Количество 106
Количество 106
RLSA-2026:6949
Important: go-toolset:rhel8 security update
RLSA-2026:5942
Important: golang security update
RLSA-2026:5941
Important: golang security update
ELSA-2026-6949
ELSA-2026-6949: go-toolset:ol8 security update (IMPORTANT)
ELSA-2026-5942
ELSA-2026-5942: golang security update (IMPORTANT)
ELSA-2026-5941
ELSA-2026-5941: golang security update (IMPORTANT)
CVE-2025-61731
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location.
CVE-2025-61731
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location.
CVE-2025-61731
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location.
CVE-2025-61731
Building a malicious file with cmd/go can cause can cause a write to a ...
CVE-2026-25679
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVE-2026-25679
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVE-2026-25679
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVE-2026-25679
Incorrect parsing of IPv6 host literals in net/url
CVE-2026-25679
url.Parse insufficiently validated the host/authority component and ac ...
GHSA-xvqr-69v8-f3gv
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location.
BDU:2026-03411
Уязвимость языка программирования Golang, связанная с недостаточным контролем ресурса в период его существования, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260320-73-0010
Уязвимость etcd
ROS-20260209-73-0046
Уязвимость golang
RLSA-2026:9044
Important: osbuild-composer security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2026:6949 Important: go-toolset:rhel8 security update | 3 месяца назад | ||
| RLSA-2026:5942 Important: golang security update | 3 месяца назад | ||
| RLSA-2026:5941 Important: golang security update | 3 месяца назад | ||
| ELSA-2026-6949 ELSA-2026-6949: go-toolset:ol8 security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-5942 ELSA-2026-5942: golang security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-5941 ELSA-2026-5941: golang security update (IMPORTANT) | 3 месяца назад | ||
 | CVE-2025-61731 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location. | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2025-61731 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location. | CVSS3: 8.6 | 0% Низкий | 5 месяцев назад |
 | CVE-2025-61731 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location. | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
| CVE-2025-61731 Building a malicious file with cmd/go can cause can cause a write to a ... | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
| CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url | 1% Низкий | 4 месяца назад | |
| CVE-2026-25679 url.Parse insufficiently validated the host/authority component and ac ... | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| GHSA-xvqr-69v8-f3gv Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location. | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
 | BDU:2026-03411 Уязвимость языка программирования Golang, связанная с недостаточным контролем ресурса в период его существования, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
 | ROS-20260320-73-0010 Уязвимость etcd | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
| ROS-20260209-73-0046 Уязвимость golang | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
| RLSA-2026:9044 Important: osbuild-composer security update | 1% Низкий | около 1 месяца назад |
Уязвимостей на страницу