Поиск уязвимостей
Количество 24
Количество 24
BDU:2025-14529
Уязвимость компонента net/http языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260713-80-0005
Уязвимость mimir
ROS-20260713-73-0005
Уязвимость mimir
CVE-2025-58186
Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.
CVE-2025-58186
Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.
CVE-2025-58186
Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.
CVE-2025-58186
Lack of limit when parsing cookies can cause memory exhaustion in net/http
CVE-2025-58186
Despite HTTP headers having a default limit of 1MB, the number of cook ...
ROS-20251029-07
Множественные уязвимости golang
ALT-PU-2025-13232
ALT-PU-2025-13232: package `golang` update to version 1.24.9-alt1
ALT-PU-2025-12749
ALT-PU-2025-12749: package `golang` update to version 1.24.8-alt1
ALT-PU-2025-14968
ALT-PU-2025-14968: package `golang` update to version 1.25.4-alt1
GHSA-rjcg-56ph-3qvg
Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.
ALT-PU-2026-15350
ALT-PU-2026-15350: package `golang` update to version 1.26.7-alt0.p10.1
SUSE-SU-2025:3682-1
Security update for go1.24
SUSE-SU-2025:03547-1
Security update for go1.25
openSUSE-SU-2025:20158-1
Security update for go1.24
openSUSE-SU-2025:20157-1
Security update for go1.25
openSUSE-SU-2026:20301-1
Security update for go1.25-openssl
SUSE-SU-2026:0308-1
Security update for go1.24-openssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-14529 Уязвимость компонента net/http языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.3 | 1% Низкий | около 1 года назад |
 | ROS-20260713-80-0005 Уязвимость mimir | CVSS3: 5.3 | 1% Низкий | 4 месяца назад |
| ROS-20260713-73-0005 Уязвимость mimir | CVSS3: 5.3 | 1% Низкий | 4 месяца назад |
 | CVE-2025-58186 Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption. | CVSS3: 5.3 | 1% Низкий | около 1 года назад |
 | CVE-2025-58186 Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption. | CVSS3: 5.3 | 1% Низкий | около 1 года назад |
 | CVE-2025-58186 Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption. | CVSS3: 5.3 | 1% Низкий | около 1 года назад |
 | CVE-2025-58186 Lack of limit when parsing cookies can cause memory exhaustion in net/http | CVSS3: 5.3 | 1% Низкий | около 1 месяца назад |
| CVE-2025-58186 Despite HTTP headers having a default limit of 1MB, the number of cook ... | CVSS3: 5.3 | 1% Низкий | около 1 года назад |
| ROS-20251029-07 Множественные уязвимости golang | CVSS3: 8.2 | около 1 года назад | |
| ALT-PU-2025-13232 ALT-PU-2025-13232: package `golang` update to version 1.24.9-alt1 | CVSS3: 7.5 | около 1 года назад | |
| ALT-PU-2025-12749 ALT-PU-2025-12749: package `golang` update to version 1.24.8-alt1 | CVSS3: 7.5 | около 1 года назад | |
| ALT-PU-2025-14968 ALT-PU-2025-14968: package `golang` update to version 1.25.4-alt1 | CVSS3: 7.5 | 12 месяцев назад | |
| GHSA-rjcg-56ph-3qvg Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption. | CVSS3: 5.3 | 1% Низкий | около 1 года назад |
| ALT-PU-2026-15350 ALT-PU-2026-15350: package `golang` update to version 1.26.7-alt0.p10.1 | CVSS3: 10 | около 2 месяцев назад | |
 | SUSE-SU-2025:3682-1 Security update for go1.24 | около 1 года назад | ||
| SUSE-SU-2025:03547-1 Security update for go1.25 | около 1 года назад | ||
| openSUSE-SU-2025:20158-1 Security update for go1.24 | 11 месяцев назад | ||
| openSUSE-SU-2025:20157-1 Security update for go1.25 | 11 месяцев назад | ||
| openSUSE-SU-2026:20301-1 Security update for go1.25-openssl | 8 месяцев назад | ||
| SUSE-SU-2026:0308-1 Security update for go1.24-openssl | 10 месяцев назад |
Уязвимостей на страницу