Количество 140
Количество 140
CVE-2025-68121
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
CVE-2025-68121
Unexpected session resumption in crypto/tls
CVE-2025-68121
During session resumption in crypto/tls, if the underlying Config has ...
GHSA-8jvr-vh7g-f8gx
A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.
BDU:2026-02553
Уязвимость компонента cmd/cgo языка программирования Go, позволяющая нарушителю выполнить произвольный код
openSUSE-SU-2026:21319-1
Security update for go1.25-openssl
ROS-20260320-73-0011
Уязвимость etcd
ROS-20260310-73-0050
Уязвимость golang
RLSA-2026:3842
Moderate: delve security update
GHSA-h355-32pf-p2xm
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
ELSA-2026-3842
ELSA-2026-3842: delve security update (MODERATE)
BDU:2026-03408
Уязвимость языка программирования Golang, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
ROS-20260710-73-0001
Уязвимость mimir
ROS-20260327-73-0007
Уязвимость portainer-ce
ROS-20260320-73-0013
Уязвимость openbao
ROS-20260209-73-0037
Уязвимость golang
RLSA-2026:22141
Moderate: go-fdo-client and go-fdo-server security update
ELSA-2026-22141
ELSA-2026-22141: go-fdo-client and go-fdo-server security update (MODERATE)
openSUSE-SU-2026:20620-1
Security update for rclone
openSUSE-SU-2026:21436-1
Security update for rclone
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake. | CVSS3: 10 | 1% Низкий | 6 месяцев назад |
 | CVE-2025-68121 Unexpected session resumption in crypto/tls | 1% Низкий | 5 месяцев назад | |
| CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has ... | CVSS3: 10 | 1% Низкий | 6 месяцев назад |
| GHSA-8jvr-vh7g-f8gx A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary. | CVSS3: 8.6 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-02553 Уязвимость компонента cmd/cgo языка программирования Go, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.6 | 0% Низкий | 6 месяцев назад |
 | openSUSE-SU-2026:21319-1 Security update for go1.25-openssl | около 1 месяца назад | ||
 | ROS-20260320-73-0011 Уязвимость etcd | CVSS3: 8.6 | 0% Низкий | 5 месяцев назад |
| ROS-20260310-73-0050 Уязвимость golang | CVSS3: 8.6 | 0% Низкий | 5 месяцев назад |
 | RLSA-2026:3842 Moderate: delve security update | 1% Низкий | 5 месяцев назад | |
| GHSA-h355-32pf-p2xm During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake. | CVSS3: 4.8 | 1% Низкий | 6 месяцев назад |
| ELSA-2026-3842 ELSA-2026-3842: delve security update (MODERATE) | 1% Низкий | 5 месяцев назад | |
| BDU:2026-03408 Уязвимость языка программирования Golang, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 10 | 1% Низкий | 6 месяцев назад |
| ROS-20260710-73-0001 Уязвимость mimir | CVSS3: 10 | 1% Низкий | около 1 месяца назад |
| ROS-20260327-73-0007 Уязвимость portainer-ce | CVSS3: 10 | 1% Низкий | 5 месяцев назад |
| ROS-20260320-73-0013 Уязвимость openbao | CVSS3: 10 | 1% Низкий | 5 месяцев назад |
| ROS-20260209-73-0037 Уязвимость golang | CVSS3: 4.8 | 1% Низкий | 6 месяцев назад |
| RLSA-2026:22141 Moderate: go-fdo-client and go-fdo-server security update | 2 месяца назад | ||
| ELSA-2026-22141 ELSA-2026-22141: go-fdo-client and go-fdo-server security update (MODERATE) | 28 дней назад | ||
| openSUSE-SU-2026:20620-1 Security update for rclone | 4 месяца назад | ||
| openSUSE-SU-2026:21436-1 Security update for rclone | 21 день назад |
Уязвимостей на страницу