Количество 100
Количество 100
CVE-2025-68121
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
CVE-2025-68121
Unexpected session resumption in crypto/tls
CVE-2025-68121
During session resumption in crypto/tls, if the underlying Config has ...
GHSA-g9q4-qjx4-2v7q
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.
BDU:2026-03410
Уязвимость языка программирования Golang, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
RLSA-2026:3842
Moderate: delve security update
GHSA-h355-32pf-p2xm
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
ELSA-2026-3842
ELSA-2026-3842: delve security update (MODERATE)
BDU:2026-03408
Уязвимость языка программирования Golang, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
ROS-20260209-73-0044
Уязвимость golang
openSUSE-SU-2026:20214-1
Security update for go1.25
SUSE-SU-2026:0790-1
Security update for go1.25-openssl
SUSE-SU-2026:0760-1
Security update for go1.25-openssl
SUSE-SU-2026:0427-1
Security update for go1.25
ROS-20260320-73-0013
Уязвимость openbao
ROS-20260209-73-0037
Уязвимость golang
openSUSE-SU-2026:20220-1
Security update for go1.24
SUSE-SU-2026:0789-1
Security update for go1.24-openssl
SUSE-SU-2026:0687-1
Security update for go1
SUSE-SU-2026:0426-1
Security update for go1.24
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake. | CVSS3: 10 | 0% Низкий | около 2 месяцев назад |
 | CVE-2025-68121 Unexpected session resumption in crypto/tls | 0% Низкий | 22 дня назад | |
| CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has ... | CVSS3: 10 | 0% Низкий | около 2 месяцев назад |
| GHSA-g9q4-qjx4-2v7q archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | BDU:2026-03410 Уязвимость языка программирования Golang, связанная с неограниченным распределением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | RLSA-2026:3842 Moderate: delve security update | 0% Низкий | 20 дней назад | |
| GHSA-h355-32pf-p2xm During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake. | CVSS3: 4.8 | 0% Низкий | около 2 месяцев назад |
| ELSA-2026-3842 ELSA-2026-3842: delve security update (MODERATE) | 22 дня назад | ||
| BDU:2026-03408 Уязвимость языка программирования Golang, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 10 | 0% Низкий | около 2 месяцев назад |
 | ROS-20260209-73-0044 Уязвимость golang | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | openSUSE-SU-2026:20214-1 Security update for go1.25 | около 1 месяца назад | ||
| SUSE-SU-2026:0790-1 Security update for go1.25-openssl | 23 дня назад | ||
| SUSE-SU-2026:0760-1 Security update for go1.25-openssl | 23 дня назад | ||
| SUSE-SU-2026:0427-1 Security update for go1.25 | около 1 месяца назад | ||
| ROS-20260320-73-0013 Уязвимость openbao | CVSS3: 10 | 0% Низкий | 7 дней назад |
| ROS-20260209-73-0037 Уязвимость golang | CVSS3: 4.8 | 0% Низкий | около 2 месяцев назад |
| openSUSE-SU-2026:20220-1 Security update for go1.24 | около 1 месяца назад | ||
| SUSE-SU-2026:0789-1 Security update for go1.24-openssl | 23 дня назад | ||
| SUSE-SU-2026:0687-1 Security update for go1 | 27 дней назад | ||
| SUSE-SU-2026:0426-1 Security update for go1.24 | около 1 месяца назад |
Уязвимостей на страницу