Login Request a demo
GO
Vendor
Golang
14 products with CVEs on record
231
CVEs
4
On KEV
0
New 30D
Products
GO
GO
Golang
10.0
171 CVEs2 on KEV0 new
HT
Http2
Golang
7.5
5 CVEs1 on KEV0 new
NE
Networking
Golang
7.5
2 CVEs1 on KEV0 new
CR
Crypto
Golang
10.0
21 CVEs0 on KEV0 new
NE
Net
Golang
9.6
12 CVEs0 on KEV0 new
IM
Image
Golang
7.5
5 CVEs0 on KEV0 new
TE
Text
Golang
7.5
4 CVEs0 on KEV0 new
SS
Ssh
Golang
7.5
3 CVEs0 on KEV0 new
TI
Tiff
Golang
7.5
3 CVEs0 on KEV0 new
GO
Gopls
Golang
8.8
1 CVEs0 on KEV0 new
H2
H2c
Golang
7.5
1 CVEs0 on KEV0 new
HP
Hpack
Golang
7.5
1 CVEs0 on KEV0 new
PS
Package Ssh
Golang
7.5
1 CVEs0 on KEV0 new
PR
Protobuf
Golang
8.6
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-56855
CR
Crypto
Golang
7.5
0%
Sep 2Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
CVE-2026-78662
CR
Crypto
Golang
7.5
0%
Sep 2Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
CVE-2026-42505
GO
GO
Golang
5.3
0%
Jul 8Invoking Encrypted Client Hello privacy leak in crypto/tls
CVE-2026-39822
GO
GO
Golang
7.8
0%
Jul 8Root escape via symlink plus trailing slash in os
CVE-2026-46604
TI
Tiff
Golang
7.5
1%
Jun 26Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
CVE-2023-54365
GO
GO
Golang
7.5
1%
Jun 23Traefik - Denial of Service via HTTP/2 Request Handling
CVE-2026-27136
NE
Net
Golang
6.1
0%
May 22Invoking duplicate attributes can cause XSS in golang.org/x/net/html
CVE-2026-25681
NE
Net
Golang
6.1
0%
May 22Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
CVE-2026-25680
NE
Net
Golang
6.5
0%
May 22Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html
CVE-2026-42502
NE
Net
Golang
6.1
0%
May 22Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
CVE-2026-39821
NE
Net
Golang
9.6
2%
May 22Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CVE-2026-42506
NE
Net
Golang
6.1
0%
May 22Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
CVE-2026-46598
CR
Crypto
Golang
5.3
0%
May 22Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
CVE-2026-46595
CR
Crypto
Golang
10.0
1%
May 22Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
CVE-2026-42508
CR
Crypto
Golang
9.1
7%
May 22Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
CVE-2026-39834
CR
Crypto
Golang
9.1
1%
May 22Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
CVE-2026-39831
CR
Crypto
Golang
9.1
0%
May 22Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
CVE-2026-39829
CR
Crypto
Golang
7.5
0%
May 22Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
CVE-2026-39830
CR
Crypto
Golang
9.1
1%
May 22Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
CVE-2026-39827
CR
Crypto
Golang
6.5
0%
May 22Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
CVE-2026-39835
CR
Crypto
Golang
5.3
1%
May 22Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
CVE-2026-39828
CR
Crypto
Golang
6.3
0%
May 22Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
CVE-2026-46597
CR
Crypto
Golang
7.5
0%
May 22Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
CVE-2026-39832
CR
Crypto
Golang
9.1
1%
May 22Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
CVE-2026-39833
CR
Crypto
Golang
9.1
0%
May 22Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
CVE-2026-39820
GO
GO
Golang
7.5
1%
May 7Quadratic string concatentation in consumeComment in net/mail
CVE-2026-42501
GO
GO
Golang
7.5
0%
May 7Malicious module proxy can bypass checksum database in cmd/go
CVE-2026-39823
GO
GO
Golang
6.1
0%
May 7Bypass of meta content URL escaping causes XSS in html/template
CVE-2026-33811
GO
GO
Golang
7.5
1%
May 7Crash when handling long CNAME response in net
CVE-2026-39826
GO
GO
Golang
6.1
0%
May 7Escaper bypass leads to XSS in html/template
CVE-2026-39817
GO
GO
Golang
5.9
0%
May 7Invoking "go tool pack" does not sanitize output paths in cmd/go
CVE-2026-39819
GO
GO
Golang
5.3
0%
May 7Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
CVE-2026-42499
GO
GO
Golang
7.5
1%
May 7Quadratic string concatenation in consumePhrase in net/mail
CVE-2026-39825
GO
GO
Golang
5.3
0%
May 7ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil
CVE-2026-39836
GO
GO
Golang
7.5
1%
May 7Panic in Dial and LookupPort when handling NUL byte on Windows in net
CVE-2026-33814
GO
GO
Golang
7.5
1%
May 7Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
CVE-2026-42503
GO
Gopls
Golang
8.8
0%
May 6Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/gopls
CVE-2026-33812
IM
Image
Golang
6.1
0%
Apr 21Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
CVE-2026-33813
IM
Image
Golang
7.5
0%
Apr 21Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
CVE-2026-32280
GO
GO
Golang
7.5
1%
Apr 8Unexpected work during chain building in crypto/x509
CVE-2026-32281
GO
GO
Golang
7.5
0%
Apr 8Inefficient policy validation in crypto/x509
CVE-2026-27140
GO
GO
Golang
8.8
1%
Apr 8Code execution vulnerability in SWIG code generation in cmd/go
CVE-2026-32283
GO
GO
Golang
7.5
1%
Apr 8Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls
CVE-2026-32288
GO
GO
Golang
5.5
0%
Apr 8Unbounded allocation for old GNU sparse in archive/tar
CVE-2026-27143
GO
GO
Golang
9.8
1%
Apr 8Missing bound checks can lead to memory corruption in safe Go in cmd/compile
CVE-2026-27144
GO
GO
Golang
7.1
0%
Apr 8Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
CVE-2026-33810
GO
GO
Golang
8.2
0%
Apr 8Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
CVE-2026-32289
GO
GO
Golang
6.1
0%
Apr 8JsBraceDepth Context Tracking Bugs (XSS) in html/template
CVE-2026-32282
GO
GO
Golang
6.4
0%
Apr 8TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
CVE-2026-33809
TI
Tiff
Golang
5.3
0%
Mar 25OOM from malicious IFD offset in golang.org/x/image/tiff
CVE-2026-27142
GO
GO
Golang
6.1
0%
Mar 6Actions which insert URLs into the content attribute of HTML meta tags are not escaped
CVE-2026-27139
GO
GO
Golang
2.5
0%
Mar 6On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File…
CVE-2026-27138
GO
GO
Golang
5.9
0%
Mar 6Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints
CVE-2026-27137
GO
GO
Golang
7.5
1%
Mar 6When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions,…
CVE-2026-25679
GO
GO
Golang
7.5
1%
Mar 6url.Parse insufficiently validated the host/authority component and accepted some invalid URLs
CVE-2025-68121
GO
GO
Golang
10.0
1%
Feb 5During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed…
CVE-2025-61732
GO
GO
Golang
8.6
1%
Feb 5A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary
CVE-2025-22873
GO
GO
Golang
3.8
0%
Feb 4It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../"
CVE-2025-68119
GO
GO
Golang
7.0
0%
Jan 28Downloading and building modules with malicious version strings can cause local code execution
CVE-2025-61731
GO
GO
Golang
7.8
1%
Jan 28Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content