Логотип exploitDog
bind:"GHSA-cxq7-xw9v-rcv3" OR bind:"CVE-2025-58189"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-cxq7-xw9v-rcv3" OR bind:"CVE-2025-58189"

Количество 8

Количество 8

github логотип

GHSA-cxq7-xw9v-rcv3

7 дней назад

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2025-58189

27 дней назад

[crypto/tls: ALPN negotiation errors can contain arbitrary text]

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2025-58189

7 дней назад

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.

CVSS3: 5.3
EPSS: Низкий
msrc логотип

CVE-2025-58189

6 дней назад

ALPN negotiation error contains attacker controlled information in crypto/tls

EPSS: Низкий
debian логотип

CVE-2025-58189

7 дней назад

When Conn.Handshake fails during ALPN negotiation the error contains a ...

CVSS3: 5.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3682-1

16 дней назад

Security update for go1.24

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03547-1

26 дней назад

Security update for go1.25

EPSS: Низкий
redos логотип

ROS-20251029-07

8 дней назад

Множественные уязвимости golang

CVSS3: 8.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-cxq7-xw9v-rcv3

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.

CVSS3: 5.3
0%
Низкий
7 дней назад
ubuntu логотип
CVE-2025-58189

[crypto/tls: ALPN negotiation errors can contain arbitrary text]

CVSS3: 5.3
0%
Низкий
27 дней назад
nvd логотип
CVE-2025-58189

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.

CVSS3: 5.3
0%
Низкий
7 дней назад
msrc логотип
CVE-2025-58189

ALPN negotiation error contains attacker controlled information in crypto/tls

0%
Низкий
6 дней назад
debian логотип
CVE-2025-58189

When Conn.Handshake fails during ALPN negotiation the error contains a ...

CVSS3: 5.3
0%
Низкий
7 дней назад
suse-cvrf логотип
SUSE-SU-2025:3682-1

Security update for go1.24

16 дней назад
suse-cvrf логотип
SUSE-SU-2025:03547-1

Security update for go1.25

26 дней назад
redos логотип
ROS-20251029-07

Множественные уязвимости golang

CVSS3: 8.2
8 дней назад

Уязвимостей на страницу