/@icing/111210915918780532
https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps
https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487
https://devblogs.microsoft.com/dotnet/october-2023-updates/
https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715
https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve
https://errata.almalinux.org/9/ALSA-2023-6746.html
https://errata.rockylinux.org/RLSA-2023:5838
https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088
https://github.com/Azure/AKS/issues/3947
https://github.com/Kong/kong/discussions/11741
https://github.com/advisories/GHSA-qppj-fm5r-hxr3
https://github.com/advisories/GHSA-vx74-f528-fxqg
https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
https://github.com/akka/akka-http/issues/4323
https://github.com/akka/akka-http/pull/4324
https://github.com/akka/akka-http/pull/4325
https://github.com/alibaba/tengine/issues/1872
https://github.com/apache/apisix/issues/10320
https://github.com/apache/httpd-site/pull/10
https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113
https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628
https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
https://github.com/apache/trafficserver/pull/10564
https://github.com/apple/swift-nio-http2
https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3
https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487
https://github.com/bcdannyboy/CVE-2023-44487
https://github.com/caddyserver/caddy/issues/5877
https://github.com/caddyserver/caddy/releases/tag/v2.7.5
https://github.com/dotnet/announcements/issues/277
https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73
https://github.com/eclipse/jetty.project/issues/10679
https://github.com/envoyproxy/envoy/pull/30055
https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76
https://github.com/etcd-io/etcd/issues/16740
https://github.com/facebook/proxygen/pull/466
https://github.com/golang/go/issues/63417
https://github.com/grpc/grpc-go/pull/6703
https://github.com/grpc/grpc-go/releases
https://github.com/grpc/grpc/releases/tag/v1.59.2
https://github.com/h2o/h2o/pull/3291
https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf
https://github.com/haproxy/haproxy/issues/2312
https://github.com/hyperium/hyper/issues/3337
https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244
https://github.com/junkurihara/rust-rpxy/issues/97
https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1
https://github.com/kazu-yamamoto/http2/issues/93
https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15
https://github.com/kubernetes/kubernetes/pull/121120
https://github.com/line/armeria/pull/5232
https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632
https://github.com/micrictor/http2-rst-stream
https://github.com/microsoft/CBL-Mariner/pull/6381
https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
https://github.com/nghttp2/nghttp2/pull/1961
https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
https://github.com/ninenines/cowboy/issues/1615
https://github.com/nodejs/node/pull/50121
https://github.com/openresty/openresty/issues/930
https://github.com/opensearch-project/data-prepper/issues/3474
https://github.com/oqtane/oqtane.framework/discussions/3367
https://github.com/projectcontour/contour/pull/5826
https://github.com/tempesta-tech/tempesta/issues/1986
https://github.com/varnishcache/varnish-cache/issues/3996
https://go.dev/cl/534215
https://go.dev/cl/534235
https://go.dev/issue/63417
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
https://istio.io/latest/news/security/istio-security-2023-004
https://istio.io/latest/news/security/istio-security-2023-004/
https://linkerd.io/2023/10/12/linkerd-cve-2023-44487
https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/
https://linux.oracle.com/cve/CVE-2023-44487.html
https://linux.oracle.com/errata/ELSA-2024-1444.html
https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html
https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html
https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html
https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
https://mailman.powerdns.com/pipermail/dnsdist/2023-October/001409.html
https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html
https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2
https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487
https://my.f5.com/manage/s/article/K000137106
https://netty.io/news/2023/10/10/4-1-100-Final.html
https://news.ycombinator.com/item?id=37830987
https://news.ycombinator.com/item?id=37830998
https://news.ycombinator.com/item?id=37831062
https://news.ycombinator.com/item?id=37837043
https://nodejs.org/en/blog/vulnerability/october-2023-security-releases
https://nvd.nist.gov/vuln/detail/CVE-2023-44487
https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response
https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/
https://pkg.go.dev/vuln/GO-2023-2102
https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231016-0001
https://security.netapp.com/advisory/ntap-20231016-0001/
https://security.netapp.com/advisory/ntap-20240426-0007
https://security.netapp.com/advisory/ntap-20240426-0007/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://security.netapp.com/advisory/ntap-20240621-0007
https://security.netapp.com/advisory/ntap-20240621-0007/
https://security.paloaltonetworks.com/CVE-2023-44487
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81
https://ubuntu.com/security/CVE-2023-44487
https://ubuntu.com/security/notices/USN-6427-1
https://ubuntu.com/security/notices/USN-6427-2
https://ubuntu.com/security/notices/USN-6438-1
https://ubuntu.com/security/notices/USN-6505-1
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-6754-1
https://ubuntu.com/security/notices/USN-6994-1
https://ubuntu.com/security/notices/USN-7067-1
https://ubuntu.com/security/notices/USN-7410-1
https://ubuntu.com/security/notices/USN-7469-1
https://ubuntu.com/security/notices/USN-7469-2
https://ubuntu.com/security/notices/USN-7469-3
https://ubuntu.com/security/notices/USN-7469-4
https://ubuntu.com/security/notices/USN-7892-1
https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12
https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1
https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2
https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records
https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
https://www.cve.org/CVERecord?id=CVE-2023-44487
https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event
https://www.debian.org/security/2023/dsa-5521
https://www.debian.org/security/2023/dsa-5522
https://www.debian.org/security/2023/dsa-5540
https://www.debian.org/security/2023/dsa-5549
https://www.debian.org/security/2023/dsa-5558
https://www.debian.org/security/2023/dsa-5570
https://www.eclipse.org/lists/jetty-announce/msg00181.html
https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
https://www.mail-archive.com/haproxy@formilux.org/msg44134.html
https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487
https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
https://www.openwall.com/lists/oss-security/2023/10/10/6
https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday
https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/
https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause
|
| golang.org/x/net |
CVE-2023-45288 |
MEDIUM |
v0.12.0 |
0.23.0 |
http://www.openwall.com/lists/oss-security/2024/04/03/16
http://www.openwall.com/lists/oss-security/2024/04/05/4
https://access.redhat.com/errata/RHSA-2024:2724
https://access.redhat.com/security/cve/CVE-2023-45288
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268018
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/2268273
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://errata.almalinux.org/9/ALSA-2024-2724.html
https://errata.rockylinux.org/RLSA-2024:2724
https://go.dev/cl/576155
https://go.dev/issue/65051
https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M
https://kb.cert.org/vuls/id/421644
https://linux.oracle.com/cve/CVE-2023-45288.html
https://linux.oracle.com/errata/ELSA-2024-3346.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/
https://nowotarski.info/http2-continuation-flood-technical-details
https://nowotarski.info/http2-continuation-flood/
https://nvd.nist.gov/vuln/detail/CVE-2023-45288
https://pkg.go.dev/vuln/GO-2024-2687
https://security.netapp.com/advisory/ntap-20240419-0009
https://security.netapp.com/advisory/ntap-20240419-0009/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2023-45288
https://www.kb.cert.org/vuls/id/421644
|
| golang.org/x/net |
CVE-2025-22870 |
MEDIUM |
v0.12.0 |
0.36.0 |
http://www.openwall.com/lists/oss-security/2025/03/07/2
https://access.redhat.com/security/cve/CVE-2025-22870
https://github.com/golang/go/issues/71984
https://go-review.googlesource.com/q/project:net
https://go.dev/cl/654697
https://go.dev/issue/71984
https://groups.google.com/g/golang-announce/c/4t3lzH3I0eI/m/b42ImqrBAQAJ
https://nvd.nist.gov/vuln/detail/CVE-2025-22870
https://pkg.go.dev/vuln/GO-2025-3503
https://security.netapp.com/advisory/ntap-20250509-0007
https://security.netapp.com/advisory/ntap-20250509-0007/
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2025-22870
|
| golang.org/x/net |
CVE-2025-22872 |
MEDIUM |
v0.12.0 |
0.38.0 |
https://access.redhat.com/security/cve/CVE-2025-22872
https://github.com/TheDegenerateDev5150/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9
https://github.com/advisories/GHSA-vvgc-356p-c3xw
https://go.dev/cl/662715
https://go.dev/issue/73070
https://groups.google.com/g/golang-announce/c/ezSKR9vqbqA
https://nvd.nist.gov/vuln/detail/CVE-2025-22872
https://pkg.go.dev/vuln/GO-2025-3595
https://security.netapp.com/advisory/ntap-20250516-0007
https://security.netapp.com/advisory/ntap-20250516-0007/
https://ubuntu.com/security/notices/USN-8089-1
https://ubuntu.com/security/notices/USN-8089-2
https://ubuntu.com/security/notices/USN-8089-3
https://www.cve.org/CVERecord?id=CVE-2025-22872
|
| golang.org/x/oauth2 |
CVE-2025-22868 |
HIGH |
v0.10.0 |
0.27.0 |
https://access.redhat.com/security/cve/CVE-2025-22868
https://bugzilla.redhat.com/show_bug.cgi?id=2347423
https://bugzilla.redhat.com/show_bug.cgi?id=2348366
https://bugzilla.redhat.com/show_bug.cgi?id=2352914
https://bugzilla.redhat.com/show_bug.cgi?id=2354195
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29786
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30204
https://errata.rockylinux.org/RLSA-2025:7479
https://go.dev/cl/652155
https://go.dev/issue/71490
https://nvd.nist.gov/vuln/detail/CVE-2025-22868
https://pkg.go.dev/vuln/GO-2025-3488
https://www.cve.org/CVERecord?id=CVE-2025-22868
|
| google.golang.org/grpc |
CVE-2026-33186 |
CRITICAL |
v1.53.0 |
1.79.3 |
https://access.redhat.com/security/cve/CVE-2026-33186
https://github.com/grpc/grpc-go
https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3
https://nvd.nist.gov/vuln/detail/CVE-2026-33186
https://www.cve.org/CVERecord?id=CVE-2026-33186
|
| google.golang.org/grpc |
GHSA-m425-mq94-257g |
HIGH |
v1.53.0 |
1.56.3, 1.57.1, 1.58.3 |
https://github.com/grpc/grpc-go
https://github.com/grpc/grpc-go/commit/f2180b4d5403d2210b30b93098eb7da31c05c721
https://github.com/grpc/grpc-go/pull/6703
https://github.com/grpc/grpc-go/security/advisories/GHSA-m425-mq94-257g
https://nvd.nist.gov/vuln/detail/CVE-2023-44487
|
| google.golang.org/protobuf |
CVE-2024-24786 |
MEDIUM |
v1.31.0 |
1.33.0 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:2550
https://access.redhat.com/security/cve/CVE-2024-24786
https://bugzilla.redhat.com/2268046
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786
https://errata.almalinux.org/9/ALSA-2024-2550.html
https://errata.rockylinux.org/RLSA-2024:2550
https://github.com/protocolbuffers/protobuf-go
https://github.com/protocolbuffers/protobuf-go/commit/f01a588e5810b90996452eec4a28f22a0afae023
https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.33.0
https://go-review.googlesource.com/c/protobuf/+/569356
https://go.dev/cl/569356
https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/
https://linux.oracle.com/cve/CVE-2024-24786.html
https://linux.oracle.com/errata/ELSA-2024-4246.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU/
https://nvd.nist.gov/vuln/detail/CVE-2024-24786
https://pkg.go.dev/vuln/GO-2024-2611
https://security.netapp.com/advisory/ntap-20240517-0002
https://security.netapp.com/advisory/ntap-20240517-0002/
https://ubuntu.com/security/notices/USN-6746-1
https://ubuntu.com/security/notices/USN-6746-2
https://www.cve.org/CVERecord?id=CVE-2024-24786
|
| stdlib |
CVE-2024-24790 |
CRITICAL |
v1.20.6 |
1.21.11, 1.22.4 |
http://www.openwall.com/lists/oss-security/2024/06/04/1
https://access.redhat.com/errata/RHSA-2025:7256
https://access.redhat.com/security/cve/CVE-2024-24790
https://bugzilla.redhat.com/2237777
https://bugzilla.redhat.com/2237778
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2292787
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/2315719
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2279814
https://bugzilla.redhat.com/show_bug.cgi?id=2292787
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2315719
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9355
https://errata.almalinux.org/9/ALSA-2025-7256.html
https://errata.rockylinux.org/RLSA-2025:7256
https://github.com/golang/go/commit/051bdf3fd12a40307606ff9381138039c5f452f0 (1.21)
https://github.com/golang/go/commit/12d5810cdb1f73cf23d7a86462143e9463317fca (1.22)
https://github.com/golang/go/issues/67680
https://go.dev/cl/590316
https://go.dev/issue/67680
https://groups.google.com/g/golang-announce/c/XbxouI9gY7k
https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ
https://linux.oracle.com/cve/CVE-2024-24790.html
https://linux.oracle.com/errata/ELSA-2025-7256.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24790
https://pkg.go.dev/vuln/GO-2024-2887
https://security.netapp.com/advisory/ntap-20240905-0002/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://www.cve.org/CVERecord?id=CVE-2024-24790
|
| stdlib |
CVE-2025-68121 |
CRITICAL |
v1.20.6 |
1.24.13, 1.25.7, 1.26.0-rc.3 |
https://access.redhat.com/errata/RHSA-2026:5146
https://access.redhat.com/security/cve/CVE-2025-68121
https://bugzilla.redhat.com/2418462
https://bugzilla.redhat.com/2434432
https://bugzilla.redhat.com/2437111
https://bugzilla.redhat.com/show_bug.cgi?id=2418462
https://bugzilla.redhat.com/show_bug.cgi?id=2434432
https://bugzilla.redhat.com/show_bug.cgi?id=2437111
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121
https://errata.almalinux.org/10/ALSA-2026-5146.html
https://errata.rockylinux.org/RLSA-2026:5146
https://go.dev/cl/737700
https://go.dev/issue/77217
https://groups.google.com/g/golang-announce/c/K09ubi9FQFk
https://linux.oracle.com/cve/CVE-2025-68121.html
https://linux.oracle.com/errata/ELSA-2026-5146.html
https://nvd.nist.gov/vuln/detail/CVE-2025-68121
https://pkg.go.dev/vuln/GO-2026-4337
https://www.cve.org/CVERecord?id=CVE-2025-68121
|
| stdlib |
CVE-2023-39325 |
HIGH |
v1.20.6 |
1.20.10, 1.21.3 |
golang.org/x/net
https://access.redhat.com/errata/RHSA-2023:6077
https://access.redhat.com/security/cve/CVE-2023-39325
https://access.redhat.com/security/cve/CVE-2023-44487
https://bugzilla.redhat.com/2242803
https://bugzilla.redhat.com/2243296
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://bugzilla.redhat.com/show_bug.cgi?id=2243296
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487
https://errata.almalinux.org/9/ALSA-2023-6077.html
https://errata.rockylinux.org/RLSA-2023:6077
https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21]
https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20]
https://github.com/golang/go/issues/63417
https://go.dev/cl/534215
https://go.dev/cl/534235
https://go.dev/issue/63417
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
https://linux.oracle.com/cve/CVE-2023-39325.html
https://linux.oracle.com/errata/ELSA-2023-5867.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/
https://nvd.nist.gov/vuln/detail/CVE-2023-39325
https://pkg.go.dev/vuln/GO-2023-2102
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231110-0008
https://security.netapp.com/advisory/ntap-20231110-0008/
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
https://www.cve.org/CVERecord?id=CVE-2023-39325
|
| stdlib |
CVE-2023-45283 |
HIGH |
v1.20.6 |
1.20.11, 1.21.4, 1.20.12, 1.21.5 |
http://www.openwall.com/lists/oss-security/2023/12/05/2
https://go.dev/cl/540277
https://go.dev/cl/541175
https://go.dev/issue/63713
https://go.dev/issue/64028
https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY
https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ
https://nvd.nist.gov/vuln/detail/CVE-2023-45283
https://pkg.go.dev/vuln/GO-2023-2185
https://security.netapp.com/advisory/ntap-20231214-0008/
|
| stdlib |
CVE-2023-45288 |
HIGH |
v1.20.6 |
1.21.9, 1.22.2 |
http://www.openwall.com/lists/oss-security/2024/04/03/16
http://www.openwall.com/lists/oss-security/2024/04/05/4
https://access.redhat.com/errata/RHSA-2024:2724
https://access.redhat.com/security/cve/CVE-2023-45288
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268018
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/2268273
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://errata.almalinux.org/9/ALSA-2024-2724.html
https://errata.rockylinux.org/RLSA-2024:2724
https://go.dev/cl/576155
https://go.dev/issue/65051
https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M
https://kb.cert.org/vuls/id/421644
https://linux.oracle.com/cve/CVE-2023-45288.html
https://linux.oracle.com/errata/ELSA-2024-3346.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/
https://nowotarski.info/http2-continuation-flood-technical-details
https://nowotarski.info/http2-continuation-flood/
https://nvd.nist.gov/vuln/detail/CVE-2023-45288
https://pkg.go.dev/vuln/GO-2024-2687
https://security.netapp.com/advisory/ntap-20240419-0009
https://security.netapp.com/advisory/ntap-20240419-0009/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2023-45288
https://www.kb.cert.org/vuls/id/421644
|
| stdlib |
CVE-2024-34156 |
HIGH |
v1.20.6 |
1.22.7, 1.23.1 |
https://access.redhat.com/errata/RHSA-2025:3773
https://access.redhat.com/security/cve/CVE-2024-34156
https://bugzilla.redhat.com/2310528
https://bugzilla.redhat.com/show_bug.cgi?id=2310528
https://bugzilla.redhat.com/show_bug.cgi?id=2341750
https://bugzilla.redhat.com/show_bug.cgi?id=2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2344219
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866
https://errata.almalinux.org/9/ALSA-2025-3773.html
https://errata.rockylinux.org/RLSA-2025:3773
https://github.com/golang/go/commit/2092294f2b097c5828f4eace6c98a322c1510b01 (go1.22.7)
https://github.com/golang/go/commit/fa8ff1a46deb6c816304441ec6740ec112e19012 (go1.23.1)
https://go.dev/cl/611239
https://go.dev/issue/69139
https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc
https://groups.google.com/g/golang-dev/c/S9POB9NCTdk
https://linux.oracle.com/cve/CVE-2024-34156.html
https://linux.oracle.com/errata/ELSA-2025-3773.html
https://nvd.nist.gov/vuln/detail/CVE-2024-34156
https://pkg.go.dev/vuln/GO-2024-3106
https://security.netapp.com/advisory/ntap-20240926-0004/
https://ubuntu.com/security/notices/USN-7081-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-34156
|
| stdlib |
CVE-2025-47907 |
HIGH |
v1.20.6 |
1.23.12, 1.24.6 |
http://www.openwall.com/lists/oss-security/2025/08/06/1
https://access.redhat.com/errata/RHSA-2025:20983
https://access.redhat.com/security/cve/CVE-2025-47907
https://bugzilla.redhat.com/2387083
https://bugzilla.redhat.com/2393152
https://errata.almalinux.org/10/ALSA-2025-20983.html
https://go.dev/cl/693735
https://go.dev/issue/74831
https://groups.google.com/g/golang-announce/c/x5MKroML2yM
https://linux.oracle.com/cve/CVE-2025-47907.html
https://linux.oracle.com/errata/ELSA-2025-20983.html
https://nvd.nist.gov/vuln/detail/CVE-2025-47907
https://pkg.go.dev/vuln/GO-2025-3849
https://www.cve.org/CVERecord?id=CVE-2025-47907
|
| stdlib |
CVE-2025-58183 |
HIGH |
v1.20.6 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/errata/RHSA-2026:1837
https://access.redhat.com/security/cve/CVE-2025-58183
https://bugzilla.redhat.com/2407258
https://bugzilla.redhat.com/show_bug.cgi?id=2407258
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58183
https://errata.almalinux.org/10/ALSA-2026-1837.html
https://errata.rockylinux.org/RLSA-2025:23295
https://go.dev/cl/709861
https://go.dev/issue/75677
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://linux.oracle.com/cve/CVE-2025-58183.html
https://linux.oracle.com/errata/ELSA-2026-50076.html
https://nvd.nist.gov/vuln/detail/CVE-2025-58183
https://pkg.go.dev/vuln/GO-2025-4014
https://www.cve.org/CVERecord?id=CVE-2025-58183
|
| stdlib |
CVE-2025-61726 |
HIGH |
v1.20.6 |
1.24.12, 1.25.6 |
https://access.redhat.com/errata/RHSA-2026:5146
https://access.redhat.com/security/cve/CVE-2025-61726
https://bugzilla.redhat.com/2418462
https://bugzilla.redhat.com/2434432
https://bugzilla.redhat.com/2437111
https://bugzilla.redhat.com/show_bug.cgi?id=2418462
https://bugzilla.redhat.com/show_bug.cgi?id=2434432
https://bugzilla.redhat.com/show_bug.cgi?id=2437111
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121
https://errata.almalinux.org/10/ALSA-2026-5146.html
https://errata.rockylinux.org/RLSA-2026:5146
https://go.dev/cl/736712
https://go.dev/issue/77101
https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
https://linux.oracle.com/cve/CVE-2025-61726.html
https://linux.oracle.com/errata/ELSA-2026-5146.html
https://nvd.nist.gov/vuln/detail/CVE-2025-61726
https://pkg.go.dev/vuln/GO-2026-4341
https://www.cve.org/CVERecord?id=CVE-2025-61726
|
| stdlib |
CVE-2025-61728 |
HIGH |
v1.20.6 |
1.24.12, 1.25.6 |
http://www.openwall.com/lists/oss-security/2026/01/15/4
https://access.redhat.com/errata/RHSA-2026:3752
https://access.redhat.com/security/cve/CVE-2025-61728
https://bugzilla.redhat.com/2418462
https://bugzilla.redhat.com/2434431
https://bugzilla.redhat.com/2434432
https://bugzilla.redhat.com/2437111
https://bugzilla.redhat.com/show_bug.cgi?id=2418462
https://bugzilla.redhat.com/show_bug.cgi?id=2434431
https://bugzilla.redhat.com/show_bug.cgi?id=2434432
https://bugzilla.redhat.com/show_bug.cgi?id=2437111
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61728
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121
https://errata.almalinux.org/10/ALSA-2026-3752.html
https://errata.rockylinux.org/RLSA-2026:3336
https://go.dev/cl/736713
https://go.dev/issue/77102
https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
https://linux.oracle.com/cve/CVE-2025-61728.html
https://linux.oracle.com/errata/ELSA-2026-4672.html
https://nvd.nist.gov/vuln/detail/CVE-2025-61728
https://pkg.go.dev/vuln/GO-2026-4342
https://www.cve.org/CVERecord?id=CVE-2025-61728
|
| stdlib |
CVE-2025-61729 |
HIGH |
v1.20.6 |
1.24.11, 1.25.5 |
https://access.redhat.com/errata/RHSA-2026:5146
https://access.redhat.com/security/cve/CVE-2025-61729
https://bugzilla.redhat.com/2418462
https://bugzilla.redhat.com/2434432
https://bugzilla.redhat.com/2437111
https://bugzilla.redhat.com/show_bug.cgi?id=2418462
https://bugzilla.redhat.com/show_bug.cgi?id=2434432
https://bugzilla.redhat.com/show_bug.cgi?id=2437111
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121
https://errata.almalinux.org/10/ALSA-2026-5146.html
https://errata.rockylinux.org/RLSA-2026:5146
https://go.dev/cl/725920
https://go.dev/issue/76445
https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
https://linux.oracle.com/cve/CVE-2025-61729.html
https://linux.oracle.com/errata/ELSA-2026-5146.html
https://nvd.nist.gov/vuln/detail/CVE-2025-61729
https://pkg.go.dev/vuln/GO-2025-4155
https://www.cve.org/CVERecord?id=CVE-2025-61729
|
| stdlib |
CVE-2026-25679 |
HIGH |
v1.20.6 |
1.25.8, 1.26.1 |
https://access.redhat.com/errata/RHSA-2026:6388
https://access.redhat.com/security/cve/CVE-2026-25679
https://bugzilla.redhat.com/2445356
https://bugzilla.redhat.com/show_bug.cgi?id=2445356
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679
https://errata.almalinux.org/10/ALSA-2026-6388.html
https://errata.rockylinux.org/RLSA-2026:7005
https://go.dev/cl/752180
https://go.dev/issue/77578
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk
https://linux.oracle.com/cve/CVE-2026-25679.html
https://linux.oracle.com/errata/ELSA-2026-7992.html
https://nvd.nist.gov/vuln/detail/CVE-2026-25679
https://pkg.go.dev/vuln/GO-2026-4601
https://www.cve.org/CVERecord?id=CVE-2026-25679
|
| stdlib |
CVE-2026-32280 |
HIGH |
v1.20.6 |
1.25.9, 1.26.2 |
https://go.dev/cl/758320
https://go.dev/issue/78282
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32280
https://pkg.go.dev/vuln/GO-2026-4947
|
| stdlib |
CVE-2026-32282 |
HIGH |
v1.20.6 |
1.25.9, 1.26.2 |
https://access.redhat.com/security/cve/CVE-2026-32282
https://go.dev/cl/763761
https://go.dev/issue/78293
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32282
https://pkg.go.dev/vuln/GO-2026-4864
https://www.cve.org/CVERecord?id=CVE-2026-32282
|
| stdlib |
CVE-2023-29409 |
MEDIUM |
v1.20.6 |
1.19.12, 1.20.7, 1.21.0-rc.4 |
https://access.redhat.com/errata/RHSA-2023:7766
https://access.redhat.com/security/cve/CVE-2023-29409
https://bugzilla.redhat.com/2228743
https://bugzilla.redhat.com/2237773
https://bugzilla.redhat.com/2237776
https://bugzilla.redhat.com/2237777
https://bugzilla.redhat.com/2237778
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
https://bugzilla.redhat.com/show_bug.cgi?id=1989575
https://bugzilla.redhat.com/show_bug.cgi?id=2132867
https://bugzilla.redhat.com/show_bug.cgi?id=2132868
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
https://bugzilla.redhat.com/show_bug.cgi?id=2228743
https://bugzilla.redhat.com/show_bug.cgi?id=2237773
https://bugzilla.redhat.com/show_bug.cgi?id=2237776
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2244340
https://bugzilla.redhat.com/show_bug.cgi?id=2246840
https://bugzilla.redhat.com/show_bug.cgi?id=2253193
https://bugzilla.redhat.com/show_bug.cgi?id=2253330
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugzilla.redhat.com/show_bug.cgi?id=2262272
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650
https://errata.almalinux.org/9/ALSA-2023-7766.html
https://errata.rockylinux.org/RLSA-2024:2988
https://go.dev/cl/515257
https://go.dev/issue/61460
https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ
https://linux.oracle.com/cve/CVE-2023-29409.html
https://linux.oracle.com/errata/ELSA-2024-2988.html
https://nvd.nist.gov/vuln/detail/CVE-2023-29409
https://pkg.go.dev/vuln/GO-2023-1987
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20230831-0010/
https://www.cve.org/CVERecord?id=CVE-2023-29409
|
| stdlib |
CVE-2023-39318 |
MEDIUM |
v1.20.6 |
1.20.8, 1.21.1 |
https://access.redhat.com/errata/RHSA-2024:2160
https://access.redhat.com/security/cve/CVE-2023-39318
https://bugzilla.redhat.com/2237773
https://bugzilla.redhat.com/2237776
https://bugzilla.redhat.com/2253330
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
https://bugzilla.redhat.com/show_bug.cgi?id=1989575
https://bugzilla.redhat.com/show_bug.cgi?id=2132867
https://bugzilla.redhat.com/show_bug.cgi?id=2132868
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
https://bugzilla.redhat.com/show_bug.cgi?id=2228743
https://bugzilla.redhat.com/show_bug.cgi?id=2237773
https://bugzilla.redhat.com/show_bug.cgi?id=2237776
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2244340
https://bugzilla.redhat.com/show_bug.cgi?id=2246840
https://bugzilla.redhat.com/show_bug.cgi?id=2253193
https://bugzilla.redhat.com/show_bug.cgi?id=2253330
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugzilla.redhat.com/show_bug.cgi?id=2262272
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650
https://errata.almalinux.org/9/ALSA-2024-2160.html
https://errata.rockylinux.org/RLSA-2024:2988
https://github.com/golang/go/commit/023b542edf38e2a1f87fcefb9f75ff2f99401b4c (go1.20.8)
https://github.com/golang/go/commit/b0e1d3ea26e8e8fce7726690c9ef0597e60739fb (go1.21.1)
https://go.dev/cl/526156
https://go.dev/issue/62196
https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM
https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ
https://linux.oracle.com/cve/CVE-2023-39318.html
https://linux.oracle.com/errata/ELSA-2024-2988.html
https://nvd.nist.gov/vuln/detail/CVE-2023-39318
https://pkg.go.dev/vuln/GO-2023-2041
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231020-0009/
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://vuln.go.dev/ID/GO-2023-2041.json
https://www.cve.org/CVERecord?id=CVE-2023-39318
|
| stdlib |
CVE-2023-39319 |
MEDIUM |
v1.20.6 |
1.20.8, 1.21.1 |
https://access.redhat.com/errata/RHSA-2024:2160
https://access.redhat.com/security/cve/CVE-2023-39319
https://bugzilla.redhat.com/2237773
https://bugzilla.redhat.com/2237776
https://bugzilla.redhat.com/2253330
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
https://bugzilla.redhat.com/show_bug.cgi?id=1989575
https://bugzilla.redhat.com/show_bug.cgi?id=2132867
https://bugzilla.redhat.com/show_bug.cgi?id=2132868
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
https://bugzilla.redhat.com/show_bug.cgi?id=2228743
https://bugzilla.redhat.com/show_bug.cgi?id=2237773
https://bugzilla.redhat.com/show_bug.cgi?id=2237776
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2244340
https://bugzilla.redhat.com/show_bug.cgi?id=2246840
https://bugzilla.redhat.com/show_bug.cgi?id=2253193
https://bugzilla.redhat.com/show_bug.cgi?id=2253330
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugzilla.redhat.com/show_bug.cgi?id=2262272
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650
https://errata.almalinux.org/9/ALSA-2024-2160.html
https://errata.rockylinux.org/RLSA-2024:2988
https://github.com/golang/go/commit/2070531d2f53df88e312edace6c8dfc9686ab2f5 (go1.20.8)
https://github.com/golang/go/commit/bbd043ff0d6d59f1a9232d31ecd5eacf6507bf6a (go1.21.1)
https://go.dev/cl/526157
https://go.dev/issue/62197
https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM
https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ
https://linux.oracle.com/cve/CVE-2023-39319.html
https://linux.oracle.com/errata/ELSA-2024-2988.html
https://nvd.nist.gov/vuln/detail/CVE-2023-39319
https://pkg.go.dev/vuln/GO-2023-2043
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231020-0009/
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://vuln.go.dev/ID/GO-2023-2043.json
https://www.cve.org/CVERecord?id=CVE-2023-39319
|
| stdlib |
CVE-2023-39326 |
MEDIUM |
v1.20.6 |
1.20.12, 1.21.5 |
https://access.redhat.com/errata/RHSA-2024:2272
https://access.redhat.com/security/cve/CVE-2023-39326
https://bugzilla.redhat.com/2253193
https://bugzilla.redhat.com/2253330
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
https://bugzilla.redhat.com/show_bug.cgi?id=1989575
https://bugzilla.redhat.com/show_bug.cgi?id=2132867
https://bugzilla.redhat.com/show_bug.cgi?id=2132868
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
https://bugzilla.redhat.com/show_bug.cgi?id=2228743
https://bugzilla.redhat.com/show_bug.cgi?id=2237773
https://bugzilla.redhat.com/show_bug.cgi?id=2237776
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2244340
https://bugzilla.redhat.com/show_bug.cgi?id=2246840
https://bugzilla.redhat.com/show_bug.cgi?id=2253193
https://bugzilla.redhat.com/show_bug.cgi?id=2253330
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugzilla.redhat.com/show_bug.cgi?id=2262272
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650
https://errata.almalinux.org/9/ALSA-2024-2272.html
https://errata.rockylinux.org/RLSA-2024:2988
https://github.com/golang/go/commit/6446af942e2e2b161c4ec1b60d9703a2b55dc4dd (go1.20.12)
https://github.com/golang/go/commit/ec8c526e4be720e94b98ca509e6364f0efaf28f7 (go1.21.5)
https://go.dev/cl/547335
https://go.dev/issue/64433
https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ
https://linux.oracle.com/cve/CVE-2023-39326.html
https://linux.oracle.com/errata/ELSA-2024-2988.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIU6HOGV6RRIKWM57LOXQA75BGZSIH6G/
https://nvd.nist.gov/vuln/detail/CVE-2023-39326
https://pkg.go.dev/vuln/GO-2023-2382
https://ubuntu.com/security/notices/USN-6574-1
https://www.cve.org/CVERecord?id=CVE-2023-39326
|
| stdlib |
CVE-2023-45284 |
MEDIUM |
v1.20.6 |
1.20.11, 1.21.4 |
https://go.dev/cl/540277
https://go.dev/issue/63713
https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY
https://nvd.nist.gov/vuln/detail/CVE-2023-45284
https://pkg.go.dev/vuln/GO-2023-2186
|
| stdlib |
CVE-2023-45289 |
MEDIUM |
v1.20.6 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:2724
https://access.redhat.com/security/cve/CVE-2023-45289
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268018
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/2268273
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://errata.almalinux.org/9/ALSA-2024-2724.html
https://errata.rockylinux.org/RLSA-2024:2724
https://github.com/golang/go/commit/20586c0dbe03d144f914155f879fa5ee287591a1 (go1.21.8)
https://github.com/golang/go/commit/3a855208e3efed2e9d7c20ad023f1fa78afcc0be (go1.22.1)
https://github.com/golang/go/issues/65065
https://go.dev/cl/569340
https://go.dev/issue/65065
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2023-45289.html
https://linux.oracle.com/errata/ELSA-2024-3346.html
https://nvd.nist.gov/vuln/detail/CVE-2023-45289
https://pkg.go.dev/vuln/GO-2024-2600
https://security.netapp.com/advisory/ntap-20240329-0006/
https://ubuntu.com/security/notices/USN-6886-1
https://www.cve.org/CVERecord?id=CVE-2023-45289
|
| stdlib |
CVE-2023-45290 |
MEDIUM |
v1.20.6 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:9135
https://access.redhat.com/security/cve/CVE-2023-45290
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268022
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268022
https://bugzilla.redhat.com/show_bug.cgi?id=2279814
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://errata.almalinux.org/9/ALSA-2024-9135.html
https://errata.rockylinux.org/RLSA-2024:9135
https://github.com/golang/go/commit/041a47712e765e94f86d841c3110c840e76d8f82 (go1.22.1)
https://github.com/golang/go/commit/bf80213b121074f4ad9b449410a4d13bae5e9be0 (go1.21.8)
https://github.com/golang/go/issues/65383
https://go.dev/cl/569341
https://go.dev/issue/65383
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2023-45290.html
https://linux.oracle.com/errata/ELSA-2024-8038.html
https://nvd.nist.gov/vuln/detail/CVE-2023-45290
https://pkg.go.dev/vuln/GO-2024-2599
https://security.netapp.com/advisory/ntap-20240329-0004
https://security.netapp.com/advisory/ntap-20240329-0004/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2023-45290
|
| stdlib |
CVE-2024-24783 |
MEDIUM |
v1.20.6 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:6195
https://access.redhat.com/security/cve/CVE-2024-24783
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://errata.almalinux.org/9/ALSA-2024-6195.html
https://errata.rockylinux.org/RLSA-2024:2724
https://github.com/advisories/GHSA-3q2c-pvp5-3cqp
https://github.com/golang/go/commit/337b8e9cbfa749d9d5c899e0dc358e2208d5e54f (go1.22.1)
https://github.com/golang/go/commit/be5b52bea674190ef7de272664be6c7ae93ec5a0 (go1.21.8)
https://github.com/golang/go/issues/65390
https://go.dev/cl/569339
https://go.dev/issue/65390
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2024-24783.html
https://linux.oracle.com/errata/ELSA-2024-6969.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24783
https://pkg.go.dev/vuln/GO-2024-2598
https://security.netapp.com/advisory/ntap-20240329-0005
https://security.netapp.com/advisory/ntap-20240329-0005/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-24783
|
| stdlib |
CVE-2024-24784 |
MEDIUM |
v1.20.6 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:2562
https://access.redhat.com/security/cve/CVE-2024-24784
https://bugzilla.redhat.com/2262921
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268018
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/2268021
https://bugzilla.redhat.com/2268022
https://bugzilla.redhat.com/2268273
https://bugzilla.redhat.com/show_bug.cgi?id=2262921
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268021
https://bugzilla.redhat.com/show_bug.cgi?id=2268022
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1394
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24784
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785
https://errata.almalinux.org/9/ALSA-2024-2562.html
https://errata.rockylinux.org/RLSA-2024:2562
https://github.com/golang/go/commit/263c059b09fdd40d9dd945f2ecb20c89ea28efe5 (go1.21.8)
https://github.com/golang/go/commit/5330cd225ba54c7dc78c1b46dcdf61a4671a632c (go1.22.1)
https://github.com/golang/go/issues/65083
https://go.dev/cl/555596
https://go.dev/issue/65083
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2024-24784.html
https://linux.oracle.com/errata/ELSA-2024-6969.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24784
https://pkg.go.dev/vuln/GO-2024-2609
https://security.netapp.com/advisory/ntap-20240329-0007/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-24784
|
| stdlib |
CVE-2024-24785 |
MEDIUM |
v1.20.6 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:9135
https://access.redhat.com/security/cve/CVE-2024-24785
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268022
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268022
https://bugzilla.redhat.com/show_bug.cgi?id=2279814
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://errata.almalinux.org/9/ALSA-2024-9135.html
https://errata.rockylinux.org/RLSA-2024:9135
https://github.com/golang/go/commit/056b0edcb8c152152021eebf4cf42adbfbe77992 (go1.22.1)
https://github.com/golang/go/commit/3643147a29352ca2894fd5d0d2069bc4b4335a7e (go1.21.8)
https://github.com/golang/go/issues/65697
https://go.dev/cl/564196
https://go.dev/issue/65697
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2024-24785.html
https://linux.oracle.com/errata/ELSA-2026-3428.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24785
https://pkg.go.dev/vuln/GO-2024-2610
https://security.netapp.com/advisory/ntap-20240329-0008/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://vuln.go.dev/ID/GO-2024-2610.json
https://www.cve.org/CVERecord?id=CVE-2024-24785
|
| stdlib |
CVE-2024-24789 |
MEDIUM |
v1.20.6 |
1.21.11, 1.22.4 |
http://www.openwall.com/lists/oss-security/2024/06/04/1
https://access.redhat.com/errata/RHSA-2024:9115
https://access.redhat.com/security/cve/CVE-2024-24789
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2292668
https://bugzilla.redhat.com/2292787
https://bugzilla.redhat.com/2294000
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2144983
https://bugzilla.redhat.com/show_bug.cgi?id=2274767
https://bugzilla.redhat.com/show_bug.cgi?id=2292668
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4122
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24789
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727
https://errata.almalinux.org/9/ALSA-2024-9115.html
https://errata.rockylinux.org/RLSA-2024:9102
https://github.com/golang/go/commit/c8e40338cf00f3c1d86c8fb23863ad67a4c72bcc (1.21)
https://github.com/golang/go/commit/cf501ac0c5fe351a8582d20b43562027927906e7 (1.22)
https://github.com/golang/go/issues/66869
https://go.dev/cl/585397
https://go.dev/issue/66869
https://groups.google.com/g/golang-announce/c/XbxouI9gY7k
https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ
https://linux.oracle.com/cve/CVE-2024-24789.html
https://linux.oracle.com/errata/ELSA-2024-9115.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5YAEIA6IUHUNGJ7AIXXPQT6D2GYENX7/
https://nvd.nist.gov/vuln/detail/CVE-2024-24789
https://pkg.go.dev/vuln/GO-2024-2888
https://security.netapp.com/advisory/ntap-20250131-0008/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-24789
|
| stdlib |
CVE-2024-24791 |
MEDIUM |
v1.20.6 |
1.21.12, 1.22.5 |
https://access.redhat.com/errata/RHSA-2025:7256
https://access.redhat.com/security/cve/CVE-2024-24791
https://bugzilla.redhat.com/2237777
https://bugzilla.redhat.com/2237778
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2292787
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/2315719
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2279814
https://bugzilla.redhat.com/show_bug.cgi?id=2292787
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2315719
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9355
https://errata.almalinux.org/9/ALSA-2025-7256.html
https://errata.rockylinux.org/RLSA-2025:7256
https://go.dev/cl/591255
https://go.dev/issue/67555
https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ
https://linux.oracle.com/cve/CVE-2024-24791.html
https://linux.oracle.com/errata/ELSA-2025-7256.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24791
https://pkg.go.dev/vuln/GO-2024-2963
https://security.netapp.com/advisory/ntap-20241004-0004/
https://ubuntu.com/security/notices/USN-7081-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-24791
|
| stdlib |
CVE-2024-34155 |
MEDIUM |
v1.20.6 |
1.22.7, 1.23.1 |
https://access.redhat.com/errata/RHSA-2024:9459
https://access.redhat.com/security/cve/CVE-2024-34155
https://bugzilla.redhat.com/2310527
https://bugzilla.redhat.com/2310528
https://bugzilla.redhat.com/2310529
https://bugzilla.redhat.com/2315691
https://bugzilla.redhat.com/2315887
https://bugzilla.redhat.com/2317458
https://bugzilla.redhat.com/2317467
https://bugzilla.redhat.com/show_bug.cgi?id=2310527
https://bugzilla.redhat.com/show_bug.cgi?id=2310528
https://bugzilla.redhat.com/show_bug.cgi?id=2310529
https://bugzilla.redhat.com/show_bug.cgi?id=2315691
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34155
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34158
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9341
https://errata.almalinux.org/9/ALSA-2024-9459.html
https://errata.rockylinux.org/RLSA-2024:8039
https://github.com/golang/go/commit/53487e5477151ed75da50e50a0ba8f1ca64c00a3 (go1.23.1)
https://github.com/golang/go/commit/b232596139dbe96a62edbe3a2a203e856bf556eb (go1.22.7)
https://go.dev/cl/611238
https://go.dev/issue/69138
https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc
https://groups.google.com/g/golang-dev/c/S9POB9NCTdk
https://linux.oracle.com/cve/CVE-2024-34155.html
https://linux.oracle.com/errata/ELSA-2024-9459.html
https://nvd.nist.gov/vuln/detail/CVE-2024-34155
https://pkg.go.dev/vuln/GO-2024-3105
https://security.netapp.com/advisory/ntap-20240926-0005/
https://ubuntu.com/security/notices/USN-7081-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-34155
|
| stdlib |
CVE-2024-34158 |
MEDIUM |
v1.20.6 |
1.22.7, 1.23.1 |
https://access.redhat.com/errata/RHSA-2025:7118
https://access.redhat.com/security/cve/CVE-2024-34158
https://bugzilla.redhat.com/2262921
https://bugzilla.redhat.com/2310529
https://bugzilla.redhat.com/2315719
https://bugzilla.redhat.com/show_bug.cgi?id=2310527
https://bugzilla.redhat.com/show_bug.cgi?id=2310528
https://bugzilla.redhat.com/show_bug.cgi?id=2310529
https://bugzilla.redhat.com/show_bug.cgi?id=2315691
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34155
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34158
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9341
https://errata.almalinux.org/9/ALSA-2025-7118.html
https://errata.rockylinux.org/RLSA-2024:8039
https://github.com/golang/go/commit/032ac075c20c01c6c35a672d1542d3e98eab84ea (go1.23.1)
https://github.com/golang/go/commit/d4c53812e6ce2ac368173d7fcd31d0ecfcffb002 (go1.22.7)
https://go.dev/cl/611240
https://go.dev/issue/69141
https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc
https://groups.google.com/g/golang-dev/c/S9POB9NCTdk
https://linux.oracle.com/cve/CVE-2024-34158.html
https://linux.oracle.com/errata/ELSA-2025-7118.html
https://nvd.nist.gov/vuln/detail/CVE-2024-34158
https://pkg.go.dev/vuln/GO-2024-3107
https://security.netapp.com/advisory/ntap-20241004-0003/
https://ubuntu.com/security/notices/USN-7081-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-34158
|
| stdlib |
CVE-2024-45336 |
MEDIUM |
v1.20.6 |
1.22.11, 1.23.5, 1.24.0-rc.2 |
https://access.redhat.com/errata/RHSA-2025:3772
https://access.redhat.com/security/cve/CVE-2024-45336
https://bugzilla.redhat.com/2341750
https://bugzilla.redhat.com/2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2362345
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3931
https://errata.almalinux.org/8/ALSA-2025-3772.html
https://errata.rockylinux.org/RLSA-2025:7592
https://github.com/golang/go/issues/70530
https://go.dev/cl/643100
https://go.dev/issue/70530
https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI
https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ
https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ
https://linux.oracle.com/cve/CVE-2024-45336.html
https://linux.oracle.com/errata/ELSA-2025-7592.html
https://nvd.nist.gov/vuln/detail/CVE-2024-45336
https://pkg.go.dev/vuln/GO-2025-3420
https://security.netapp.com/advisory/ntap-20250221-0003/
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2024-45336
|
| stdlib |
CVE-2024-45341 |
MEDIUM |
v1.20.6 |
1.22.11, 1.23.5, 1.24.0-rc.2 |
https://access.redhat.com/errata/RHSA-2025:3772
https://access.redhat.com/security/cve/CVE-2024-45341
https://bugzilla.redhat.com/2341750
https://bugzilla.redhat.com/2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2341750
https://bugzilla.redhat.com/show_bug.cgi?id=2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2344219
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866
https://errata.almalinux.org/8/ALSA-2025-3772.html
https://errata.rockylinux.org/RLSA-2025:7466
https://github.com/golang/go/commit/2b2314e9f6103de322b2e247387c8b01fd0cd5a4
https://github.com/golang/go/issues/71156
https://go.dev/cl/643099
https://go.dev/issue/71156
https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI
https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ
https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ
https://linux.oracle.com/cve/CVE-2024-45341.html
https://linux.oracle.com/errata/ELSA-2025-7466.html
https://nvd.nist.gov/vuln/detail/CVE-2024-45341
https://pkg.go.dev/vuln/GO-2025-3373
https://security.netapp.com/advisory/ntap-20250221-0004/
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2024-45341
|
| stdlib |
CVE-2025-0913 |
MEDIUM |
v1.20.6 |
1.23.10, 1.24.4 |
https://go.dev/cl/672396
https://go.dev/issue/73702
https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A
https://nvd.nist.gov/vuln/detail/CVE-2025-0913
https://pkg.go.dev/vuln/GO-2025-3750
|
| stdlib |
CVE-2025-22866 |
MEDIUM |
v1.20.6 |
1.22.12, 1.23.6, 1.24.0-rc.3 |
https://access.redhat.com/security/cve/CVE-2025-22866
https://bugzilla.redhat.com/show_bug.cgi?id=2341750
https://bugzilla.redhat.com/show_bug.cgi?id=2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2344219
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866
https://errata.rockylinux.org/RLSA-2025:7466
https://github.com/golang/go/commit/0cc45e7ca668b103c1055ae84402ad3f3425dd56 (go1.22.12)
https://github.com/golang/go/commit/6644ed63b1e6ccc129647ef6b0d4647fdbe14056 (go1.23.6)
https://github.com/golang/go/commit/6fc23a3cff5e38ff72923fee50f51254dcdc6e93 (go1.24rc3)
https://github.com/golang/go/issues/71383
https://go.dev/cl/643735
https://go.dev/issue/71383
https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k
https://linux.oracle.com/cve/CVE-2025-22866.html
https://linux.oracle.com/errata/ELSA-2025-7466.html
https://nvd.nist.gov/vuln/detail/CVE-2025-22866
https://pkg.go.dev/vuln/GO-2025-3447
https://security.netapp.com/advisory/ntap-20250221-0002/
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2025-22866
|
| stdlib |
CVE-2025-22871 |
MEDIUM |
v1.20.6 |
1.23.8, 1.24.2 |
http://www.openwall.com/lists/oss-security/2025/04/04/4
https://access.redhat.com/errata/RHSA-2025:9146
https://access.redhat.com/security/cve/CVE-2025-22871
https://bugzilla.redhat.com/2358493
https://bugzilla.redhat.com/show_bug.cgi?id=2358493
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22871
https://errata.almalinux.org/10/ALSA-2025-9146.html
https://errata.rockylinux.org/RLSA-2025:9317
https://github.com/roadrunner-server/roadrunner
https://github.com/roadrunner-server/roadrunner/commit/f269279ee87d0b88127741cad1042389af7605fa
https://github.com/roadrunner-server/roadrunner/issues/2166
https://github.com/roadrunner-server/roadrunner/releases/tag/v2025.1.0
https://go.dev/cl/652998
https://go.dev/issue/71988
https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk
https://linux.oracle.com/cve/CVE-2025-22871.html
https://linux.oracle.com/errata/ELSA-2025-9845.html
https://nvd.nist.gov/vuln/detail/CVE-2025-22871
https://pkg.go.dev/vuln/GO-2025-3563
https://www.cve.org/CVERecord?id=CVE-2025-22871
|
| stdlib |
CVE-2025-22873 |
MEDIUM |
v1.20.6 |
1.23.9, 1.24.3 |
http://www.openwall.com/lists/oss-security/2025/05/06/2
https://access.redhat.com/security/cve/CVE-2025-22873
https://go.dev/cl/670036
https://go.dev/issue/73555
https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ
https://nvd.nist.gov/vuln/detail/CVE-2025-22873
https://pkg.go.dev/vuln/GO-2026-4403
https://www.cve.org/CVERecord?id=CVE-2025-22873
|
| stdlib |
CVE-2025-4673 |
MEDIUM |
v1.20.6 |
1.23.10, 1.24.4 |
https://access.redhat.com/errata/RHSA-2025:10677
https://access.redhat.com/security/cve/CVE-2025-4673
https://bugzilla.redhat.com/2373305
https://bugzilla.redhat.com/show_bug.cgi?id=2373305
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4673
https://errata.almalinux.org/10/ALSA-2025-10677.html
https://errata.rockylinux.org/RLSA-2025:16432
https://go.dev/cl/679257
https://go.dev/issue/73816
https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A
https://linux.oracle.com/cve/CVE-2025-4673.html
https://linux.oracle.com/errata/ELSA-2025-10677.html
https://nvd.nist.gov/vuln/detail/CVE-2025-4673
https://pkg.go.dev/vuln/GO-2025-3751
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2025-4673
|
| stdlib |
CVE-2025-47906 |
MEDIUM |
v1.20.6 |
1.23.12, 1.24.6 |
http://www.openwall.com/lists/oss-security/2025/08/06/1
https://access.redhat.com/errata/RHSA-2025:22005
https://access.redhat.com/security/cve/CVE-2025-47906
https://bugzilla.redhat.com/2396546
https://bugzilla.redhat.com/show_bug.cgi?id=2396546
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47906
https://errata.almalinux.org/9/ALSA-2025-22005.html
https://errata.rockylinux.org/RLSA-2025:22005
https://go.dev/cl/691775
https://go.dev/issue/74466
https://groups.google.com/g/golang-announce/c/x5MKroML2yM
https://linux.oracle.com/cve/CVE-2025-47906.html
https://linux.oracle.com/errata/ELSA-2025-22668.html
https://nvd.nist.gov/vuln/detail/CVE-2025-47906
https://pkg.go.dev/vuln/GO-2025-3956
https://www.cve.org/CVERecord?id=CVE-2025-47906
|
| stdlib |
CVE-2025-47912 |
MEDIUM |
v1.20.6 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-47912
https://go.dev/cl/709857
https://go.dev/issue/75678
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-47912
https://pkg.go.dev/vuln/GO-2025-4010
https://www.cve.org/CVERecord?id=CVE-2025-47912
|
| stdlib |
CVE-2025-58185 |
MEDIUM |
v1.20.6 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58185
https://github.com/golang/go/commit/8709a41d5ef7321f486a1857f189c3fee20e8edd
https://go.dev/cl/709856
https://go.dev/issue/75671
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58185
https://pkg.go.dev/vuln/GO-2025-4011
https://www.cve.org/CVERecord?id=CVE-2025-58185
|
| stdlib |
CVE-2025-58186 |
MEDIUM |
v1.20.6 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58186
https://go.dev/cl/709855
https://go.dev/issue/75672
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58186
https://pkg.go.dev/vuln/GO-2025-4012
https://www.cve.org/CVERecord?id=CVE-2025-58186
|
| stdlib |
CVE-2025-58187 |
MEDIUM |
v1.20.6 |
1.24.9, 1.25.3 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58187
https://github.com/golang/go/commit/3fc4c79fdbb17b9b29ea9f8c29dd780df075d4c4
https://go.dev/cl/709854
https://go.dev/issue/75681
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58187
https://pkg.go.dev/vuln/GO-2025-4007
https://www.cve.org/CVERecord?id=CVE-2025-58187
|
| stdlib |
CVE-2025-58188 |
MEDIUM |
v1.20.6 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58188
https://github.com/golang/go/commit/6e4007e8cffbb870e6b606307ab7308236ecefb9
https://go.dev/cl/709853
https://go.dev/issue/75675
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58188
https://pkg.go.dev/vuln/GO-2025-4013
https://www.cve.org/CVERecord?id=CVE-2025-58188
|
| stdlib |
CVE-2025-58189 |
MEDIUM |
v1.20.6 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58189
https://go.dev/cl/707776
https://go.dev/issue/75652
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58189
https://pkg.go.dev/vuln/GO-2025-4008
https://www.cve.org/CVERecord?id=CVE-2025-58189
|
| stdlib |
CVE-2025-61723 |
MEDIUM |
v1.20.6 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-61723
https://github.com/golang/go/commit/5ce8cd16f3859ec5ac4106ad8ec15d6236f4501b
https://go.dev/cl/709858
https://go.dev/issue/75676
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-61723
https://pkg.go.dev/vuln/GO-2025-4009
https://www.cve.org/CVERecord?id=CVE-2025-61723
|
| stdlib |
CVE-2025-61724 |
MEDIUM |
v1.20.6 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-61724
https://go.dev/cl/709859
https://go.dev/issue/75716
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-61724
https://pkg.go.dev/vuln/GO-2025-4015
https://www.cve.org/CVERecord?id=CVE-2025-61724
|
| stdlib |
CVE-2025-61725 |
MEDIUM |
v1.20.6 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-61725
https://go.dev/cl/709860
https://go.dev/issue/75680
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-61725
https://pkg.go.dev/vuln/GO-2025-4006
https://www.cve.org/CVERecord?id=CVE-2025-61725
|
| stdlib |
CVE-2025-61727 |
MEDIUM |
v1.20.6 |
1.24.11, 1.25.5 |
https://access.redhat.com/security/cve/CVE-2025-61727
https://go.dev/cl/723900
https://go.dev/issue/76442
https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
https://nvd.nist.gov/vuln/detail/CVE-2025-61727
https://pkg.go.dev/vuln/GO-2025-4175
https://www.cve.org/CVERecord?id=CVE-2025-61727
|
| stdlib |
CVE-2025-61730 |
MEDIUM |
v1.20.6 |
1.24.12, 1.25.6 |
https://go.dev/cl/724120
https://go.dev/issue/76443
https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
https://nvd.nist.gov/vuln/detail/CVE-2025-61730
https://pkg.go.dev/vuln/GO-2026-4340
|
| stdlib |
CVE-2026-27142 |
MEDIUM |
v1.20.6 |
1.25.8, 1.26.1 |
https://access.redhat.com/security/cve/CVE-2026-27142
https://go.dev/cl/752081
https://go.dev/issue/77954
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk
https://nvd.nist.gov/vuln/detail/CVE-2026-27142
https://pkg.go.dev/vuln/GO-2026-4603
https://www.cve.org/CVERecord?id=CVE-2026-27142
|
| stdlib |
CVE-2026-32281 |
MEDIUM |
v1.20.6 |
1.25.9, 1.26.2 |
https://access.redhat.com/security/cve/CVE-2026-32281
https://go.dev/cl/758061
https://go.dev/issue/78281
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32281
https://pkg.go.dev/vuln/GO-2026-4946
https://www.cve.org/CVERecord?id=CVE-2026-32281
|
| stdlib |
CVE-2026-32288 |
MEDIUM |
v1.20.6 |
1.25.9, 1.26.2 |
https://access.redhat.com/security/cve/CVE-2026-32288
https://go.dev/cl/763766
https://go.dev/issue/78301
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32288
https://pkg.go.dev/vuln/GO-2026-4869
https://www.cve.org/CVERecord?id=CVE-2026-32288
|
| stdlib |
CVE-2026-32289 |
MEDIUM |
v1.20.6 |
1.25.9, 1.26.2 |
https://access.redhat.com/security/cve/CVE-2026-32289
https://go.dev/cl/763762
https://go.dev/issue/78331
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32289
https://pkg.go.dev/vuln/GO-2026-4865
https://www.cve.org/CVERecord?id=CVE-2026-32289
|
| stdlib |
CVE-2026-27139 |
LOW |
v1.20.6 |
1.25.8, 1.26.1 |
https://access.redhat.com/security/cve/CVE-2026-27139
https://go.dev/cl/749480
https://go.dev/issue/77827
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk
https://nvd.nist.gov/vuln/detail/CVE-2026-27139
https://pkg.go.dev/vuln/GO-2026-4602
https://www.cve.org/CVERecord?id=CVE-2026-27139
|
| stdlib |
CVE-2026-32283 |
UNKNOWN |
v1.20.6 |
1.25.9, 1.26.2 |
https://go.dev/cl/763767
https://go.dev/issue/78334
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32283
https://pkg.go.dev/vuln/GO-2026-4870
|
| No Misconfigurations found |
| stdlib |
CVE-2023-24538 |
CRITICAL |
v1.20.2 |
1.19.8, 1.20.3 |
https://access.redhat.com/errata/RHSA-2023:6474
https://access.redhat.com/security/cve/CVE-2023-24538
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/9/ALSA-2023-6474.html
https://errata.rockylinux.org/RLSA-2023:6939
https://github.com/golang/go/commit/20374d1d759bc4e17486bde1cb9dca5be37d9e52 (go1.20.3)
https://github.com/golang/go/commit/b1e3ecfa06b67014429a197ec5e134ce4303ad9b (go1.19.8)
https://github.com/golang/go/issues/59234
https://go.dev/cl/482079
https://go.dev/issue/59234
https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8
https://linux.oracle.com/cve/CVE-2023-24538.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://nvd.nist.gov/vuln/detail/CVE-2023-24538
https://pkg.go.dev/vuln/GO-2023-1703
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20241115-0007/
https://ubuntu.com/security/notices/USN-6038-1
https://ubuntu.com/security/notices/USN-6038-2
https://ubuntu.com/security/notices/USN-6140-1
https://ubuntu.com/security/notices/USN-7061-1
https://www.cve.org/CVERecord?id=CVE-2023-24538
|
| stdlib |
CVE-2023-24540 |
CRITICAL |
v1.20.2 |
1.19.9, 1.20.4 |
https://access.redhat.com/errata/RHSA-2023:6474
https://access.redhat.com/security/cve/CVE-2023-24540
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/9/ALSA-2023-6474.html
https://errata.rockylinux.org/RLSA-2023:6939
https://github.com/golang/go/commit/4a28cad66655ee01c6e944271e23c33cab021765 (go1.20.4)
https://github.com/golang/go/commit/ce7bd33345416e6d8cac901792060591cafc2797 (go1.19.9)
https://github.com/golang/go/issues/59721
https://go.dev/cl/491616
https://go.dev/issue/59721
https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU
https://linux.oracle.com/cve/CVE-2023-24540.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://nvd.nist.gov/vuln/detail/CVE-2023-24540
https://pkg.go.dev/vuln/GO-2023-1752
https://security.netapp.com/advisory/ntap-20241115-0008/
https://ubuntu.com/security/notices/USN-6140-1
https://www.cve.org/CVERecord?id=CVE-2023-24540
|
| stdlib |
CVE-2024-24790 |
CRITICAL |
v1.20.2 |
1.21.11, 1.22.4 |
http://www.openwall.com/lists/oss-security/2024/06/04/1
https://access.redhat.com/errata/RHSA-2025:7256
https://access.redhat.com/security/cve/CVE-2024-24790
https://bugzilla.redhat.com/2237777
https://bugzilla.redhat.com/2237778
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2292787
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/2315719
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2279814
https://bugzilla.redhat.com/show_bug.cgi?id=2292787
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2315719
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9355
https://errata.almalinux.org/9/ALSA-2025-7256.html
https://errata.rockylinux.org/RLSA-2025:7256
https://github.com/golang/go/commit/051bdf3fd12a40307606ff9381138039c5f452f0 (1.21)
https://github.com/golang/go/commit/12d5810cdb1f73cf23d7a86462143e9463317fca (1.22)
https://github.com/golang/go/issues/67680
https://go.dev/cl/590316
https://go.dev/issue/67680
https://groups.google.com/g/golang-announce/c/XbxouI9gY7k
https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ
https://linux.oracle.com/cve/CVE-2024-24790.html
https://linux.oracle.com/errata/ELSA-2025-7256.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24790
https://pkg.go.dev/vuln/GO-2024-2887
https://security.netapp.com/advisory/ntap-20240905-0002/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://www.cve.org/CVERecord?id=CVE-2024-24790
|
| stdlib |
CVE-2025-68121 |
CRITICAL |
v1.20.2 |
1.24.13, 1.25.7, 1.26.0-rc.3 |
https://access.redhat.com/errata/RHSA-2026:5146
https://access.redhat.com/security/cve/CVE-2025-68121
https://bugzilla.redhat.com/2418462
https://bugzilla.redhat.com/2434432
https://bugzilla.redhat.com/2437111
https://bugzilla.redhat.com/show_bug.cgi?id=2418462
https://bugzilla.redhat.com/show_bug.cgi?id=2434432
https://bugzilla.redhat.com/show_bug.cgi?id=2437111
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121
https://errata.almalinux.org/10/ALSA-2026-5146.html
https://errata.rockylinux.org/RLSA-2026:5146
https://go.dev/cl/737700
https://go.dev/issue/77217
https://groups.google.com/g/golang-announce/c/K09ubi9FQFk
https://linux.oracle.com/cve/CVE-2025-68121.html
https://linux.oracle.com/errata/ELSA-2026-5146.html
https://nvd.nist.gov/vuln/detail/CVE-2025-68121
https://pkg.go.dev/vuln/GO-2026-4337
https://www.cve.org/CVERecord?id=CVE-2025-68121
|
| stdlib |
CVE-2023-24534 |
HIGH |
v1.20.2 |
1.19.8, 1.20.3 |
https://access.redhat.com/errata/RHSA-2023:6474
https://access.redhat.com/security/cve/CVE-2023-24534
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/9/ALSA-2023-6474.html
https://errata.rockylinux.org/RLSA-2023:6939
https://github.com/golang/go/commit/3991f6c41c7dfd167e889234c0cf1d840475e93c (go1.20.3)
https://github.com/golang/go/commit/d6759e7a059f4208f07aa781402841d7ddaaef96 (go1.19.8)
https://go.dev/cl/481994
https://go.dev/issue/58975
https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8
https://linux.oracle.com/cve/CVE-2023-24534.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://nvd.nist.gov/vuln/detail/CVE-2023-24534
https://pkg.go.dev/vuln/GO-2023-1704
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20230526-0007/
https://ubuntu.com/security/notices/USN-6038-1
https://ubuntu.com/security/notices/USN-6038-2
https://ubuntu.com/security/notices/USN-6140-1
https://www.cve.org/CVERecord?id=CVE-2023-24534
|
| stdlib |
CVE-2023-24536 |
HIGH |
v1.20.2 |
1.19.8, 1.20.3 |
https://access.redhat.com/errata/RHSA-2023:6474
https://access.redhat.com/security/cve/CVE-2023-24536
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/9/ALSA-2023-6474.html
https://errata.rockylinux.org/RLSA-2023:6939
https://github.com/golang/go/commit/7917b5f31204528ea72e0629f0b7d52b35b27538 (go.1.19.8)
https://github.com/golang/go/commit/bf8c7c575c8a552d9d79deb29e80854dc88528d0 (go1.20.3)
https://go.dev/cl/482075
https://go.dev/cl/482076
https://go.dev/cl/482077
https://go.dev/issue/59153
https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8
https://linux.oracle.com/cve/CVE-2023-24536.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://nvd.nist.gov/vuln/detail/CVE-2023-24536
https://pkg.go.dev/vuln/GO-2023-1705
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20230526-0007/
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2023-24536
|
| stdlib |
CVE-2023-24537 |
HIGH |
v1.20.2 |
1.19.8, 1.20.3 |
https://access.redhat.com/errata/RHSA-2023:6474
https://access.redhat.com/security/cve/CVE-2023-24537
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/9/ALSA-2023-6474.html
https://errata.rockylinux.org/RLSA-2023:6939
https://github.com/golang/go/commit/126a1d02da82f93ede7ce0bd8d3c51ef627f2104 (go1.19.8)
https://github.com/golang/go/commit/e7c4b07ecf6b367f1afc9cc48cde963829dd0aab (go1.20.3)
https://github.com/golang/go/issues/59180
https://go.dev/cl/482078
https://go.dev/issue/59180
https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8
https://linux.oracle.com/cve/CVE-2023-24537.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://nvd.nist.gov/vuln/detail/CVE-2023-24537
https://pkg.go.dev/vuln/GO-2023-1702
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20241129-0004/
https://ubuntu.com/security/notices/USN-6038-1
https://ubuntu.com/security/notices/USN-6038-2
https://ubuntu.com/security/notices/USN-6140-1
https://www.cve.org/CVERecord?id=CVE-2023-24537
|
| stdlib |
CVE-2023-24539 |
HIGH |
v1.20.2 |
1.19.9, 1.20.4 |
https://access.redhat.com/errata/RHSA-2023:6474
https://access.redhat.com/security/cve/CVE-2023-24539
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/9/ALSA-2023-6474.html
https://errata.rockylinux.org/RLSA-2023:6939
https://github.com/golang/go/commit/090590fdccc8442728aa31601927da1bf2ef1288 (go1.20.4)
https://github.com/golang/go/commit/e49282327b05192e46086bf25fd3ac691205fe80 (go1.19.9)
https://github.com/golang/go/issues/59720
https://go.dev/cl/491615
https://go.dev/issue/59720
https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU
https://linux.oracle.com/cve/CVE-2023-24539.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://nvd.nist.gov/vuln/detail/CVE-2023-24539
https://pkg.go.dev/vuln/GO-2023-1751
https://security.netapp.com/advisory/ntap-20241129-0005/
https://ubuntu.com/security/notices/USN-6140-1
https://www.cve.org/CVERecord?id=CVE-2023-24539
|
| stdlib |
CVE-2023-29400 |
HIGH |
v1.20.2 |
1.19.9, 1.20.4 |
https://access.redhat.com/errata/RHSA-2023:6474
https://access.redhat.com/security/cve/CVE-2023-29400
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/9/ALSA-2023-6474.html
https://errata.rockylinux.org/RLSA-2023:6939
https://github.com/golang/go/commit/337dd75343145b74ed2073d793322eb4103b56ad (go1.20.4)
https://github.com/golang/go/commit/9db0e74f606b8afb28cc71d4b1c8b4ed24cabbf5 (go1.19.9)
https://github.com/golang/go/issues/59722
https://go.dev/cl/491617
https://go.dev/issue/59722
https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU
https://linux.oracle.com/cve/CVE-2023-29400.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://nvd.nist.gov/vuln/detail/CVE-2023-29400
https://pkg.go.dev/vuln/GO-2023-1753
https://security.netapp.com/advisory/ntap-20241213-0005/
https://ubuntu.com/security/notices/USN-6140-1
https://www.cve.org/CVERecord?id=CVE-2023-29400
|
| stdlib |
CVE-2023-29403 |
HIGH |
v1.20.2 |
1.19.10, 1.20.5 |
https://access.redhat.com/errata/RHSA-2023:3923
https://access.redhat.com/security/cve/CVE-2023-29403
https://bugzilla.redhat.com/2216965
https://bugzilla.redhat.com/2217562
https://bugzilla.redhat.com/2217565
https://bugzilla.redhat.com/2217569
https://bugzilla.redhat.com/show_bug.cgi?id=2216965
https://bugzilla.redhat.com/show_bug.cgi?id=2217562
https://bugzilla.redhat.com/show_bug.cgi?id=2217565
https://bugzilla.redhat.com/show_bug.cgi?id=2217569
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29402
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29403
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29405
https://errata.almalinux.org/9/ALSA-2023-3923.html
https://errata.rockylinux.org/RLSA-2023:3923
https://github.com/golang/go/commit/36144ba429ef2650940c72e7a0b932af3612d420 (go1.20.5)
https://github.com/golang/go/commit/a7b1cd452ddc69a6606c2f35ac5786dc892e62cb (go1.19.10)
https://github.com/golang/go/issues/60272
https://go.dev/cl/501223
https://go.dev/issue/60272
https://groups.google.com/g/golang-announce/c/q5135a9d924
https://groups.google.com/g/golang-announce/c/q5135a9d924/m/j0ZoAJOHAwAJ
https://linux.oracle.com/cve/CVE-2023-29403.html
https://linux.oracle.com/errata/ELSA-2023-3923.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBS3IIK6ADV24C5ULQU55QLT2UE762ZX/
https://nvd.nist.gov/vuln/detail/CVE-2023-29403
https://pkg.go.dev/vuln/GO-2023-1840
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20241220-0009/
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://www.cve.org/CVERecord?id=CVE-2023-29403
|
| stdlib |
CVE-2023-39325 |
HIGH |
v1.20.2 |
1.20.10, 1.21.3 |
golang.org/x/net
https://access.redhat.com/errata/RHSA-2023:6077
https://access.redhat.com/security/cve/CVE-2023-39325
https://access.redhat.com/security/cve/CVE-2023-44487
https://bugzilla.redhat.com/2242803
https://bugzilla.redhat.com/2243296
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://bugzilla.redhat.com/show_bug.cgi?id=2243296
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487
https://errata.almalinux.org/9/ALSA-2023-6077.html
https://errata.rockylinux.org/RLSA-2023:6077
https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21]
https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20]
https://github.com/golang/go/issues/63417
https://go.dev/cl/534215
https://go.dev/cl/534235
https://go.dev/issue/63417
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
https://linux.oracle.com/cve/CVE-2023-39325.html
https://linux.oracle.com/errata/ELSA-2023-5867.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/
https://nvd.nist.gov/vuln/detail/CVE-2023-39325
https://pkg.go.dev/vuln/GO-2023-2102
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231110-0008
https://security.netapp.com/advisory/ntap-20231110-0008/
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
https://www.cve.org/CVERecord?id=CVE-2023-39325
|
| stdlib |
CVE-2023-45283 |
HIGH |
v1.20.2 |
1.20.11, 1.21.4, 1.20.12, 1.21.5 |
http://www.openwall.com/lists/oss-security/2023/12/05/2
https://go.dev/cl/540277
https://go.dev/cl/541175
https://go.dev/issue/63713
https://go.dev/issue/64028
https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY
https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ
https://nvd.nist.gov/vuln/detail/CVE-2023-45283
https://pkg.go.dev/vuln/GO-2023-2185
https://security.netapp.com/advisory/ntap-20231214-0008/
|
| stdlib |
CVE-2023-45288 |
HIGH |
v1.20.2 |
1.21.9, 1.22.2 |
http://www.openwall.com/lists/oss-security/2024/04/03/16
http://www.openwall.com/lists/oss-security/2024/04/05/4
https://access.redhat.com/errata/RHSA-2024:2724
https://access.redhat.com/security/cve/CVE-2023-45288
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268018
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/2268273
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://errata.almalinux.org/9/ALSA-2024-2724.html
https://errata.rockylinux.org/RLSA-2024:2724
https://go.dev/cl/576155
https://go.dev/issue/65051
https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M
https://kb.cert.org/vuls/id/421644
https://linux.oracle.com/cve/CVE-2023-45288.html
https://linux.oracle.com/errata/ELSA-2024-3346.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/
https://nowotarski.info/http2-continuation-flood-technical-details
https://nowotarski.info/http2-continuation-flood/
https://nvd.nist.gov/vuln/detail/CVE-2023-45288
https://pkg.go.dev/vuln/GO-2024-2687
https://security.netapp.com/advisory/ntap-20240419-0009
https://security.netapp.com/advisory/ntap-20240419-0009/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2023-45288
https://www.kb.cert.org/vuls/id/421644
|
| stdlib |
CVE-2024-34156 |
HIGH |
v1.20.2 |
1.22.7, 1.23.1 |
https://access.redhat.com/errata/RHSA-2025:3773
https://access.redhat.com/security/cve/CVE-2024-34156
https://bugzilla.redhat.com/2310528
https://bugzilla.redhat.com/show_bug.cgi?id=2310528
https://bugzilla.redhat.com/show_bug.cgi?id=2341750
https://bugzilla.redhat.com/show_bug.cgi?id=2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2344219
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866
https://errata.almalinux.org/9/ALSA-2025-3773.html
https://errata.rockylinux.org/RLSA-2025:3773
https://github.com/golang/go/commit/2092294f2b097c5828f4eace6c98a322c1510b01 (go1.22.7)
https://github.com/golang/go/commit/fa8ff1a46deb6c816304441ec6740ec112e19012 (go1.23.1)
https://go.dev/cl/611239
https://go.dev/issue/69139
https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc
https://groups.google.com/g/golang-dev/c/S9POB9NCTdk
https://linux.oracle.com/cve/CVE-2024-34156.html
https://linux.oracle.com/errata/ELSA-2025-3773.html
https://nvd.nist.gov/vuln/detail/CVE-2024-34156
https://pkg.go.dev/vuln/GO-2024-3106
https://security.netapp.com/advisory/ntap-20240926-0004/
https://ubuntu.com/security/notices/USN-7081-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-34156
|
| stdlib |
CVE-2025-47907 |
HIGH |
v1.20.2 |
1.23.12, 1.24.6 |
http://www.openwall.com/lists/oss-security/2025/08/06/1
https://access.redhat.com/errata/RHSA-2025:20983
https://access.redhat.com/security/cve/CVE-2025-47907
https://bugzilla.redhat.com/2387083
https://bugzilla.redhat.com/2393152
https://errata.almalinux.org/10/ALSA-2025-20983.html
https://go.dev/cl/693735
https://go.dev/issue/74831
https://groups.google.com/g/golang-announce/c/x5MKroML2yM
https://linux.oracle.com/cve/CVE-2025-47907.html
https://linux.oracle.com/errata/ELSA-2025-20983.html
https://nvd.nist.gov/vuln/detail/CVE-2025-47907
https://pkg.go.dev/vuln/GO-2025-3849
https://www.cve.org/CVERecord?id=CVE-2025-47907
|
| stdlib |
CVE-2025-58183 |
HIGH |
v1.20.2 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/errata/RHSA-2026:1837
https://access.redhat.com/security/cve/CVE-2025-58183
https://bugzilla.redhat.com/2407258
https://bugzilla.redhat.com/show_bug.cgi?id=2407258
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58183
https://errata.almalinux.org/10/ALSA-2026-1837.html
https://errata.rockylinux.org/RLSA-2025:23295
https://go.dev/cl/709861
https://go.dev/issue/75677
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://linux.oracle.com/cve/CVE-2025-58183.html
https://linux.oracle.com/errata/ELSA-2026-50076.html
https://nvd.nist.gov/vuln/detail/CVE-2025-58183
https://pkg.go.dev/vuln/GO-2025-4014
https://www.cve.org/CVERecord?id=CVE-2025-58183
|
| stdlib |
CVE-2025-61726 |
HIGH |
v1.20.2 |
1.24.12, 1.25.6 |
https://access.redhat.com/errata/RHSA-2026:5146
https://access.redhat.com/security/cve/CVE-2025-61726
https://bugzilla.redhat.com/2418462
https://bugzilla.redhat.com/2434432
https://bugzilla.redhat.com/2437111
https://bugzilla.redhat.com/show_bug.cgi?id=2418462
https://bugzilla.redhat.com/show_bug.cgi?id=2434432
https://bugzilla.redhat.com/show_bug.cgi?id=2437111
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121
https://errata.almalinux.org/10/ALSA-2026-5146.html
https://errata.rockylinux.org/RLSA-2026:5146
https://go.dev/cl/736712
https://go.dev/issue/77101
https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
https://linux.oracle.com/cve/CVE-2025-61726.html
https://linux.oracle.com/errata/ELSA-2026-5146.html
https://nvd.nist.gov/vuln/detail/CVE-2025-61726
https://pkg.go.dev/vuln/GO-2026-4341
https://www.cve.org/CVERecord?id=CVE-2025-61726
|
| stdlib |
CVE-2025-61728 |
HIGH |
v1.20.2 |
1.24.12, 1.25.6 |
http://www.openwall.com/lists/oss-security/2026/01/15/4
https://access.redhat.com/errata/RHSA-2026:3752
https://access.redhat.com/security/cve/CVE-2025-61728
https://bugzilla.redhat.com/2418462
https://bugzilla.redhat.com/2434431
https://bugzilla.redhat.com/2434432
https://bugzilla.redhat.com/2437111
https://bugzilla.redhat.com/show_bug.cgi?id=2418462
https://bugzilla.redhat.com/show_bug.cgi?id=2434431
https://bugzilla.redhat.com/show_bug.cgi?id=2434432
https://bugzilla.redhat.com/show_bug.cgi?id=2437111
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61728
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121
https://errata.almalinux.org/10/ALSA-2026-3752.html
https://errata.rockylinux.org/RLSA-2026:3336
https://go.dev/cl/736713
https://go.dev/issue/77102
https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
https://linux.oracle.com/cve/CVE-2025-61728.html
https://linux.oracle.com/errata/ELSA-2026-4672.html
https://nvd.nist.gov/vuln/detail/CVE-2025-61728
https://pkg.go.dev/vuln/GO-2026-4342
https://www.cve.org/CVERecord?id=CVE-2025-61728
|
| stdlib |
CVE-2025-61729 |
HIGH |
v1.20.2 |
1.24.11, 1.25.5 |
https://access.redhat.com/errata/RHSA-2026:5146
https://access.redhat.com/security/cve/CVE-2025-61729
https://bugzilla.redhat.com/2418462
https://bugzilla.redhat.com/2434432
https://bugzilla.redhat.com/2437111
https://bugzilla.redhat.com/show_bug.cgi?id=2418462
https://bugzilla.redhat.com/show_bug.cgi?id=2434432
https://bugzilla.redhat.com/show_bug.cgi?id=2437111
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121
https://errata.almalinux.org/10/ALSA-2026-5146.html
https://errata.rockylinux.org/RLSA-2026:5146
https://go.dev/cl/725920
https://go.dev/issue/76445
https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
https://linux.oracle.com/cve/CVE-2025-61729.html
https://linux.oracle.com/errata/ELSA-2026-5146.html
https://nvd.nist.gov/vuln/detail/CVE-2025-61729
https://pkg.go.dev/vuln/GO-2025-4155
https://www.cve.org/CVERecord?id=CVE-2025-61729
|
| stdlib |
CVE-2026-25679 |
HIGH |
v1.20.2 |
1.25.8, 1.26.1 |
https://access.redhat.com/errata/RHSA-2026:6388
https://access.redhat.com/security/cve/CVE-2026-25679
https://bugzilla.redhat.com/2445356
https://bugzilla.redhat.com/show_bug.cgi?id=2445356
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679
https://errata.almalinux.org/10/ALSA-2026-6388.html
https://errata.rockylinux.org/RLSA-2026:7005
https://go.dev/cl/752180
https://go.dev/issue/77578
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk
https://linux.oracle.com/cve/CVE-2026-25679.html
https://linux.oracle.com/errata/ELSA-2026-7992.html
https://nvd.nist.gov/vuln/detail/CVE-2026-25679
https://pkg.go.dev/vuln/GO-2026-4601
https://www.cve.org/CVERecord?id=CVE-2026-25679
|
| stdlib |
CVE-2026-32280 |
HIGH |
v1.20.2 |
1.25.9, 1.26.2 |
https://go.dev/cl/758320
https://go.dev/issue/78282
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32280
https://pkg.go.dev/vuln/GO-2026-4947
|
| stdlib |
CVE-2026-32282 |
HIGH |
v1.20.2 |
1.25.9, 1.26.2 |
https://access.redhat.com/security/cve/CVE-2026-32282
https://go.dev/cl/763761
https://go.dev/issue/78293
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32282
https://pkg.go.dev/vuln/GO-2026-4864
https://www.cve.org/CVERecord?id=CVE-2026-32282
|
| stdlib |
CVE-2023-29406 |
MEDIUM |
v1.20.2 |
1.19.11, 1.20.6 |
https://access.redhat.com/errata/RHSA-2023:6474
https://access.redhat.com/security/cve/CVE-2023-29406
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2242871
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://errata.almalinux.org/9/ALSA-2023-6474.html
https://errata.rockylinux.org/RLSA-2023:7202
https://github.com/golang/go/commit/312920c00aac9897b2a0693e752390b5b0711a5a (go1.20.6)
https://github.com/golang/go/commit/5fa6923b1ea891400153d04ddf1545e23b40041b (go1.19.11)
https://github.com/golang/go/issues/60374
https://go.dev/cl/506996
https://go.dev/issue/60374
https://groups.google.com/g/golang-announce/c/2q13H6LEEx0
https://linux.oracle.com/cve/CVE-2023-29406.html
https://linux.oracle.com/errata/ELSA-2023-7202.html
https://nvd.nist.gov/vuln/detail/CVE-2023-29406
https://pkg.go.dev/vuln/GO-2023-1878
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20230814-0002/
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://www.cve.org/CVERecord?id=CVE-2023-29406
|
| stdlib |
CVE-2023-29409 |
MEDIUM |
v1.20.2 |
1.19.12, 1.20.7, 1.21.0-rc.4 |
https://access.redhat.com/errata/RHSA-2023:7766
https://access.redhat.com/security/cve/CVE-2023-29409
https://bugzilla.redhat.com/2228743
https://bugzilla.redhat.com/2237773
https://bugzilla.redhat.com/2237776
https://bugzilla.redhat.com/2237777
https://bugzilla.redhat.com/2237778
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
https://bugzilla.redhat.com/show_bug.cgi?id=1989575
https://bugzilla.redhat.com/show_bug.cgi?id=2132867
https://bugzilla.redhat.com/show_bug.cgi?id=2132868
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
https://bugzilla.redhat.com/show_bug.cgi?id=2228743
https://bugzilla.redhat.com/show_bug.cgi?id=2237773
https://bugzilla.redhat.com/show_bug.cgi?id=2237776
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2244340
https://bugzilla.redhat.com/show_bug.cgi?id=2246840
https://bugzilla.redhat.com/show_bug.cgi?id=2253193
https://bugzilla.redhat.com/show_bug.cgi?id=2253330
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugzilla.redhat.com/show_bug.cgi?id=2262272
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650
https://errata.almalinux.org/9/ALSA-2023-7766.html
https://errata.rockylinux.org/RLSA-2024:2988
https://go.dev/cl/515257
https://go.dev/issue/61460
https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ
https://linux.oracle.com/cve/CVE-2023-29409.html
https://linux.oracle.com/errata/ELSA-2024-2988.html
https://nvd.nist.gov/vuln/detail/CVE-2023-29409
https://pkg.go.dev/vuln/GO-2023-1987
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20230831-0010/
https://www.cve.org/CVERecord?id=CVE-2023-29409
|
| stdlib |
CVE-2023-39318 |
MEDIUM |
v1.20.2 |
1.20.8, 1.21.1 |
https://access.redhat.com/errata/RHSA-2024:2160
https://access.redhat.com/security/cve/CVE-2023-39318
https://bugzilla.redhat.com/2237773
https://bugzilla.redhat.com/2237776
https://bugzilla.redhat.com/2253330
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
https://bugzilla.redhat.com/show_bug.cgi?id=1989575
https://bugzilla.redhat.com/show_bug.cgi?id=2132867
https://bugzilla.redhat.com/show_bug.cgi?id=2132868
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
https://bugzilla.redhat.com/show_bug.cgi?id=2228743
https://bugzilla.redhat.com/show_bug.cgi?id=2237773
https://bugzilla.redhat.com/show_bug.cgi?id=2237776
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2244340
https://bugzilla.redhat.com/show_bug.cgi?id=2246840
https://bugzilla.redhat.com/show_bug.cgi?id=2253193
https://bugzilla.redhat.com/show_bug.cgi?id=2253330
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugzilla.redhat.com/show_bug.cgi?id=2262272
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650
https://errata.almalinux.org/9/ALSA-2024-2160.html
https://errata.rockylinux.org/RLSA-2024:2988
https://github.com/golang/go/commit/023b542edf38e2a1f87fcefb9f75ff2f99401b4c (go1.20.8)
https://github.com/golang/go/commit/b0e1d3ea26e8e8fce7726690c9ef0597e60739fb (go1.21.1)
https://go.dev/cl/526156
https://go.dev/issue/62196
https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM
https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ
https://linux.oracle.com/cve/CVE-2023-39318.html
https://linux.oracle.com/errata/ELSA-2024-2988.html
https://nvd.nist.gov/vuln/detail/CVE-2023-39318
https://pkg.go.dev/vuln/GO-2023-2041
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231020-0009/
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://vuln.go.dev/ID/GO-2023-2041.json
https://www.cve.org/CVERecord?id=CVE-2023-39318
|
| stdlib |
CVE-2023-39319 |
MEDIUM |
v1.20.2 |
1.20.8, 1.21.1 |
https://access.redhat.com/errata/RHSA-2024:2160
https://access.redhat.com/security/cve/CVE-2023-39319
https://bugzilla.redhat.com/2237773
https://bugzilla.redhat.com/2237776
https://bugzilla.redhat.com/2253330
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
https://bugzilla.redhat.com/show_bug.cgi?id=1989575
https://bugzilla.redhat.com/show_bug.cgi?id=2132867
https://bugzilla.redhat.com/show_bug.cgi?id=2132868
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
https://bugzilla.redhat.com/show_bug.cgi?id=2228743
https://bugzilla.redhat.com/show_bug.cgi?id=2237773
https://bugzilla.redhat.com/show_bug.cgi?id=2237776
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2244340
https://bugzilla.redhat.com/show_bug.cgi?id=2246840
https://bugzilla.redhat.com/show_bug.cgi?id=2253193
https://bugzilla.redhat.com/show_bug.cgi?id=2253330
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugzilla.redhat.com/show_bug.cgi?id=2262272
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650
https://errata.almalinux.org/9/ALSA-2024-2160.html
https://errata.rockylinux.org/RLSA-2024:2988
https://github.com/golang/go/commit/2070531d2f53df88e312edace6c8dfc9686ab2f5 (go1.20.8)
https://github.com/golang/go/commit/bbd043ff0d6d59f1a9232d31ecd5eacf6507bf6a (go1.21.1)
https://go.dev/cl/526157
https://go.dev/issue/62197
https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM
https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ
https://linux.oracle.com/cve/CVE-2023-39319.html
https://linux.oracle.com/errata/ELSA-2024-2988.html
https://nvd.nist.gov/vuln/detail/CVE-2023-39319
https://pkg.go.dev/vuln/GO-2023-2043
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231020-0009/
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://vuln.go.dev/ID/GO-2023-2043.json
https://www.cve.org/CVERecord?id=CVE-2023-39319
|
| stdlib |
CVE-2023-39326 |
MEDIUM |
v1.20.2 |
1.20.12, 1.21.5 |
https://access.redhat.com/errata/RHSA-2024:2272
https://access.redhat.com/security/cve/CVE-2023-39326
https://bugzilla.redhat.com/2253193
https://bugzilla.redhat.com/2253330
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
https://bugzilla.redhat.com/show_bug.cgi?id=1989575
https://bugzilla.redhat.com/show_bug.cgi?id=2132867
https://bugzilla.redhat.com/show_bug.cgi?id=2132868
https://bugzilla.redhat.com/show_bug.cgi?id=2132872
https://bugzilla.redhat.com/show_bug.cgi?id=2228743
https://bugzilla.redhat.com/show_bug.cgi?id=2237773
https://bugzilla.redhat.com/show_bug.cgi?id=2237776
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2244340
https://bugzilla.redhat.com/show_bug.cgi?id=2246840
https://bugzilla.redhat.com/show_bug.cgi?id=2253193
https://bugzilla.redhat.com/show_bug.cgi?id=2253330
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugzilla.redhat.com/show_bug.cgi?id=2262272
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650
https://errata.almalinux.org/9/ALSA-2024-2272.html
https://errata.rockylinux.org/RLSA-2024:2988
https://github.com/golang/go/commit/6446af942e2e2b161c4ec1b60d9703a2b55dc4dd (go1.20.12)
https://github.com/golang/go/commit/ec8c526e4be720e94b98ca509e6364f0efaf28f7 (go1.21.5)
https://go.dev/cl/547335
https://go.dev/issue/64433
https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ
https://linux.oracle.com/cve/CVE-2023-39326.html
https://linux.oracle.com/errata/ELSA-2024-2988.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIU6HOGV6RRIKWM57LOXQA75BGZSIH6G/
https://nvd.nist.gov/vuln/detail/CVE-2023-39326
https://pkg.go.dev/vuln/GO-2023-2382
https://ubuntu.com/security/notices/USN-6574-1
https://www.cve.org/CVERecord?id=CVE-2023-39326
|
| stdlib |
CVE-2023-45284 |
MEDIUM |
v1.20.2 |
1.20.11, 1.21.4 |
https://go.dev/cl/540277
https://go.dev/issue/63713
https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY
https://nvd.nist.gov/vuln/detail/CVE-2023-45284
https://pkg.go.dev/vuln/GO-2023-2186
|
| stdlib |
CVE-2023-45289 |
MEDIUM |
v1.20.2 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:2724
https://access.redhat.com/security/cve/CVE-2023-45289
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268018
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/2268273
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://errata.almalinux.org/9/ALSA-2024-2724.html
https://errata.rockylinux.org/RLSA-2024:2724
https://github.com/golang/go/commit/20586c0dbe03d144f914155f879fa5ee287591a1 (go1.21.8)
https://github.com/golang/go/commit/3a855208e3efed2e9d7c20ad023f1fa78afcc0be (go1.22.1)
https://github.com/golang/go/issues/65065
https://go.dev/cl/569340
https://go.dev/issue/65065
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2023-45289.html
https://linux.oracle.com/errata/ELSA-2024-3346.html
https://nvd.nist.gov/vuln/detail/CVE-2023-45289
https://pkg.go.dev/vuln/GO-2024-2600
https://security.netapp.com/advisory/ntap-20240329-0006/
https://ubuntu.com/security/notices/USN-6886-1
https://www.cve.org/CVERecord?id=CVE-2023-45289
|
| stdlib |
CVE-2023-45290 |
MEDIUM |
v1.20.2 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:9135
https://access.redhat.com/security/cve/CVE-2023-45290
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268022
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268022
https://bugzilla.redhat.com/show_bug.cgi?id=2279814
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://errata.almalinux.org/9/ALSA-2024-9135.html
https://errata.rockylinux.org/RLSA-2024:9135
https://github.com/golang/go/commit/041a47712e765e94f86d841c3110c840e76d8f82 (go1.22.1)
https://github.com/golang/go/commit/bf80213b121074f4ad9b449410a4d13bae5e9be0 (go1.21.8)
https://github.com/golang/go/issues/65383
https://go.dev/cl/569341
https://go.dev/issue/65383
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2023-45290.html
https://linux.oracle.com/errata/ELSA-2024-8038.html
https://nvd.nist.gov/vuln/detail/CVE-2023-45290
https://pkg.go.dev/vuln/GO-2024-2599
https://security.netapp.com/advisory/ntap-20240329-0004
https://security.netapp.com/advisory/ntap-20240329-0004/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2023-45290
|
| stdlib |
CVE-2024-24783 |
MEDIUM |
v1.20.2 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:6195
https://access.redhat.com/security/cve/CVE-2024-24783
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://errata.almalinux.org/9/ALSA-2024-6195.html
https://errata.rockylinux.org/RLSA-2024:2724
https://github.com/advisories/GHSA-3q2c-pvp5-3cqp
https://github.com/golang/go/commit/337b8e9cbfa749d9d5c899e0dc358e2208d5e54f (go1.22.1)
https://github.com/golang/go/commit/be5b52bea674190ef7de272664be6c7ae93ec5a0 (go1.21.8)
https://github.com/golang/go/issues/65390
https://go.dev/cl/569339
https://go.dev/issue/65390
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2024-24783.html
https://linux.oracle.com/errata/ELSA-2024-6969.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24783
https://pkg.go.dev/vuln/GO-2024-2598
https://security.netapp.com/advisory/ntap-20240329-0005
https://security.netapp.com/advisory/ntap-20240329-0005/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-24783
|
| stdlib |
CVE-2024-24784 |
MEDIUM |
v1.20.2 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:2562
https://access.redhat.com/security/cve/CVE-2024-24784
https://bugzilla.redhat.com/2262921
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268018
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/2268021
https://bugzilla.redhat.com/2268022
https://bugzilla.redhat.com/2268273
https://bugzilla.redhat.com/show_bug.cgi?id=2262921
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268021
https://bugzilla.redhat.com/show_bug.cgi?id=2268022
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1394
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24784
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785
https://errata.almalinux.org/9/ALSA-2024-2562.html
https://errata.rockylinux.org/RLSA-2024:2562
https://github.com/golang/go/commit/263c059b09fdd40d9dd945f2ecb20c89ea28efe5 (go1.21.8)
https://github.com/golang/go/commit/5330cd225ba54c7dc78c1b46dcdf61a4671a632c (go1.22.1)
https://github.com/golang/go/issues/65083
https://go.dev/cl/555596
https://go.dev/issue/65083
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2024-24784.html
https://linux.oracle.com/errata/ELSA-2024-6969.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24784
https://pkg.go.dev/vuln/GO-2024-2609
https://security.netapp.com/advisory/ntap-20240329-0007/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-24784
|
| stdlib |
CVE-2024-24785 |
MEDIUM |
v1.20.2 |
1.21.8, 1.22.1 |
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:9135
https://access.redhat.com/security/cve/CVE-2024-24785
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268022
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268022
https://bugzilla.redhat.com/show_bug.cgi?id=2279814
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://errata.almalinux.org/9/ALSA-2024-9135.html
https://errata.rockylinux.org/RLSA-2024:9135
https://github.com/golang/go/commit/056b0edcb8c152152021eebf4cf42adbfbe77992 (go1.22.1)
https://github.com/golang/go/commit/3643147a29352ca2894fd5d0d2069bc4b4335a7e (go1.21.8)
https://github.com/golang/go/issues/65697
https://go.dev/cl/564196
https://go.dev/issue/65697
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
https://linux.oracle.com/cve/CVE-2024-24785.html
https://linux.oracle.com/errata/ELSA-2026-3428.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24785
https://pkg.go.dev/vuln/GO-2024-2610
https://security.netapp.com/advisory/ntap-20240329-0008/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://vuln.go.dev/ID/GO-2024-2610.json
https://www.cve.org/CVERecord?id=CVE-2024-24785
|
| stdlib |
CVE-2024-24789 |
MEDIUM |
v1.20.2 |
1.21.11, 1.22.4 |
http://www.openwall.com/lists/oss-security/2024/06/04/1
https://access.redhat.com/errata/RHSA-2024:9115
https://access.redhat.com/security/cve/CVE-2024-24789
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2292668
https://bugzilla.redhat.com/2292787
https://bugzilla.redhat.com/2294000
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2144983
https://bugzilla.redhat.com/show_bug.cgi?id=2274767
https://bugzilla.redhat.com/show_bug.cgi?id=2292668
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4122
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24789
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727
https://errata.almalinux.org/9/ALSA-2024-9115.html
https://errata.rockylinux.org/RLSA-2024:9102
https://github.com/golang/go/commit/c8e40338cf00f3c1d86c8fb23863ad67a4c72bcc (1.21)
https://github.com/golang/go/commit/cf501ac0c5fe351a8582d20b43562027927906e7 (1.22)
https://github.com/golang/go/issues/66869
https://go.dev/cl/585397
https://go.dev/issue/66869
https://groups.google.com/g/golang-announce/c/XbxouI9gY7k
https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ
https://linux.oracle.com/cve/CVE-2024-24789.html
https://linux.oracle.com/errata/ELSA-2024-9115.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5YAEIA6IUHUNGJ7AIXXPQT6D2GYENX7/
https://nvd.nist.gov/vuln/detail/CVE-2024-24789
https://pkg.go.dev/vuln/GO-2024-2888
https://security.netapp.com/advisory/ntap-20250131-0008/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-24789
|
| stdlib |
CVE-2024-24791 |
MEDIUM |
v1.20.2 |
1.21.12, 1.22.5 |
https://access.redhat.com/errata/RHSA-2025:7256
https://access.redhat.com/security/cve/CVE-2024-24791
https://bugzilla.redhat.com/2237777
https://bugzilla.redhat.com/2237778
https://bugzilla.redhat.com/2279814
https://bugzilla.redhat.com/2292787
https://bugzilla.redhat.com/2295310
https://bugzilla.redhat.com/2315719
https://bugzilla.redhat.com/show_bug.cgi?id=2237777
https://bugzilla.redhat.com/show_bug.cgi?id=2237778
https://bugzilla.redhat.com/show_bug.cgi?id=2279814
https://bugzilla.redhat.com/show_bug.cgi?id=2292787
https://bugzilla.redhat.com/show_bug.cgi?id=2295310
https://bugzilla.redhat.com/show_bug.cgi?id=2315719
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9355
https://errata.almalinux.org/9/ALSA-2025-7256.html
https://errata.rockylinux.org/RLSA-2025:7256
https://go.dev/cl/591255
https://go.dev/issue/67555
https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ
https://linux.oracle.com/cve/CVE-2024-24791.html
https://linux.oracle.com/errata/ELSA-2025-7256.html
https://nvd.nist.gov/vuln/detail/CVE-2024-24791
https://pkg.go.dev/vuln/GO-2024-2963
https://security.netapp.com/advisory/ntap-20241004-0004/
https://ubuntu.com/security/notices/USN-7081-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-24791
|
| stdlib |
CVE-2024-34155 |
MEDIUM |
v1.20.2 |
1.22.7, 1.23.1 |
https://access.redhat.com/errata/RHSA-2024:9459
https://access.redhat.com/security/cve/CVE-2024-34155
https://bugzilla.redhat.com/2310527
https://bugzilla.redhat.com/2310528
https://bugzilla.redhat.com/2310529
https://bugzilla.redhat.com/2315691
https://bugzilla.redhat.com/2315887
https://bugzilla.redhat.com/2317458
https://bugzilla.redhat.com/2317467
https://bugzilla.redhat.com/show_bug.cgi?id=2310527
https://bugzilla.redhat.com/show_bug.cgi?id=2310528
https://bugzilla.redhat.com/show_bug.cgi?id=2310529
https://bugzilla.redhat.com/show_bug.cgi?id=2315691
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34155
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34158
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9341
https://errata.almalinux.org/9/ALSA-2024-9459.html
https://errata.rockylinux.org/RLSA-2024:8039
https://github.com/golang/go/commit/53487e5477151ed75da50e50a0ba8f1ca64c00a3 (go1.23.1)
https://github.com/golang/go/commit/b232596139dbe96a62edbe3a2a203e856bf556eb (go1.22.7)
https://go.dev/cl/611238
https://go.dev/issue/69138
https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc
https://groups.google.com/g/golang-dev/c/S9POB9NCTdk
https://linux.oracle.com/cve/CVE-2024-34155.html
https://linux.oracle.com/errata/ELSA-2024-9459.html
https://nvd.nist.gov/vuln/detail/CVE-2024-34155
https://pkg.go.dev/vuln/GO-2024-3105
https://security.netapp.com/advisory/ntap-20240926-0005/
https://ubuntu.com/security/notices/USN-7081-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-34155
|
| stdlib |
CVE-2024-34158 |
MEDIUM |
v1.20.2 |
1.22.7, 1.23.1 |
https://access.redhat.com/errata/RHSA-2025:7118
https://access.redhat.com/security/cve/CVE-2024-34158
https://bugzilla.redhat.com/2262921
https://bugzilla.redhat.com/2310529
https://bugzilla.redhat.com/2315719
https://bugzilla.redhat.com/show_bug.cgi?id=2310527
https://bugzilla.redhat.com/show_bug.cgi?id=2310528
https://bugzilla.redhat.com/show_bug.cgi?id=2310529
https://bugzilla.redhat.com/show_bug.cgi?id=2315691
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34155
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34158
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9341
https://errata.almalinux.org/9/ALSA-2025-7118.html
https://errata.rockylinux.org/RLSA-2024:8039
https://github.com/golang/go/commit/032ac075c20c01c6c35a672d1542d3e98eab84ea (go1.23.1)
https://github.com/golang/go/commit/d4c53812e6ce2ac368173d7fcd31d0ecfcffb002 (go1.22.7)
https://go.dev/cl/611240
https://go.dev/issue/69141
https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc
https://groups.google.com/g/golang-dev/c/S9POB9NCTdk
https://linux.oracle.com/cve/CVE-2024-34158.html
https://linux.oracle.com/errata/ELSA-2025-7118.html
https://nvd.nist.gov/vuln/detail/CVE-2024-34158
https://pkg.go.dev/vuln/GO-2024-3107
https://security.netapp.com/advisory/ntap-20241004-0003/
https://ubuntu.com/security/notices/USN-7081-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2024-34158
|
| stdlib |
CVE-2024-45336 |
MEDIUM |
v1.20.2 |
1.22.11, 1.23.5, 1.24.0-rc.2 |
https://access.redhat.com/errata/RHSA-2025:3772
https://access.redhat.com/security/cve/CVE-2024-45336
https://bugzilla.redhat.com/2341750
https://bugzilla.redhat.com/2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2362345
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3931
https://errata.almalinux.org/8/ALSA-2025-3772.html
https://errata.rockylinux.org/RLSA-2025:7592
https://github.com/golang/go/issues/70530
https://go.dev/cl/643100
https://go.dev/issue/70530
https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI
https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ
https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ
https://linux.oracle.com/cve/CVE-2024-45336.html
https://linux.oracle.com/errata/ELSA-2025-7592.html
https://nvd.nist.gov/vuln/detail/CVE-2024-45336
https://pkg.go.dev/vuln/GO-2025-3420
https://security.netapp.com/advisory/ntap-20250221-0003/
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2024-45336
|
| stdlib |
CVE-2024-45341 |
MEDIUM |
v1.20.2 |
1.22.11, 1.23.5, 1.24.0-rc.2 |
https://access.redhat.com/errata/RHSA-2025:3772
https://access.redhat.com/security/cve/CVE-2024-45341
https://bugzilla.redhat.com/2341750
https://bugzilla.redhat.com/2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2341750
https://bugzilla.redhat.com/show_bug.cgi?id=2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2344219
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866
https://errata.almalinux.org/8/ALSA-2025-3772.html
https://errata.rockylinux.org/RLSA-2025:7466
https://github.com/golang/go/commit/2b2314e9f6103de322b2e247387c8b01fd0cd5a4
https://github.com/golang/go/issues/71156
https://go.dev/cl/643099
https://go.dev/issue/71156
https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI
https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ
https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ
https://linux.oracle.com/cve/CVE-2024-45341.html
https://linux.oracle.com/errata/ELSA-2025-7466.html
https://nvd.nist.gov/vuln/detail/CVE-2024-45341
https://pkg.go.dev/vuln/GO-2025-3373
https://security.netapp.com/advisory/ntap-20250221-0004/
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2024-45341
|
| stdlib |
CVE-2025-0913 |
MEDIUM |
v1.20.2 |
1.23.10, 1.24.4 |
https://go.dev/cl/672396
https://go.dev/issue/73702
https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A
https://nvd.nist.gov/vuln/detail/CVE-2025-0913
https://pkg.go.dev/vuln/GO-2025-3750
|
| stdlib |
CVE-2025-22866 |
MEDIUM |
v1.20.2 |
1.22.12, 1.23.6, 1.24.0-rc.3 |
https://access.redhat.com/security/cve/CVE-2025-22866
https://bugzilla.redhat.com/show_bug.cgi?id=2341750
https://bugzilla.redhat.com/show_bug.cgi?id=2341751
https://bugzilla.redhat.com/show_bug.cgi?id=2344219
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866
https://errata.rockylinux.org/RLSA-2025:7466
https://github.com/golang/go/commit/0cc45e7ca668b103c1055ae84402ad3f3425dd56 (go1.22.12)
https://github.com/golang/go/commit/6644ed63b1e6ccc129647ef6b0d4647fdbe14056 (go1.23.6)
https://github.com/golang/go/commit/6fc23a3cff5e38ff72923fee50f51254dcdc6e93 (go1.24rc3)
https://github.com/golang/go/issues/71383
https://go.dev/cl/643735
https://go.dev/issue/71383
https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k
https://linux.oracle.com/cve/CVE-2025-22866.html
https://linux.oracle.com/errata/ELSA-2025-7466.html
https://nvd.nist.gov/vuln/detail/CVE-2025-22866
https://pkg.go.dev/vuln/GO-2025-3447
https://security.netapp.com/advisory/ntap-20250221-0002/
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2025-22866
|
| stdlib |
CVE-2025-22871 |
MEDIUM |
v1.20.2 |
1.23.8, 1.24.2 |
http://www.openwall.com/lists/oss-security/2025/04/04/4
https://access.redhat.com/errata/RHSA-2025:9146
https://access.redhat.com/security/cve/CVE-2025-22871
https://bugzilla.redhat.com/2358493
https://bugzilla.redhat.com/show_bug.cgi?id=2358493
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22871
https://errata.almalinux.org/10/ALSA-2025-9146.html
https://errata.rockylinux.org/RLSA-2025:9317
https://github.com/roadrunner-server/roadrunner
https://github.com/roadrunner-server/roadrunner/commit/f269279ee87d0b88127741cad1042389af7605fa
https://github.com/roadrunner-server/roadrunner/issues/2166
https://github.com/roadrunner-server/roadrunner/releases/tag/v2025.1.0
https://go.dev/cl/652998
https://go.dev/issue/71988
https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk
https://linux.oracle.com/cve/CVE-2025-22871.html
https://linux.oracle.com/errata/ELSA-2025-9845.html
https://nvd.nist.gov/vuln/detail/CVE-2025-22871
https://pkg.go.dev/vuln/GO-2025-3563
https://www.cve.org/CVERecord?id=CVE-2025-22871
|
| stdlib |
CVE-2025-22873 |
MEDIUM |
v1.20.2 |
1.23.9, 1.24.3 |
http://www.openwall.com/lists/oss-security/2025/05/06/2
https://access.redhat.com/security/cve/CVE-2025-22873
https://go.dev/cl/670036
https://go.dev/issue/73555
https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ
https://nvd.nist.gov/vuln/detail/CVE-2025-22873
https://pkg.go.dev/vuln/GO-2026-4403
https://www.cve.org/CVERecord?id=CVE-2025-22873
|
| stdlib |
CVE-2025-4673 |
MEDIUM |
v1.20.2 |
1.23.10, 1.24.4 |
https://access.redhat.com/errata/RHSA-2025:10677
https://access.redhat.com/security/cve/CVE-2025-4673
https://bugzilla.redhat.com/2373305
https://bugzilla.redhat.com/show_bug.cgi?id=2373305
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4673
https://errata.almalinux.org/10/ALSA-2025-10677.html
https://errata.rockylinux.org/RLSA-2025:16432
https://go.dev/cl/679257
https://go.dev/issue/73816
https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A
https://linux.oracle.com/cve/CVE-2025-4673.html
https://linux.oracle.com/errata/ELSA-2025-10677.html
https://nvd.nist.gov/vuln/detail/CVE-2025-4673
https://pkg.go.dev/vuln/GO-2025-3751
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2025-4673
|
| stdlib |
CVE-2025-47906 |
MEDIUM |
v1.20.2 |
1.23.12, 1.24.6 |
http://www.openwall.com/lists/oss-security/2025/08/06/1
https://access.redhat.com/errata/RHSA-2025:22005
https://access.redhat.com/security/cve/CVE-2025-47906
https://bugzilla.redhat.com/2396546
https://bugzilla.redhat.com/show_bug.cgi?id=2396546
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47906
https://errata.almalinux.org/9/ALSA-2025-22005.html
https://errata.rockylinux.org/RLSA-2025:22005
https://go.dev/cl/691775
https://go.dev/issue/74466
https://groups.google.com/g/golang-announce/c/x5MKroML2yM
https://linux.oracle.com/cve/CVE-2025-47906.html
https://linux.oracle.com/errata/ELSA-2025-22668.html
https://nvd.nist.gov/vuln/detail/CVE-2025-47906
https://pkg.go.dev/vuln/GO-2025-3956
https://www.cve.org/CVERecord?id=CVE-2025-47906
|
| stdlib |
CVE-2025-47912 |
MEDIUM |
v1.20.2 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-47912
https://go.dev/cl/709857
https://go.dev/issue/75678
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-47912
https://pkg.go.dev/vuln/GO-2025-4010
https://www.cve.org/CVERecord?id=CVE-2025-47912
|
| stdlib |
CVE-2025-58185 |
MEDIUM |
v1.20.2 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58185
https://github.com/golang/go/commit/8709a41d5ef7321f486a1857f189c3fee20e8edd
https://go.dev/cl/709856
https://go.dev/issue/75671
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58185
https://pkg.go.dev/vuln/GO-2025-4011
https://www.cve.org/CVERecord?id=CVE-2025-58185
|
| stdlib |
CVE-2025-58186 |
MEDIUM |
v1.20.2 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58186
https://go.dev/cl/709855
https://go.dev/issue/75672
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58186
https://pkg.go.dev/vuln/GO-2025-4012
https://www.cve.org/CVERecord?id=CVE-2025-58186
|
| stdlib |
CVE-2025-58187 |
MEDIUM |
v1.20.2 |
1.24.9, 1.25.3 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58187
https://github.com/golang/go/commit/3fc4c79fdbb17b9b29ea9f8c29dd780df075d4c4
https://go.dev/cl/709854
https://go.dev/issue/75681
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58187
https://pkg.go.dev/vuln/GO-2025-4007
https://www.cve.org/CVERecord?id=CVE-2025-58187
|
| stdlib |
CVE-2025-58188 |
MEDIUM |
v1.20.2 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58188
https://github.com/golang/go/commit/6e4007e8cffbb870e6b606307ab7308236ecefb9
https://go.dev/cl/709853
https://go.dev/issue/75675
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58188
https://pkg.go.dev/vuln/GO-2025-4013
https://www.cve.org/CVERecord?id=CVE-2025-58188
|
| stdlib |
CVE-2025-58189 |
MEDIUM |
v1.20.2 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-58189
https://go.dev/cl/707776
https://go.dev/issue/75652
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-58189
https://pkg.go.dev/vuln/GO-2025-4008
https://www.cve.org/CVERecord?id=CVE-2025-58189
|
| stdlib |
CVE-2025-61723 |
MEDIUM |
v1.20.2 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-61723
https://github.com/golang/go/commit/5ce8cd16f3859ec5ac4106ad8ec15d6236f4501b
https://go.dev/cl/709858
https://go.dev/issue/75676
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-61723
https://pkg.go.dev/vuln/GO-2025-4009
https://www.cve.org/CVERecord?id=CVE-2025-61723
|
| stdlib |
CVE-2025-61724 |
MEDIUM |
v1.20.2 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-61724
https://go.dev/cl/709859
https://go.dev/issue/75716
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-61724
https://pkg.go.dev/vuln/GO-2025-4015
https://www.cve.org/CVERecord?id=CVE-2025-61724
|
| stdlib |
CVE-2025-61725 |
MEDIUM |
v1.20.2 |
1.24.8, 1.25.2 |
http://www.openwall.com/lists/oss-security/2025/10/08/1
https://access.redhat.com/security/cve/CVE-2025-61725
https://go.dev/cl/709860
https://go.dev/issue/75680
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
https://nvd.nist.gov/vuln/detail/CVE-2025-61725
https://pkg.go.dev/vuln/GO-2025-4006
https://www.cve.org/CVERecord?id=CVE-2025-61725
|
| stdlib |
CVE-2025-61727 |
MEDIUM |
v1.20.2 |
1.24.11, 1.25.5 |
https://access.redhat.com/security/cve/CVE-2025-61727
https://go.dev/cl/723900
https://go.dev/issue/76442
https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
https://nvd.nist.gov/vuln/detail/CVE-2025-61727
https://pkg.go.dev/vuln/GO-2025-4175
https://www.cve.org/CVERecord?id=CVE-2025-61727
|
| stdlib |
CVE-2025-61730 |
MEDIUM |
v1.20.2 |
1.24.12, 1.25.6 |
https://go.dev/cl/724120
https://go.dev/issue/76443
https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
https://nvd.nist.gov/vuln/detail/CVE-2025-61730
https://pkg.go.dev/vuln/GO-2026-4340
|
| stdlib |
CVE-2026-27142 |
MEDIUM |
v1.20.2 |
1.25.8, 1.26.1 |
https://access.redhat.com/security/cve/CVE-2026-27142
https://go.dev/cl/752081
https://go.dev/issue/77954
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk
https://nvd.nist.gov/vuln/detail/CVE-2026-27142
https://pkg.go.dev/vuln/GO-2026-4603
https://www.cve.org/CVERecord?id=CVE-2026-27142
|
| stdlib |
CVE-2026-32281 |
MEDIUM |
v1.20.2 |
1.25.9, 1.26.2 |
https://access.redhat.com/security/cve/CVE-2026-32281
https://go.dev/cl/758061
https://go.dev/issue/78281
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32281
https://pkg.go.dev/vuln/GO-2026-4946
https://www.cve.org/CVERecord?id=CVE-2026-32281
|
| stdlib |
CVE-2026-32288 |
MEDIUM |
v1.20.2 |
1.25.9, 1.26.2 |
https://access.redhat.com/security/cve/CVE-2026-32288
https://go.dev/cl/763766
https://go.dev/issue/78301
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32288
https://pkg.go.dev/vuln/GO-2026-4869
https://www.cve.org/CVERecord?id=CVE-2026-32288
|
| stdlib |
CVE-2026-32289 |
MEDIUM |
v1.20.2 |
1.25.9, 1.26.2 |
https://access.redhat.com/security/cve/CVE-2026-32289
https://go.dev/cl/763762
https://go.dev/issue/78331
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32289
https://pkg.go.dev/vuln/GO-2026-4865
https://www.cve.org/CVERecord?id=CVE-2026-32289
|
| stdlib |
CVE-2026-27139 |
LOW |
v1.20.2 |
1.25.8, 1.26.1 |
https://access.redhat.com/security/cve/CVE-2026-27139
https://go.dev/cl/749480
https://go.dev/issue/77827
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk
https://nvd.nist.gov/vuln/detail/CVE-2026-27139
https://pkg.go.dev/vuln/GO-2026-4602
https://www.cve.org/CVERecord?id=CVE-2026-27139
|
| stdlib |
CVE-2026-32283 |
UNKNOWN |
v1.20.2 |
1.25.9, 1.26.2 |
https://go.dev/cl/763767
https://go.dev/issue/78334
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
https://nvd.nist.gov/vuln/detail/CVE-2026-32283
https://pkg.go.dev/vuln/GO-2026-4870
|
| No Misconfigurations found |