VIR Vulnerability Intelligence Relay

Package impact

golang Go / stdlib

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2025-68121 critical 10.0 10.0 9d ago Important: osbuild-composer security update rockylinuxredhatdebiansuse+2
CVE-2015-5740 critical 9.8 9.8 9y ago Request smuggling due to improper header parsing in net/http redhatfedoragolang
CVE-2015-5739 critical 9.8 9.8 9y ago Request smuggling due to improper header parsing in net/http redhatfedoragolang
CVE-2023-29403 critical — 9.5 3y ago Critical: go-toolset and golang security update redhatdebianrockylinuxgolang
CVE-2025-22871 critical 9.1 9.1 10mo ago Moderate: weldr-client security update redhatrockylinuxdebiansuse+2
CVE-2026-39826 medium 6.1 6.1 20d ago If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape a… debiansusegolanggcp
CVE-2026-39823 medium 6.1 6.1 20d ago CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune ins… debiansusegolanggcp
CVE-2017-15042 medium 5.9 5.9 9y ago Cleartext transmission of credentials in net/smtp golang
CVE-2017-8932 medium 5.9 5.9 9y ago Incorrect computation for P-256 curves in crypto/elliptic susefedoragolang
CVE-2025-47906 medium — 5.5 9mo ago Moderate: go-rpm-macros security update rockylinuxredhatdebiansuse+1
CVE-2025-22874 medium — 5.5 11mo ago Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rath… redhatarchdebiansuse+1
CVE-2025-4673 medium — 5.5 11mo ago Moderate: opentelemetry-collector security update redhatrockylinuxarchdebian+2
CVE-2024-45341 medium — 5.5 1y ago Moderate: go-toolset:rhel8 security update redhatrockylinuxdebiansuse+1
CVE-2024-45336 medium — 5.5 1y ago Moderate: go-toolset:rhel8 security update redhatrockylinuxdebiansuse+1
CVE-2024-24791 medium — 5.5 2y ago Moderate: git-lfs security update redhatalmalinuxrockylinuxdebian+2
CVE-2024-24790 medium — 5.5 2y ago Moderate: git-lfs security update redhatrockylinuxdebiansuse+1
CVE-2024-24788 medium — 5.5 2y ago Moderate: container-tools:rhel8 security update redhatalmalinuxrockylinuxdebian+2
CVE-2023-45287 medium — 5.5 2y ago Moderate: runc security update redhatdebiangolang
CVE-2023-29406 medium — 5.5 2y ago Moderate: container-tools:rhel8 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2023-39326 medium — 5.5 2y ago Moderate: toolbox security update redhatsusedebiangolang
CVE-2023-39321 medium — 5.5 3y ago Moderate: container-tools:4.0 security update redhatrockylinuxsusegolang
CVE-2023-39319 medium — 5.5 3y ago Moderate: container-tools:4.0 security update redhatrockylinuxsusedebian+1
CVE-2023-39318 medium — 5.5 3y ago Moderate: container-tools:4.0 security update redhatrockylinuxsusedebian+1
CVE-2023-39322 medium — 5.5 3y ago Moderate: container-tools:4.0 security update redhatrockylinuxsusegolang
CVE-2023-29409 medium — 5.5 3y ago Moderate: container-tools:4.0 security update redhatrockylinuxsusedebian+1
CVE-2023-24534 medium — 5.5 3y ago Moderate: grafana security and enhancement update rockylinuxredhatsusedebian+1
CVE-2023-29400 medium — 5.5 3y ago Moderate: container-tools:rhel8 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2023-24539 medium — 5.5 3y ago Moderate: container-tools:rhel8 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2023-24538 medium — 5.5 3y ago Moderate: container-tools:rhel8 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2023-24537 medium — 5.5 3y ago Moderate: container-tools:rhel8 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2023-24536 medium — 5.5 3y ago Moderate: container-tools:rhel8 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2023-24540 medium — 5.5 3y ago Moderate: container-tools:rhel8 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2022-41724 medium — 5.5 3y ago Moderate: container-tools:4.0 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2022-41723 medium — 5.5 3y ago Moderate: toolbox security and bug fix update rockylinuxredhatsusedebian+1
CVE-2022-41725 medium — 5.5 3y ago Moderate: container-tools:4.0 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2022-41715 medium — 5.5 3y ago Moderate: git-lfs security and bug fix update redhatalmalinuxrockylinuxsuse+2
CVE-2022-27664 medium — 5.5 3y ago Moderate: git-lfs security and bug fix update rockylinuxredhatsusedebian+1
CVE-2022-2879 medium — 5.5 3y ago Moderate: Image Builder security, bug fix, and enhancement update redhatrockylinuxsusedebian+1
CVE-2022-2880 medium — 5.5 3y ago Moderate: git-lfs security and bug fix update redhatrockylinuxsusedebian+1
CVE-2022-41717 medium — 5.5 3y ago Moderate: container-tools:4.0 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2021-34558 medium — 5.5 4y ago Moderate: grafana security, bug fix, and enhancement update redhatalmalinuxarchsuse+3
CVE-2022-32189 medium — 5.5 4y ago Moderate: container-tools:4.0 security and bug fix update rockylinuxredhatsusedebian+1
CVE-2021-33195 medium — 5.5 4y ago Moderate: grafana security, bug fix, and enhancement update redhatarchsusedebian+2
CVE-2021-33197 medium — 5.5 4y ago Moderate: grafana security, bug fix, and enhancement update redhatalmalinuxarchsuse+3
CVE-2021-33198 medium — 5.5 4y ago Moderate: buildah security and bug fix update redhatarchrockylinuxsuse+2
CVE-2022-30631 medium — 5.5 4y ago Moderate: grafana security, bug fix, and enhancement update rockylinuxredhatsusedebian+1
CVE-2022-30629 medium — 5.5 4y ago Moderate: container-tools:rhel8 security, bug fix, and enhancement update rockylinuxredhatsusedebian+1
CVE-2022-1705 medium — 5.5 4y ago Moderate: git-lfs security and bug fix update rockylinuxredhatsusedebian+1
CVE-2022-32148 medium — 5.5 4y ago Moderate: grafana security, bug fix, and enhancement update rockylinuxredhatsusedebian+1
CVE-2022-30633 medium — 5.5 4y ago Moderate: grafana security, bug fix, and enhancement update rockylinuxredhatsusedebian+1
CVE-2022-30632 medium — 5.5 4y ago Moderate: grafana security, bug fix, and enhancement update rockylinuxredhatsusedebian+1
CVE-2019-14809 medium — 5.5 4y ago Incorrect parsing validation in net/url archgolang
CVE-2019-17596 medium — 5.5 4y ago Panic on invalid DSA public keys in crypto/dsa archsusegolang
CVE-2021-31525 medium — 5.5 4y ago Moderate: go-toolset:rhel8 security, bug fix, and enhancement update archsusedebianrockylinux+1
CVE-2019-6486 medium — 5.5 4y ago Denial of service affecting P-521 and P-384 curves in crypto/elliptic archsusegolang
CVE-2022-23772 medium — 5.5 4y ago Moderate: go-toolset:rhel8 security and bug fix update suserockylinuxdebiangolang
CVE-2022-23806 medium — 5.5 4y ago Moderate: go-toolset:rhel8 security and bug fix update suserockylinuxdebiangolang
CVE-2021-39293 medium — 5.5 4y ago Moderate: go-toolset:rhel8 security and bug fix update archsuserockylinuxdebian+1
CVE-2021-27918 medium — 5.5 4y ago Moderate: go-toolset:rhel8 security, bug fix, and enhancement update archdebianrockylinuxgolang
CVE-2021-3114 medium — 5.5 4y ago Moderate: grafana security, bug fix, and enhancement update archsusedebianrockylinux+1
CVE-2021-33196 medium — 5.5 4y ago Moderate: go-toolset:rhel8 security, bug fix, and enhancement update archsuserockylinuxdebian+1
CVE-2021-36221 medium — 5.5 4y ago Moderate: go-toolset:rhel8 security, bug fix, and enhancement update archrockylinuxdebiangolang
CVE-2021-41772 medium — 5.5 4y ago Moderate: go-toolset:rhel8 security and bug fix update archsuserockylinuxdebian+1
CVE-2021-41771 medium — 5.5 4y ago Moderate: go-toolset:rhel8 security and bug fix update archsuserockylinuxdebian+1
CVE-2020-24553 medium — 5.5 4y ago Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header. archsusedebiangolang
CVE-2026-39825 medium 5.3 5.3 20d ago ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitize… debiansusegolanggcp
CVE-2014-7189 medium — 4.3 12y ago Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls golang
CVE-2025-22873 low — 2.5 4mo ago It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For example, Root.Open("../") would open the parent directory of the Root. This escape o… archdebiansusegolang
CVE-2021-27919 low — 2.5 5y ago archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the Reader.Open API for a ZIP archive in which ../ occurs at the beginning of any fi… archsusedebiangolang