| Root.Mkdir(All) can follow junctions out of the root on Windows in osCVE-2026-56857 · GO-2026-6604 |
stdlibOpenShift Developer Tools and Services/helm |
GoRed Hat |
کم
|
اصلاح گزارش شده |
|
| Excessive memory allocation when decoding malicious SFNT in golang.org/x/imageCVE-2026-33812 · GO-2026-4962 |
golang.org/x/imageCryostat 4/cryostat/cryostat-storage-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Go Images vulnerable to an out-of-memory error via a crafted TIFF fileCVE-2026-33809 · GHSA-44P7-9XX4-HF2Gبازه‌ها نیاز به بررسی دارند. |
golang.org/x/imageCryostat 4/cryostat/cryostat-storage-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66بازه‌ها نیاز به بررسی دارند. |
golang.org/x/netstdlib |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Handshake messages may be processed at the incorrect encryption level in crypto/tlsCVE-2025-61730 · GO-2026-4340 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Kratos has a Confused Deputy issueCVE-2026-6993 · GHSA-JJ45-XVQ5-RHH9بازه‌ها نیاز به بررسی دارند. |
github.com/go-kratos/kratos/v2Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح اعلام نشده |
|
| Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policyCVE-2026-53769 · GHSA-PQPW-CVM4-8MV9 |
Red Hat Enterprise Linux 10/golangRed Hat Enterprise Linux 8/go-toolset:rhel8/golang |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Quadratic complexity when parsing some invalid inputs in encoding/pemCVE-2025-61723 · GO-2025-4009 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| CrossOriginProtection insecure bypass patterns not limited to exact matches in net/httpCVE-2025-47910 · GO-2025-3955 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| ALPN negotiation error contains attacker controlled information in crypto/tlsCVE-2025-58189 · GO-2025-4008 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Excessive CPU consumption in ParseAddress in net/mailCVE-2025-61725 · GO-2025-4006 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Infinite parsing loop in golang.org/x/netCVE-2025-58190 · GO-2026-4441 |
golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| URLs in meta content attribute actions are not escaped in html/templateCVE-2026-27142 · GO-2026-4603 |
stdlibOpenShift Service Mesh 2/openshift-golang-builder-container |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Panic in name constraint checking for malformed certificates in crypto/x509CVE-2026-27138 · GO-2026-4600 |
stdlibOpenShift Service Mesh 2/openshift-golang-builder-container |
GoRed Hat |
کم
|
اصلاح گزارش شده |
|
| FileInfo can escape from a Root in osCVE-2026-27139 · GO-2026-4602 |
stdlibOpenShift Service Mesh 2/openshift-golang-builder-container |
GoRed Hat |
کم
|
اصلاح گزارش شده |
|
| Parsing DER payload can cause memory exhaustion in encoding/asn1CVE-2025-58185 · GO-2025-4011 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Unexpected code execution when invoking toolchain in cmd/goCVE-2025-68119 · GO-2026-4338 |
toolchainRed Hat Enterprise Linux 10/golang |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper access to parent directory of root in osCVE-2025-22873 · GO-2026-4403 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Arbitrary code execution during build via line directives in cmd/goCVE-2023-39323 · GO-2023-2095 |
toolchainRed Hat Enterprise Linux 9/golang |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Arbitrary code injection via the go command with cgo on Windows in cmd/goCVE-2021-3115 · GO-2021-0068 |
toolchainOpenShift Serverless/knative-eventing |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
