Количество 51
Количество 51
CVE-2024-24789
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.
CVE-2024-24789
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.
CVE-2024-24789
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.
CVE-2024-24789
Mishandling of corrupt central directory record in archive/zip
CVE-2024-24789
The archive/zip package's handling of certain types of invalid zip fil ...
CVE-2024-24790
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVE-2024-24790
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVE-2024-24790
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVE-2024-24790
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
CVE-2024-24790
The various Is methods (IsPrivate, IsLoopback, etc) did not work as ex ...
ALT-PU-2024-11781
ALT-PU-2024-11781: package `golang` update to version 1.22.6-alt1
GHSA-236w-p7wf-5ph8
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.
BDU:2024-04485
Уязвимость пакета archive-zip языка программирования Golang, позволяющая нарушителю создать произвольный zip-файл
SUSE-SU-2025:0377-1
Security update for google-osconfig-agent
SUSE-SU-2025:0302-1
Security update for google-osconfig-agent
RLSA-2024:8876
Moderate: go-toolset:rhel8 security update
GHSA-49gw-vxvf-fc2g
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
ELSA-2025-31356
ELSA-2025-31356: terraform-provider-oci-fips security update (MODERATE)
ELSA-2024-8876
ELSA-2024-8876: go-toolset:ol8 security update (MODERATE)
BDU:2024-04486
Уязвимость компонента net-netip языка программирования Golang, связанная с неправильным контролем доступа, позволяющая нарушителю обойти существующую политику ограничения доступа
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-24789 The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors. | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-24789 The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors. | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-24789 The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors. | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-24789 Mishandling of corrupt central directory record in archive/zip | CVSS3: 5.3 | 0% Низкий | около 1 года назад |
| CVE-2024-24789 The archive/zip package's handling of certain types of invalid zip fil ... | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
| CVE-2024-24790 The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
| CVE-2024-24790 The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. | CVSS3: 6.7 | 2% Низкий | больше 2 лет назад |
| CVE-2024-24790 The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
| CVE-2024-24790 Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip | CVSS3: 9.8 | 2% Низкий | около 1 года назад |
| CVE-2024-24790 The various Is methods (IsPrivate, IsLoopback, etc) did not work as ex ... | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
| ALT-PU-2024-11781 ALT-PU-2024-11781: package `golang` update to version 1.22.6-alt1 | CVSS3: 9.8 | около 2 лет назад | |
| GHSA-236w-p7wf-5ph8 The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors. | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
 | BDU:2024-04485 Уязвимость пакета archive-zip языка программирования Golang, позволяющая нарушителю создать произвольный zip-файл | CVSS3: 6.2 | 0% Низкий | больше 2 лет назад |
 | SUSE-SU-2025:0377-1 Security update for google-osconfig-agent | 2% Низкий | больше 1 года назад | |
| SUSE-SU-2025:0302-1 Security update for google-osconfig-agent | 2% Низкий | больше 1 года назад | |
 | RLSA-2024:8876 Moderate: go-toolset:rhel8 security update | 2% Низкий | почти 2 года назад | |
| GHSA-49gw-vxvf-fc2g The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. | CVSS3: 9.8 | 2% Низкий | больше 2 лет назад |
| ELSA-2025-31356 ELSA-2025-31356: terraform-provider-oci-fips security update (MODERATE) | 2% Низкий | больше 1 года назад | |
| ELSA-2024-8876 ELSA-2024-8876: go-toolset:ol8 security update (MODERATE) | 2% Низкий | почти 2 года назад | |
| BDU:2024-04486 Уязвимость компонента net-netip языка программирования Golang, связанная с неправильным контролем доступа, позволяющая нарушителю обойти существующую политику ограничения доступа | CVSS3: 6.2 | 2% Низкий | больше 2 лет назад |
Уязвимостей на страницу