Browse CVEs

HIGH 7.8 CVE-2026-39822 On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a pat… Go 1.25.12 / 1.26.5+ Fix from $1,9502026-07-08 MEDIUM 5.3 CVE-2026-42505 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in… Go 1.25.12 / 1.26.5+ Fix from $1,6002026-07-08 HIGH 7.5 CVE-2026-46604 The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset. Tiff 0.43.0+ Fix from $1,9502026-06-26 HIGH 7.5 CVE-2023-54365 Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard libr… Go 1.20.10 / 1.21.3+ Fix from $1,9502026-06-23 CRITICAL 9.6 CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--exampl… Net 0.55.0+ Fix from $2,3002026-05-22 MEDIUM 6.1 CVE-2026-27136 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in app… Net 0.55.0+ Fix from $1,6002026-05-22 MEDIUM 6.1 CVE-2026-42502 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in app… Net 0.55.0+ Fix from $1,6002026-05-22 MEDIUM 6.1 CVE-2026-42506 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in app… Net 0.55.0+ Fix from $1,6002026-05-22 MEDIUM 6.5 CVE-2026-25680 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. Net 0.55.0+ Fix from $1,6002026-05-22 MEDIUM 6.1 CVE-2026-25681 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in app… Net 0.55.0+ Fix from $1,6002026-05-22 HIGH 7.5 CVE-2026-46597 An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. Crypto 0.52.0+ Fix from $1,9502026-05-22 MEDIUM 5.3 CVE-2026-46598 For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used. Crypto 0.52.0+ Fix from $1,6002026-05-22 CRITICAL 10.0 CVE-2026-46595 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than pu… Crypto 0.52.0+ Fix from $2,3002026-05-22 CRITICAL 9.1 CVE-2026-42508 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are check… Crypto 0.52.0+ Fix from $2,3002026-05-22 CRITICAL 9.1 CVE-2026-39834 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the w… Crypto 0.52.0+ Fix from $2,3002026-05-22 MEDIUM 5.3 CVE-2026-39835 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client pr… Crypto 0.52.0+ Fix from $1,6002026-05-22 CRITICAL 9.1 CVE-2026-39830 A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked gor… Crypto 0.52.0+ Fix from $2,3002026-05-22 CRITICAL 9.1 CVE-2026-39832 When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request. Destinatio… Crypto 0.52.0+ Fix from $2,3002026-05-22 CRITICAL 9.1 CVE-2026-39831 The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence … Crypto 0.52.0+ Fix from $2,3002026-05-22 CRITICAL 9.1 CVE-2026-39833 The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign … Crypto 0.52.0+ Fix from $2,3002026-05-22 HIGH 7.5 CVE-2026-39829 The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA param… Crypto 0.52.0+ Fix from $1,9502026-05-22 MEDIUM 6.3 CVE-2026-39828 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentia… Crypto 0.52.0+ Fix from $1,6002026-05-22 MEDIUM 6.5 CVE-2026-39827 An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the… Crypto 0.52.0+ Fix from $1,6002026-05-22 HIGH 7.5 CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. Go 1.25.10 / 1.26.3+ Fix from $1,9502026-05-07 HIGH 7.5 CVE-2026-42501 A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerabi… Go 1.25.10 / 1.26.3+ Fix from $1,9502026-05-07 HIGH 7.5 CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations. Go 1.25.10 / 1.26.3+ Fix from $1,9502026-05-07 HIGH 7.5 CVE-2026-39836 The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0). Go 1.25.10 / 1.26.3+ Fix from $1,9502026-05-07 MEDIUM 6.1 CVE-2026-39823 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were t… Go 1.25.10 / 1.26.3+ Fix from $1,6002026-05-07 MEDIUM 6.1 CVE-2026-39826 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the ex… Go 1.25.10 / 1.26.3+ Fix from $1,6002026-05-07 MEDIUM 5.3 CVE-2026-39819 The "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp"). An attacker with access to t… Go 1.25.10 / 1.26.3+ Fix from $1,6002026-05-07