← Back

Golang

golang

224 CVEs • 14 products

Products (14)

Click to collapse
Toggle
Go
go
172 CVEs
Crypto
crypto
21 CVEs
Net
net
12 CVEs
Http2
http2
5 CVEs
Image
image
5 CVEs
Text
text
4 CVEs
Ssh
ssh
3 CVEs
Tiff
tiff
3 CVEs
Networking
networking
2 CVEs
Package Ssh
package_ssh
1 CVE
Protobuf
protobuf
1 CVE
H2c
h2c
1 CVE
Hpack
hpack
1 CVE
Gopls
gopls
1 CVE

CVEs (224)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-3959
3Fedoraproject
GolangOpensuse
3Fedora
GoLeap
May 6, 2026
May 23, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (in...Show more
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.Show less
CVE-2016-3958
1Golang
1Go
May 6, 2026
May 23, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary fu...Show more
Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.Show less
CVE-2015-8618
2Golang
Opensuse
2Go
Leap
May 6, 2026
Jan 27, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vect...Show more
The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.Show less
CVE-2014-7189
1Golang
1Go
May 6, 2026
Oct 7, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors.