← Back

Go

go

6 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Ssh
ssh
Html
html
Jws
jws
Go
go

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Go
1Html
Jun 17, 2026
Feb 5, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
1Go
1Html
Jun 17, 2026
Feb 5, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
1Go
1Go
Jun 17, 2026
Dec 30, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.
1Go
1Ssh
Jun 17, 2026
Nov 13, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
1Go
1Ssh
Jun 17, 2026
Feb 26, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev...Show more
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.Show less
1Go
1Jws
Jun 17, 2026
Feb 26, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.