Количество 83
Количество 83
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVE-2026-39821
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encode ...
openSUSE-SU-2026:21157-1
Security update for golang-github-prometheus-alertmanager
openSUSE-SU-2026:20994-1
Security update for helm
openSUSE-SU-2026:20888-1
Security update for apptainer
openSUSE-SU-2026:20853-1
Security update for hauler
SUSE-SU-2026:2683-1
Security update for google-cloud-sap-agent
SUSE-SU-2026:2682-1
Security update for google-cloud-sap-agent
RLSA-2026:35831
Important: grafana-pcp security update
RLSA-2026:35830
Important: grafana security update
RLSA-2026:35829
Important: grafana-pcp security update
RLSA-2026:35826
Important: grafana-pcp security update
RLSA-2026:30855
Important: git-lfs security update
RLSA-2026:30854
Important: git-lfs security update
RLSA-2026:30853
Important: git-lfs security update
GHSA-w2q5-6q6x-x959
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
ELSA-2026-35831
ELSA-2026-35831: grafana-pcp security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 9.6 | 0% Низкий | 2 месяца назад |
 | CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 8.2 | 0% Низкий | 2 месяца назад |
 | CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 9.6 | 0% Низкий | 2 месяца назад |
 | CVE-2026-39821 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | CVSS3: 10 | 0% Низкий | 2 месяца назад |
| CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encode ... | CVSS3: 9.6 | 0% Низкий | 2 месяца назад |
 | openSUSE-SU-2026:21157-1 Security update for golang-github-prometheus-alertmanager | 0% Низкий | около 1 месяца назад | |
| openSUSE-SU-2026:20994-1 Security update for helm | 0% Низкий | около 1 месяца назад | |
| openSUSE-SU-2026:20888-1 Security update for apptainer | 0% Низкий | около 2 месяцев назад | |
| openSUSE-SU-2026:20853-1 Security update for hauler | 0% Низкий | около 2 месяцев назад | |
| SUSE-SU-2026:2683-1 Security update for google-cloud-sap-agent | 0% Низкий | около 1 месяца назад | |
| SUSE-SU-2026:2682-1 Security update for google-cloud-sap-agent | 0% Низкий | около 1 месяца назад | |
 | RLSA-2026:35831 Important: grafana-pcp security update | 0% Низкий | 24 дня назад | |
| RLSA-2026:35830 Important: grafana security update | 0% Низкий | 24 дня назад | |
| RLSA-2026:35829 Important: grafana-pcp security update | 0% Низкий | 24 дня назад | |
| RLSA-2026:35826 Important: grafana-pcp security update | 0% Низкий | 24 дня назад | |
| RLSA-2026:30855 Important: git-lfs security update | 0% Низкий | 26 дней назад | |
| RLSA-2026:30854 Important: git-lfs security update | 0% Низкий | 30 дней назад | |
| RLSA-2026:30853 Important: git-lfs security update | 0% Низкий | около 1 месяца назад | |
| GHSA-w2q5-6q6x-x959 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 10 | 0% Низкий | 2 месяца назад |
| ELSA-2026-35831 ELSA-2026-35831: grafana-pcp security update (IMPORTANT) | 24 дня назад |
Уязвимостей на страницу