Поиск уязвимостей
Количество 84
Количество 84
CVE-2026-78667
When parsing a Range header containing a large number of small ranges, ...
RLSA-2026:86203
Important: go-toolset:rhel8 security, bug fix, and enhancement update
RLSA-2026:86196
Important: golang security, bug fix, and enhancement update
RLSA-2026:86093
Important: golang security, bug fix, and enhancement update
CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
CVE-2026-111943
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
CVE-2026-111943
Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509
CVE-2026-111943
On most platforms, Go uses the given system root certificates. However ...
SUSE-SU-2026:4867-1
Security update for go1.26-openssl
SUSE-SU-2026:4866-1
Security update for go1.26-openssl
RLSA-2026:70641
Important: skopeo security update
ELSA-2026-70641
ELSA-2026-70641: skopeo security update (IMPORTANT)
RLSA-2026:70640
Important: buildah security update
ELSA-2026-70640
ELSA-2026-70640: buildah security update (IMPORTANT)
GHSA-f4xw-m386-m277
When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.
BDU:2026-18190
Уязвимость пакета net/http языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2026:22153-1
Security update for go1.27
SUSE-SU-2026:4863-1
Security update for go1.27
RLSA-2026:91720
Important: ignition security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2026-78667 When parsing a Range header containing a large number of small ranges, ... | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
 | RLSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update | 19 дней назад | ||
| RLSA-2026:86196 Important: golang security, bug fix, and enhancement update | 18 дней назад | ||
| RLSA-2026:86093 Important: golang security, bug fix, and enhancement update | 18 дней назад | ||
 | CVE-2026-111943 On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. | CVSS3: 6.8 | 0% Низкий | 19 дней назад |
 | CVE-2026-111943 On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. | CVSS3: 6.8 | 0% Низкий | 20 дней назад |
 | CVE-2026-111943 On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. | CVSS3: 6.8 | 0% Низкий | 19 дней назад |
 | CVE-2026-111943 Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 | CVSS3: 7.4 | 0% Низкий | 9 дней назад |
| CVE-2026-111943 On most platforms, Go uses the given system root certificates. However ... | CVSS3: 6.8 | 0% Низкий | 19 дней назад |
 | SUSE-SU-2026:4867-1 Security update for go1.26-openssl | 18 дней назад | ||
| SUSE-SU-2026:4866-1 Security update for go1.26-openssl | 18 дней назад | ||
| RLSA-2026:70641 Important: skopeo security update | около 2 месяцев назад | ||
| ELSA-2026-70641 ELSA-2026-70641: skopeo security update (IMPORTANT) | около 2 месяцев назад | ||
| RLSA-2026:70640 Important: buildah security update | около 2 месяцев назад | ||
| ELSA-2026-70640 ELSA-2026-70640: buildah security update (IMPORTANT) | около 2 месяцев назад | ||
| GHSA-f4xw-m386-m277 When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU. | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
 | BDU:2026-18190 Уязвимость пакета net/http языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
| openSUSE-SU-2026:22153-1 Security update for go1.27 | 0% Низкий | 18 дней назад | |
| SUSE-SU-2026:4863-1 Security update for go1.27 | 0% Низкий | 18 дней назад | |
| RLSA-2026:91720 Important: ignition security update | 0% Низкий | 10 дней назад |
Уязвимостей на страницу