Количество 116
Количество 116
GHSA-h355-32pf-p2xm
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
CVE-2025-68121
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
CVE-2025-68121
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
CVE-2025-68121
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
CVE-2025-68121
Unexpected session resumption in crypto/tls
CVE-2025-68121
During session resumption in crypto/tls, if the underlying Config has ...
ROS-20260209-80-0042
Уязвимость golang
RLSA-2026:3842
Moderate: delve security update
ELSA-2026-3842
ELSA-2026-3842: delve security update (MODERATE)
BDU:2026-03408
Уязвимость языка программирования Golang, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
openSUSE-SU-2026:20214-1
Security update for go1.25
SUSE-SU-2026:0790-1
Security update for go1.25-openssl
SUSE-SU-2026:0760-1
Security update for go1.25-openssl
SUSE-SU-2026:0427-1
Security update for go1.25
ROS-20260710-80-0001
Уязвимость mimir
ROS-20260710-73-0001
Уязвимость mimir
ROS-20260327-80-0007
Уязвимость portainer-ce
ROS-20260327-73-0007
Уязвимость portainer-ce
ROS-20260320-73-0013
Уязвимость openbao
ROS-20260209-73-0037
Уязвимость golang
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-h355-32pf-p2xm During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake. | CVSS3: 4.8 | 8 месяцев назад | |
 | CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake. | CVSS3: 10 | 8 месяцев назад | |
 | CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake. | CVSS3: 7.4 | 8 месяцев назад | |
 | CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake. | CVSS3: 10 | 8 месяцев назад | |
 | CVE-2025-68121 Unexpected session resumption in crypto/tls | 7 месяцев назад | ||
| CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has ... | CVSS3: 10 | 8 месяцев назад | |
 | ROS-20260209-80-0042 Уязвимость golang | CVSS3: 4.8 | 8 месяцев назад | |
 | RLSA-2026:3842 Moderate: delve security update | 7 месяцев назад | ||
| ELSA-2026-3842 ELSA-2026-3842: delve security update (MODERATE) | 7 месяцев назад | ||
 | BDU:2026-03408 Уязвимость языка программирования Golang, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 10 | 8 месяцев назад | |
 | openSUSE-SU-2026:20214-1 Security update for go1.25 | 8 месяцев назад | ||
| SUSE-SU-2026:0790-1 Security update for go1.25-openssl | 7 месяцев назад | ||
| SUSE-SU-2026:0760-1 Security update for go1.25-openssl | 7 месяцев назад | ||
| SUSE-SU-2026:0427-1 Security update for go1.25 | 8 месяцев назад | ||
| ROS-20260710-80-0001 Уязвимость mimir | CVSS3: 10 | 3 месяца назад | |
| ROS-20260710-73-0001 Уязвимость mimir | CVSS3: 10 | 3 месяца назад | |
| ROS-20260327-80-0007 Уязвимость portainer-ce | CVSS3: 10 | 6 месяцев назад | |
| ROS-20260327-73-0007 Уязвимость portainer-ce | CVSS3: 10 | 6 месяцев назад | |
| ROS-20260320-73-0013 Уязвимость openbao | CVSS3: 10 | 6 месяцев назад | |
| ROS-20260209-73-0037 Уязвимость golang | CVSS3: 4.8 | 8 месяцев назад |
Уязвимостей на страницу