cf-cli (alpine 3.16.5)¶

Trivy Image Scan

Image: docker.io/governmentpaas/cf-cli (alpine 3.16.5)
Scan date: 2026-06-21

docker.io/governmentpaas/cf-cli (alpine 3.16.5) (alpine)¶

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
busybox	CVE-2023-42366	MEDIUM	1.35.0-r17	1.35.0-r18	https://access.redhat.com/security/cve/CVE-2023-42366 https://bugs.busybox.net/show_bug.cgi?id=15874 https://nvd.nist.gov/vuln/detail/CVE-2023-42366 https://security.netapp.com/advisory/ntap-20241206-0007/ https://www.cve.org/CVERecord?id=CVE-2023-42366
libproc	CVE-2023-4016	LOW	3.3.17-r1	3.3.17-r2	https://access.redhat.com/errata/RHSA-2023:6705 https://access.redhat.com/security/cve/CVE-2023-4016 https://bugzilla.redhat.com/2228494 https://bugzilla.redhat.com/show_bug.cgi?id=2228494 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4016 https://errata.almalinux.org/9/ALSA-2023-6705.html https://errata.rockylinux.org/RLSA-2023:7187 https://gitlab.com/procps-ng/procps https://gitlab.com/procps-ng/procps/-/commit/2c933ecba3bb1d3041a5a7a53a7b4078a6003413 https://gitlab.com/procps-ng/procps/-/issues/297 https://linux.oracle.com/cve/CVE-2023-4016.html https://linux.oracle.com/errata/ELSA-2023-7187.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SUETRRT24OFGPYK6ACPM5VUGHNKH5CQ5/ https://nvd.nist.gov/vuln/detail/CVE-2023-4016 https://ubuntu.com/security/notices/USN-6477-1 https://www.cve.org/CVERecord?id=CVE-2023-4016 https://www.freelists.org/post/procps/ps-buffer-overflow-CVE-20234016
musl-utils	CVE-2025-26519	HIGH	1.2.3-r2	1.2.3-r4	http://www.openwall.com/lists/oss-security/2025/02/13/2 http://www.openwall.com/lists/oss-security/2025/02/13/3 http://www.openwall.com/lists/oss-security/2025/02/13/4 http://www.openwall.com/lists/oss-security/2025/02/13/5 http://www.openwall.com/lists/oss-security/2025/02/14/5 http://www.openwall.com/lists/oss-security/2025/02/14/6 https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659 https://www.openwall.com/lists/oss-security/2025/02/13/2
ncurses-libs	CVE-2023-29491	HIGH	6.3_p20220521-r0	6.3_p20220521-r1	http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 http://www.openwall.com/lists/oss-security/2023/04/19/10 http://www.openwall.com/lists/oss-security/2023/04/19/11 https://access.redhat.com/errata/RHSA-2023:6698 https://access.redhat.com/security/cve/CVE-2023-29491 https://bugzilla.redhat.com/2191704 https://errata.almalinux.org/9/ALSA-2023-6698.html https://invisible-island.net/ncurses/NEWS.html#index-t20230408 https://linux.oracle.com/cve/CVE-2023-29491.html https://linux.oracle.com/errata/ELSA-2023-6698.html https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ https://nvd.nist.gov/vuln/detail/CVE-2023-29491 https://security.netapp.com/advisory/ntap-20230517-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://ubuntu.com/security/notices/USN-6099-1 https://www.cve.org/CVERecord?id=CVE-2023-29491 https://www.openwall.com/lists/oss-security/2023/04/12/5 https://www.openwall.com/lists/oss-security/2023/04/13/4
ncurses-terminfo-base	CVE-2023-29491	HIGH	6.3_p20220521-r0	6.3_p20220521-r1	http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 http://www.openwall.com/lists/oss-security/2023/04/19/10 http://www.openwall.com/lists/oss-security/2023/04/19/11 https://access.redhat.com/errata/RHSA-2023:6698 https://access.redhat.com/security/cve/CVE-2023-29491 https://bugzilla.redhat.com/2191704 https://errata.almalinux.org/9/ALSA-2023-6698.html https://invisible-island.net/ncurses/NEWS.html#index-t20230408 https://linux.oracle.com/cve/CVE-2023-29491.html https://linux.oracle.com/errata/ELSA-2023-6698.html https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ https://nvd.nist.gov/vuln/detail/CVE-2023-29491 https://security.netapp.com/advisory/ntap-20230517-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://ubuntu.com/security/notices/USN-6099-1 https://www.cve.org/CVERecord?id=CVE-2023-29491 https://www.openwall.com/lists/oss-security/2023/04/12/5 https://www.openwall.com/lists/oss-security/2023/04/13/4
procps	CVE-2023-4016	LOW	3.3.17-r1	3.3.17-r2	https://access.redhat.com/errata/RHSA-2023:6705 https://access.redhat.com/security/cve/CVE-2023-4016 https://bugzilla.redhat.com/2228494 https://bugzilla.redhat.com/show_bug.cgi?id=2228494 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4016 https://errata.almalinux.org/9/ALSA-2023-6705.html https://errata.rockylinux.org/RLSA-2023:7187 https://gitlab.com/procps-ng/procps https://gitlab.com/procps-ng/procps/-/commit/2c933ecba3bb1d3041a5a7a53a7b4078a6003413 https://gitlab.com/procps-ng/procps/-/issues/297 https://linux.oracle.com/cve/CVE-2023-4016.html https://linux.oracle.com/errata/ELSA-2023-7187.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SUETRRT24OFGPYK6ACPM5VUGHNKH5CQ5/ https://nvd.nist.gov/vuln/detail/CVE-2023-4016 https://ubuntu.com/security/notices/USN-6477-1 https://www.cve.org/CVERecord?id=CVE-2023-4016 https://www.freelists.org/post/procps/ps-buffer-overflow-CVE-20234016
ssl_client	CVE-2023-42366	MEDIUM	1.35.0-r17	1.35.0-r18	https://access.redhat.com/security/cve/CVE-2023-42366 https://bugs.busybox.net/show_bug.cgi?id=15874 https://nvd.nist.gov/vuln/detail/CVE-2023-42366 https://security.netapp.com/advisory/ntap-20241206-0007/ https://www.cve.org/CVERecord?id=CVE-2023-42366
No Misconfigurations found

Ruby (gemspec)¶

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
cgi	CVE-2025-27219	MEDIUM	0.3.6	~> 0.3.5.1, ~> 0.3.7, >= 0.4.2	https://access.redhat.com/errata/RHSA-2025:4488 https://access.redhat.com/security/cve/CVE-2025-27219 https://bugzilla.redhat.com/2298243 https://bugzilla.redhat.com/2302268 https://bugzilla.redhat.com/2302272 https://bugzilla.redhat.com/2307297 https://bugzilla.redhat.com/2349696 https://bugzilla.redhat.com/2349699 https://bugzilla.redhat.com/2349700 https://bugzilla.redhat.com/show_bug.cgi?id=2344680 https://bugzilla.redhat.com/show_bug.cgi?id=2349699 https://bugzilla.redhat.com/show_bug.cgi?id=2349700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25186 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27221 https://errata.almalinux.org/9/ALSA-2025-4488.html https://errata.rockylinux.org/RLSA-2025:4493 https://github.com/ruby/cgi https://github.com/ruby/cgi/pull/52 https://github.com/ruby/cgi/pull/53 https://github.com/ruby/cgi/pull/54 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2025-27219.yml https://hackerone.com/reports/2936778 https://hackerone.com/reports/3013913 https://linux.oracle.com/cve/CVE-2025-27219.html https://linux.oracle.com/errata/ELSA-2025-8131.html https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html https://nvd.nist.gov/vuln/detail/CVE-2025-27219 https://ubuntu.com/security/notices/USN-7418-1 https://ubuntu.com/security/notices/USN-7442-1 https://www.cve.org/CVERecord?id=CVE-2025-27219 https://www.ruby-lang.org/en/news/2025/02/26/security-advisories https://www.ruby-lang.org/en/news/2025/02/26/security-advisories/ https://www.suse.com/security/cve/CVE-2025-27219.html
cgi	CVE-2025-27220	MEDIUM	0.3.6	~> 0.3.5.1, ~> 0.3.7, >= 0.4.2	https://access.redhat.com/errata/RHSA-2025:4488 https://access.redhat.com/security/cve/CVE-2025-27220 https://bugzilla.redhat.com/2298243 https://bugzilla.redhat.com/2302268 https://bugzilla.redhat.com/2302272 https://bugzilla.redhat.com/2307297 https://bugzilla.redhat.com/2349696 https://bugzilla.redhat.com/2349699 https://bugzilla.redhat.com/2349700 https://bugzilla.redhat.com/show_bug.cgi?id=2298243 https://bugzilla.redhat.com/show_bug.cgi?id=2302268 https://bugzilla.redhat.com/show_bug.cgi?id=2302272 https://bugzilla.redhat.com/show_bug.cgi?id=2307297 https://bugzilla.redhat.com/show_bug.cgi?id=2349696 https://bugzilla.redhat.com/show_bug.cgi?id=2349699 https://bugzilla.redhat.com/show_bug.cgi?id=2349700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39908 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41123 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41946 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43398 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27220 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27221 https://errata.almalinux.org/9/ALSA-2025-4488.html https://errata.rockylinux.org/RLSA-2025:4488 https://github.com/ruby/cgi https://github.com/ruby/cgi/pull/52 https://github.com/ruby/cgi/pull/53 https://github.com/ruby/cgi/pull/54 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2025-27220.yml https://hackerone.com/reports/2890322 https://linux.oracle.com/cve/CVE-2025-27220.html https://linux.oracle.com/errata/ELSA-2025-4488.html https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html https://nvd.nist.gov/vuln/detail/CVE-2025-27220 https://ubuntu.com/security/notices/USN-7418-1 https://ubuntu.com/security/notices/USN-7442-1 https://www.cve.org/CVERecord?id=CVE-2025-27220 https://www.ruby-lang.org/en/news/2025/02/26/security-advisories https://www.ruby-lang.org/en/news/2025/02/26/security-advisories/
erb	CVE-2026-41316	HIGH	2.2.3	~> 4.0.3.1, ~> 4.0.4.1, ~> 6.0.1.1, >= 6.0.4	https://access.redhat.com/errata/RHSA-2026:20596 https://access.redhat.com/security/cve/CVE-2026-41316 https://bugzilla.redhat.com/2449871 https://bugzilla.redhat.com/2461369 https://bugzilla.redhat.com/show_bug.cgi?id=2449871 https://bugzilla.redhat.com/show_bug.cgi?id=2461369 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33210 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41316 https://errata.almalinux.org/9/ALSA-2026-20596.html https://errata.rockylinux.org/RLSA-2026:20596 https://github.com/advisories/GHSA-q339-8rmv-2mhv https://github.com/ruby/erb https://github.com/ruby/erb/blob/master/NEWS.md https://github.com/ruby/erb/commit/9d017be4e375cdd058650ce528ee6adfead20cac https://github.com/ruby/erb/security/advisories/GHSA-q339-8rmv-2mhv https://github.com/rubysec/ruby-advisory-db/blob/master/gems/erb/CVE-2026-41316.yml https://linux.oracle.com/cve/CVE-2026-41316.html https://linux.oracle.com/errata/ELSA-2026-20614.html https://nvd.nist.gov/vuln/detail/CVE-2026-41316 https://www.cve.org/CVERecord?id=CVE-2026-41316 https://www.ruby-lang.org/en/news/2026/04/21/erb-cve-2026-41316 https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released
net-imap	CVE-2026-42257	CRITICAL	0.2.3	~> 0.4.24, ~> 0.5.14, >= 0.6.4	https://access.redhat.com/security/cve/CVE-2026-42257 https://github.com/advisories/GHSA-hm49-wcqc-g2xg https://github.com/ruby/net-imap https://github.com/ruby/net-imap/commit/0ec4fd351263e8b9a4f683713427827b7b1ad974 https://github.com/ruby/net-imap/commit/47c72186d272441878ca73c9499f66013829ca2f https://github.com/ruby/net-imap/commit/6bf02aef7e0b5931010c36e377f79a71636b306b https://github.com/ruby/net-imap/commit/a4f7649c3da77dec7631f03a037a478eb4330048 https://github.com/ruby/net-imap/commit/aec06996eb87a7e1bbcef1f9f8926e8add2b8c71 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-hm49-wcqc-g2xg https://github.com/rubysec/ruby-advisory-db/blob/master/gems/net-imap/CVE-2026-42257.yml https://nvd.nist.gov/vuln/detail/CVE-2026-42257 https://ubuntu.com/security/notices/USN-8431-1 https://www.cve.org/CVERecord?id=CVE-2026-42257
net-imap	CVE-2026-42258	CRITICAL	0.2.3	~> 0.4.24, ~> 0.5.14, >= 0.6.4	https://access.redhat.com/security/cve/CVE-2026-42258 https://github.com/advisories/GHSA-75xq-5h9v-w6px https://github.com/ruby/net-imap https://github.com/ruby/net-imap/commit/6bf02aef7e0b5931010c36e377f79a71636b306b https://github.com/ruby/net-imap/commit/9db3e9d60bfb8f3735ea95015bf8a700f4af9cbb https://github.com/ruby/net-imap/commit/aec06996eb87a7e1bbcef1f9f8926e8add2b8c71 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px https://github.com/rubysec/ruby-advisory-db/blob/master/gems/net-imap/CVE-2026-42258.yml https://nvd.nist.gov/vuln/detail/CVE-2026-42258 https://www.cve.org/CVERecord?id=CVE-2026-42258
net-imap	CVE-2026-42245	HIGH	0.2.3	~> 0.4.24, ~> 0.5.14, >= 0.6.4	https://access.redhat.com/security/cve/CVE-2026-42245 https://github.com/advisories/GHSA-q2mw-fvj9-vvcw https://github.com/ruby/net-imap https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96 https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw https://github.com/rubysec/ruby-advisory-db/blob/master/gems/net-imap/CVE-2026-42245.yml https://nvd.nist.gov/vuln/detail/CVE-2026-42245 https://www.cve.org/CVERecord?id=CVE-2026-42245
net-imap	CVE-2026-42246	HIGH	0.2.3	~> 0.3.10, ~> 0.4.24, ~> 0.5.14, >= 0.6.4	https://github.com/advisories/GHSA-vcgp-9326-pqcp https://github.com/ruby/net-imap https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da https://github.com/ruby/net-imap/releases/tag/v0.3.10 https://github.com/ruby/net-imap/releases/tag/v0.4.24 https://github.com/ruby/net-imap/releases/tag/v0.5.14 https://github.com/ruby/net-imap/releases/tag/v0.6.4 https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp https://github.com/rubysec/ruby-advisory-db/blob/master/gems/net-imap/CVE-2026-42246.yml https://nostarttls.secvuln.info https://nvd.nist.gov/vuln/detail/CVE-2026-42246 https://ubuntu.com/security/notices/USN-8431-1 https://www.cve.org/CVERecord?id=CVE-2026-42246 https://www.rfc-editor.org/info/rfc8314
net-imap	CVE-2025-43857	MEDIUM	0.2.3	~> 0.2.5, ~> 0.3.9, ~> 0.4.20, >= 0.5.7	https://access.redhat.com/security/cve/CVE-2025-43857 https://github.com/advisories/GHSA-j3g3-5qv5-52mj https://github.com/ruby/net-imap https://github.com/ruby/net-imap/pull/442 https://github.com/ruby/net-imap/pull/444 https://github.com/ruby/net-imap/pull/444/commits/0ae8576c1a90bcd9573f81bdad4b4b824642d105#diff-53721cb4d9c3fb86b95cc8476ca2df90968ad8c481645220c607034399151462 https://github.com/ruby/net-imap/pull/445 https://github.com/ruby/net-imap/pull/446 https://github.com/ruby/net-imap/pull/447 https://github.com/ruby/net-imap/security/advisories/GHSA-j3g3-5qv5-52mj https://github.com/rubysec/ruby-advisory-db/blob/master/gems/net-imap/CVE-2025-43857.yml https://hackerone.com/reports/3108869 https://nvd.nist.gov/vuln/detail/CVE-2025-43857 https://www.cve.org/CVERecord?id=CVE-2025-43857 https://www.ruby-lang.org/en/news/2025/04/28/dos-net-imap-cve-2025-43857
net-imap	CVE-2026-47240	MEDIUM	0.2.3	~> 0.5.15, >= 0.6.4.1	https://github.com/advisories/GHSA-8p34-64r3-mwg8 https://github.com/ruby/net-imap https://github.com/ruby/net-imap/releases/tag/v0.6.4.1 https://github.com/ruby/net-imap/security/advisories/GHSA-8p34-64r3-mwg8 https://rubygems.org/gems/net-imap/versions/0.6.4.1 https://www.cve.org/CVERecord?id=CVE-2026-47240
net-imap	CVE-2026-47242	MEDIUM	0.2.3	~> 0.5.15, >= 0.6.4.1	https://github.com/advisories/GHSA-46q3-7gv7-qmgg https://github.com/ruby/net-imap https://github.com/ruby/net-imap/releases/tag/v0.6.4.1 https://github.com/ruby/net-imap/security/advisories/GHSA-46q3-7gv7-qmgg https://rubygems.org/gems/net-imap/versions/0.6.4.1 https://www.cve.org/CVERecord?id=CVE-2026-47242
net-imap	CVE-2026-47241	LOW	0.2.3	~> 0.5.15, >= 0.6.4.1	https://github.com/advisories/GHSA-c4fp-cxrr-mj66 https://github.com/ruby/net-imap https://github.com/ruby/net-imap/releases/tag/v0.6.4.1 https://github.com/ruby/net-imap/security/advisories/GHSA-c4fp-cxrr-mj66 https://rubygems.org/gems/net-imap/versions/0.6.4.1 https://www.cve.org/CVERecord?id=CVE-2026-47241
rdoc	CVE-2024-27281	MEDIUM	6.4.0	~> 6.3.4, >= 6.3.4.1, ~> 6.4.1, >= 6.4.1.1, >= 6.5.1.1	https://access.redhat.com/errata/RHSA-2024:3838 https://access.redhat.com/security/cve/CVE-2024-27281 https://bugzilla.redhat.com/2149706 https://bugzilla.redhat.com/2184059 https://bugzilla.redhat.com/2184061 https://bugzilla.redhat.com/2270749 https://bugzilla.redhat.com/2270750 https://bugzilla.redhat.com/2276810 https://bugzilla.redhat.com/show_bug.cgi?id=2270749 https://bugzilla.redhat.com/show_bug.cgi?id=2270750 https://bugzilla.redhat.com/show_bug.cgi?id=2276810 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27282 https://errata.almalinux.org/9/ALSA-2024-3838.html https://errata.rockylinux.org/RLSA-2024:3671 https://github.com/ruby/rdoc https://github.com/ruby/rdoc/commit/1254b0066f312ddbf7fae7a195e66ce5b3bc6656 https://github.com/ruby/rdoc/commit/32ff6ba0bebd8ea26f569da5fd23be2937f6a644 https://github.com/ruby/rdoc/commit/48617985e9fbc2825219d55f04e3e0e98d2923be https://github.com/ruby/rdoc/commit/811f125a4a0cc968e3eb18e16ea6c1a3b49a11bf https://github.com/ruby/rdoc/commit/a5de13bf0f0c26f8e764e82b5bf4bf8bffc7198e https://github.com/ruby/rdoc/commit/d22ba930f1f611dda531dba04cd3d2531bb3f8a5 https://github.com/ruby/rdoc/commit/da7a0c7553ef7250ca665a3fecdc01dbaacbb43d https://github.com/ruby/rdoc/commit/e4a0e71e6f1032f8b4e5e58b4ef60d702c22ce17 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2024-27281.yml https://hackerone.com/reports/1187477 https://linux.oracle.com/cve/CVE-2024-27281.html https://linux.oracle.com/errata/ELSA-2024-4499.html https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XYDHPHEZI7OQXTQKTDZHGZNPIJH7ZV5N https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XYDHPHEZI7OQXTQKTDZHGZNPIJH7ZV5N/ https://nvd.nist.gov/vuln/detail/CVE-2024-27281 https://ubuntu.com/security/notices/USN-6838-1 https://ubuntu.com/security/notices/USN-6838-2 https://www.cve.org/CVERecord?id=CVE-2024-27281 https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281 https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/
resolv	CVE-2025-24294	HIGH	0.2.1	~> 0.2.2, ~> 0.3.0, >= 0.6.1	https://access.redhat.com/errata/RHSA-2025:23063 https://access.redhat.com/security/cve/CVE-2025-24294 https://bugzilla.redhat.com/2379684 https://bugzilla.redhat.com/2396186 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://bugzilla.redhat.com/show_bug.cgi?id=2426336 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24294 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61594 https://errata.almalinux.org/9/ALSA-2025-23063.html https://errata.rockylinux.org/RLSA-2025:23063 https://github.com/advisories/GHSA-xh69-987w-hrp8 https://github.com/ruby/resolv https://github.com/ruby/resolv/commit/4c2f71b5e80826506f78417d85b38481c058fb25 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/resolv/CVE-2025-24294.yml https://linux.oracle.com/cve/CVE-2025-24294.html https://linux.oracle.com/errata/ELSA-2025-23141.html https://nvd.nist.gov/vuln/detail/CVE-2025-24294 https://rubygems.org/gems/resolv https://ubuntu.com/security/notices/USN-7734-1 https://ubuntu.com/security/notices/USN-7735-1 https://www.cve.org/CVERecord?id=CVE-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294 https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/ https://www.vuxml.org/freebsd/eed1a411-699b-11f0-91fe-000c295725e4.html
rexml	CVE-2024-49761	HIGH	3.2.5	>= 3.3.9	https://access.redhat.com/errata/RHSA-2024:10860 https://access.redhat.com/security/cve/CVE-2024-49761 https://bugzilla.redhat.com/2322153 https://bugzilla.redhat.com/show_bug.cgi?id=2322153 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49761 https://errata.almalinux.org/9/ALSA-2024-10860.html https://errata.rockylinux.org/RLSA-2024:10860 https://github.com/advisories/GHSA-2rxp-v6pw-ch6m https://github.com/ruby/rexml https://github.com/ruby/rexml/commit/ce59f2eb1aeb371fe1643414f06618dbe031979f https://github.com/ruby/rexml/commit/ce59f2eb1aeb371fe1643414f06618dbe031979f (v3.3.9) https://github.com/ruby/rexml/releases/tag/v3.3.9 https://github.com/ruby/rexml/security/advisories/GHSA-2rxp-v6pw-ch6m https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rexml/CVE-2024-49761.yml https://hackerone.com/reports/2807139 https://linux.oracle.com/cve/CVE-2024-49761.html https://linux.oracle.com/errata/ELSA-2025-11047.html https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2024-49761 https://security.netapp.com/advisory/ntap-20241227-0004 https://security.netapp.com/advisory/ntap-20241227-0004/ https://ubuntu.com/security/notices/USN-7091-1 https://ubuntu.com/security/notices/USN-7091-2 https://ubuntu.com/security/notices/USN-7442-1 https://www.cve.org/CVERecord?id=CVE-2024-49761 https://www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761 https://www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761/
rexml	CVE-2024-35176	MEDIUM	3.2.5	>= 3.2.7	https://access.redhat.com/errata/RHSA-2024:5338 https://access.redhat.com/security/cve/CVE-2024-35176 https://bugzilla.redhat.com/2280894 https://bugzilla.redhat.com/show_bug.cgi?id=2218614 https://bugzilla.redhat.com/show_bug.cgi?id=2270749 https://bugzilla.redhat.com/show_bug.cgi?id=2270750 https://bugzilla.redhat.com/show_bug.cgi?id=2276810 https://bugzilla.redhat.com/show_bug.cgi?id=2280894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36617 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27282 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35176 https://errata.almalinux.org/8/ALSA-2024-5338.html https://errata.rockylinux.org/RLSA-2024:4499 https://github.com/advisories/GHSA-vg3r-rm7w-2xgh https://github.com/ruby/rexml https://github.com/ruby/rexml/commit/4325835f92f3f142ebd91a3fdba4e1f1ab7f1cfb https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh https://linux.oracle.com/cve/CVE-2024-35176.html https://linux.oracle.com/errata/ELSA-2024-5338.html https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2024-35176 https://security.netapp.com/advisory/ntap-20250306-0001 https://security.netapp.com/advisory/ntap-20250306-0001/ https://ubuntu.com/security/notices/USN-7091-1 https://ubuntu.com/security/notices/USN-7091-2 https://ubuntu.com/security/notices/USN-7418-1 https://ubuntu.com/security/notices/USN-7734-1 https://ubuntu.com/security/notices/USN-7840-1 https://www.cve.org/CVERecord?id=CVE-2024-35176 https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176
rexml	CVE-2024-39908	MEDIUM	3.2.5	>= 3.3.2	https://access.redhat.com/errata/RHSA-2025:4488 https://access.redhat.com/security/cve/CVE-2024-39908 https://bugzilla.redhat.com/2298243 https://bugzilla.redhat.com/2302268 https://bugzilla.redhat.com/2302272 https://bugzilla.redhat.com/2307297 https://bugzilla.redhat.com/2349696 https://bugzilla.redhat.com/2349699 https://bugzilla.redhat.com/2349700 https://bugzilla.redhat.com/show_bug.cgi?id=2298243 https://bugzilla.redhat.com/show_bug.cgi?id=2302268 https://bugzilla.redhat.com/show_bug.cgi?id=2302272 https://bugzilla.redhat.com/show_bug.cgi?id=2307297 https://bugzilla.redhat.com/show_bug.cgi?id=2349696 https://bugzilla.redhat.com/show_bug.cgi?id=2349699 https://bugzilla.redhat.com/show_bug.cgi?id=2349700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39908 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41123 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41946 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43398 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27220 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27221 https://errata.almalinux.org/9/ALSA-2025-4488.html https://errata.rockylinux.org/RLSA-2025:4488 https://github.com/ruby/rexml https://github.com/ruby/rexml/releases/tag/v3.3.2 https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rexml/CVE-2024-39908.yml https://linux.oracle.com/cve/CVE-2024-39908.html https://linux.oracle.com/errata/ELSA-2025-4488.html https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2024-39908 https://security.netapp.com/advisory/ntap-20250117-0008 https://security.netapp.com/advisory/ntap-20250117-0008/ https://ubuntu.com/security/notices/USN-7091-1 https://ubuntu.com/security/notices/USN-7256-1 https://ubuntu.com/security/notices/USN-7418-1 https://ubuntu.com/security/notices/USN-7840-1 https://www.cve.org/CVERecord?id=CVE-2024-39908 https://www.ruby-lang.org/en/news/2024/07/16/dos-rexml-cve-2024-39908
rexml	CVE-2024-41123	MEDIUM	3.2.5	>= 3.3.3	https://access.redhat.com/errata/RHSA-2025:4488 https://access.redhat.com/security/cve/CVE-2024-41123 https://bugzilla.redhat.com/2298243 https://bugzilla.redhat.com/2302268 https://bugzilla.redhat.com/2302272 https://bugzilla.redhat.com/2307297 https://bugzilla.redhat.com/2349696 https://bugzilla.redhat.com/2349699 https://bugzilla.redhat.com/2349700 https://bugzilla.redhat.com/show_bug.cgi?id=2298243 https://bugzilla.redhat.com/show_bug.cgi?id=2302268 https://bugzilla.redhat.com/show_bug.cgi?id=2302272 https://bugzilla.redhat.com/show_bug.cgi?id=2307297 https://bugzilla.redhat.com/show_bug.cgi?id=2349696 https://bugzilla.redhat.com/show_bug.cgi?id=2349699 https://bugzilla.redhat.com/show_bug.cgi?id=2349700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39908 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41123 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41946 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43398 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27220 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27221 https://errata.almalinux.org/9/ALSA-2025-4488.html https://errata.rockylinux.org/RLSA-2025:4488 https://github.com/ruby/rexml https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8 https://github.com/ruby/rexml/security/advisories/GHSA-r55c-59qm-vjw6 https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rexml/CVE-2024-41123.yml https://linux.oracle.com/cve/CVE-2024-41123.html https://linux.oracle.com/errata/ELSA-2025-4488.html https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2024-41123 https://security.netapp.com/advisory/ntap-20241227-0005 https://security.netapp.com/advisory/ntap-20241227-0005/ https://ubuntu.com/security/notices/USN-7091-1 https://ubuntu.com/security/notices/USN-7091-2 https://ubuntu.com/security/notices/USN-7418-1 https://ubuntu.com/security/notices/USN-7840-1 https://www.cve.org/CVERecord?id=CVE-2024-41123 https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123
rexml	CVE-2024-41946	MEDIUM	3.2.5	>= 3.3.3	https://access.redhat.com/errata/RHSA-2025:4488 https://access.redhat.com/security/cve/CVE-2024-41946 https://bugzilla.redhat.com/2298243 https://bugzilla.redhat.com/2302268 https://bugzilla.redhat.com/2302272 https://bugzilla.redhat.com/2307297 https://bugzilla.redhat.com/2349696 https://bugzilla.redhat.com/2349699 https://bugzilla.redhat.com/2349700 https://bugzilla.redhat.com/show_bug.cgi?id=2298243 https://bugzilla.redhat.com/show_bug.cgi?id=2302268 https://bugzilla.redhat.com/show_bug.cgi?id=2302272 https://bugzilla.redhat.com/show_bug.cgi?id=2307297 https://bugzilla.redhat.com/show_bug.cgi?id=2349696 https://bugzilla.redhat.com/show_bug.cgi?id=2349699 https://bugzilla.redhat.com/show_bug.cgi?id=2349700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39908 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41123 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41946 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43398 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27220 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27221 https://errata.almalinux.org/9/ALSA-2025-4488.html https://errata.rockylinux.org/RLSA-2025:4488 https://github.com/ruby/rexml https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368 https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rexml/CVE-2024-41946.yml https://linux.oracle.com/cve/CVE-2024-41946.html https://linux.oracle.com/errata/ELSA-2025-4488.html https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2024-41946 https://security.netapp.com/advisory/ntap-20250117-0007 https://security.netapp.com/advisory/ntap-20250117-0007/ https://ubuntu.com/security/notices/USN-7091-1 https://ubuntu.com/security/notices/USN-7091-2 https://ubuntu.com/security/notices/USN-7840-1 https://www.cve.org/CVERecord?id=CVE-2024-41946 https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946
rexml	CVE-2024-43398	MEDIUM	3.2.5	>= 3.3.6	https://access.redhat.com/errata/RHSA-2025:4488 https://access.redhat.com/security/cve/CVE-2024-43398 https://bugzilla.redhat.com/2298243 https://bugzilla.redhat.com/2302268 https://bugzilla.redhat.com/2302272 https://bugzilla.redhat.com/2307297 https://bugzilla.redhat.com/2349696 https://bugzilla.redhat.com/2349699 https://bugzilla.redhat.com/2349700 https://bugzilla.redhat.com/show_bug.cgi?id=2298243 https://bugzilla.redhat.com/show_bug.cgi?id=2302268 https://bugzilla.redhat.com/show_bug.cgi?id=2302272 https://bugzilla.redhat.com/show_bug.cgi?id=2307297 https://bugzilla.redhat.com/show_bug.cgi?id=2349696 https://bugzilla.redhat.com/show_bug.cgi?id=2349699 https://bugzilla.redhat.com/show_bug.cgi?id=2349700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39908 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41123 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41946 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43398 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27220 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27221 https://errata.almalinux.org/9/ALSA-2025-4488.html https://errata.rockylinux.org/RLSA-2025:4488 https://github.com/advisories/GHSA-vmwr-mc7x-5vc3 https://github.com/ruby/rexml https://github.com/ruby/rexml/commit/7cb5eaeb221c322b9912f724183294d8ce96bae3 https://github.com/ruby/rexml/releases/tag/v3.3.6 https://github.com/ruby/rexml/security/advisories/GHSA-vmwr-mc7x-5vc3 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rexml/CVE-2024-43398.yml https://hackerone.com/reports/2666849 https://hackerone.com/reports/3002543 https://linux.oracle.com/cve/CVE-2024-43398.html https://linux.oracle.com/errata/ELSA-2025-4488.html https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2024-43398 https://security.netapp.com/advisory/ntap-20250103-0006 https://security.netapp.com/advisory/ntap-20250103-0006/ https://ubuntu.com/security/notices/USN-7256-1 https://ubuntu.com/security/notices/USN-7418-1 https://www.cve.org/CVERecord?id=CVE-2024-43398 https://www.ruby-lang.org/en/news/2024/08/22/dos-rexml-cve-2024-43398
stringio	CVE-2024-27280	CRITICAL	3.0.1	>= 3.0.1.1	http://seclists.org/fulldisclosure/2025/Sep/53 http://seclists.org/fulldisclosure/2025/Sep/54 http://seclists.org/fulldisclosure/2025/Sep/55 https://access.redhat.com/errata/RHSA-2024:3838 https://access.redhat.com/security/cve/CVE-2024-27280 https://bugzilla.redhat.com/2149706 https://bugzilla.redhat.com/2184059 https://bugzilla.redhat.com/2184061 https://bugzilla.redhat.com/2270749 https://bugzilla.redhat.com/2270750 https://bugzilla.redhat.com/2276810 https://bugzilla.redhat.com/show_bug.cgi?id=2270749 https://bugzilla.redhat.com/show_bug.cgi?id=2270750 https://bugzilla.redhat.com/show_bug.cgi?id=2276810 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27282 https://errata.almalinux.org/9/ALSA-2024-3838.html https://errata.rockylinux.org/RLSA-2024:3671 https://github.com/ruby/stringio https://github.com/ruby/stringio/commit/0e596524097706263d10900ca180898e4a8f5233 https://github.com/ruby/stringio/commit/c58c5f54f1eab99665ea6a161d29ff6a7490afc8 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/stringio/CVE-2024-27280.yml https://hackerone.com/reports/1399856 https://linux.oracle.com/cve/CVE-2024-27280.html https://linux.oracle.com/errata/ELSA-2024-4499.html https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XYDHPHEZI7OQXTQKTDZHGZNPIJH7ZV5N https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XYDHPHEZI7OQXTQKTDZHGZNPIJH7ZV5N/ https://nvd.nist.gov/vuln/detail/CVE-2024-27280 https://security.netapp.com/advisory/ntap-20250502-0003 https://security.netapp.com/advisory/ntap-20250502-0003/ https://ubuntu.com/security/notices/USN-6853-1 https://ubuntu.com/security/notices/USN-7734-1 https://www.cve.org/CVERecord?id=CVE-2024-27280 https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280 https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/
uri	CVE-2025-61594	HIGH	0.12.1	~> 0.12.5, ~> 0.13.3, >= 1.0.4	https://access.redhat.com/errata/RHSA-2025:23063 https://access.redhat.com/security/cve/CVE-2025-61594 https://bugzilla.redhat.com/2379684 https://bugzilla.redhat.com/2396186 https://bugzilla.redhat.com/show_bug.cgi?id=2379684 https://bugzilla.redhat.com/show_bug.cgi?id=2396186 https://bugzilla.redhat.com/show_bug.cgi?id=2426336 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24294 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61594 https://errata.almalinux.org/9/ALSA-2025-23063.html https://errata.rockylinux.org/RLSA-2025:23063 https://github.com/advisories/GHSA-22h5-pq3x-2gf2 https://github.com/advisories/GHSA-j4pr-3wm6-xx2r https://github.com/ruby/uri https://github.com/ruby/uri/commit/20157e3e29b125ff41f1d9662e2e3b1d066f5902 https://github.com/ruby/uri/commit/7e521b2da0833d964aab43019e735aea674e1c2c https://github.com/ruby/uri/commit/d3116ca66a3b1c97dc7577f9d2d6e353f391cd6a https://github.com/ruby/uri/security/advisories/GHSA-j4pr-3wm6-xx2r https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-61594.yml https://hackerone.com/reports/2957667 https://linux.oracle.com/cve/CVE-2025-61594.html https://linux.oracle.com/errata/ELSA-2025-23141.html https://nvd.nist.gov/vuln/detail/CVE-2025-61594 https://rubygems.org/gems/uri/versions/0.12.5 https://rubygems.org/gems/uri/versions/0.13.3 https://rubygems.org/gems/uri/versions/1.0.4 https://ubuntu.com/security/notices/USN-8137-1 https://www.cve.org/CVERecord?id=CVE-2025-61594 https://www.ruby-lang.org/en/news/2025/02/26/security-advisories https://www.ruby-lang.org/en/news/2025/10/07/uri-cve-2025-61594 https://www.ruby-lang.org/en/news/2025/10/07/uri-cve-2025-61594/
uri	CVE-2023-36617	MEDIUM	0.12.1	~> 0.10.0.3, ~> 0.10.3, ~> 0.11.2, >= 0.12.2	https://access.redhat.com/errata/RHSA-2024:1576 https://access.redhat.com/security/cve/CVE-2023-36617 https://bugzilla.redhat.com/2149706 https://bugzilla.redhat.com/2184059 https://bugzilla.redhat.com/2184061 https://bugzilla.redhat.com/2218614 https://bugzilla.redhat.com/show_bug.cgi?id=2149706 https://bugzilla.redhat.com/show_bug.cgi?id=2184059 https://bugzilla.redhat.com/show_bug.cgi?id=2184061 https://bugzilla.redhat.com/show_bug.cgi?id=2218614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33621 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28755 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28756 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36617 https://errata.almalinux.org/9/ALSA-2024-1576.html https://errata.rockylinux.org/RLSA-2024:1576 https://github.com/advisories/GHSA-hww2-5g85-429m https://github.com/ruby/ruby/pull/7995/commits/e6503b9b8b25dc5d6507ff68062127038b082a23 https://github.com/ruby/ruby/pull/7995/files https://github.com/ruby/uri https://github.com/ruby/uri/commit/05b1e7d026b886e65a60ee35625229da9ec220bb https://github.com/ruby/uri/commit/38bf797c488bcb4a37fb322bfa84977981863ec6 https://github.com/ruby/uri/commit/3cd938df20db26c9439e9f681aadfb9bbeb6d1c0 https://github.com/ruby/uri/commit/4d02315181d8a485496f1bb107a6ab51d6f3a35f https://github.com/ruby/uri/commit/70794abc162bb15bb934713b5669713d6700d35c https://github.com/ruby/uri/commit/7e33934c91b7f8f3ea7b7a4258b468e19f636bc3 https://github.com/ruby/uri/commit/9a8e0cc03da964054c2a4ea26b59c53c3bae4921 https://github.com/ruby/uri/commit/ba36c8a3ecad8c16dd3e60a6da9abd768206c8fa https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2023-36617.yml https://linux.oracle.com/cve/CVE-2023-36617.html https://linux.oracle.com/errata/ELSA-2024-4499.html https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QA6XUKUY7B5OLNQBLHOT43UW7C5NIOQQ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QA6XUKUY7B5OLNQBLHOT43UW7C5NIOQQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/ https://nvd.nist.gov/vuln/detail/CVE-2023-36617 https://rubygems.org/gems/uri/versions/0.10.0.3 https://rubygems.org/gems/uri/versions/0.10.3 https://rubygems.org/gems/uri/versions/0.11.2 https://rubygems.org/gems/uri/versions/0.12.2 https://security.netapp.com/advisory/ntap-20230725-0002 https://security.netapp.com/advisory/ntap-20230725-0002/ https://ubuntu.com/security/notices/USN-6219-1 https://ubuntu.com/security/notices/USN-7747-1 https://www.cve.org/CVERecord?id=CVE-2023-36617 https://www.ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617 https://www.ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617/
uri	CVE-2025-27221	MEDIUM	0.12.1	~> 0.11.3, ~> 0.12.4, ~> 0.13.2, >= 1.0.3	https://access.redhat.com/errata/RHSA-2025:4488 https://access.redhat.com/security/cve/CVE-2025-27221 https://bugzilla.redhat.com/2298243 https://bugzilla.redhat.com/2302268 https://bugzilla.redhat.com/2302272 https://bugzilla.redhat.com/2307297 https://bugzilla.redhat.com/2349696 https://bugzilla.redhat.com/2349699 https://bugzilla.redhat.com/2349700 https://bugzilla.redhat.com/show_bug.cgi?id=2344680 https://bugzilla.redhat.com/show_bug.cgi?id=2349699 https://bugzilla.redhat.com/show_bug.cgi?id=2349700 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25186 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27221 https://errata.almalinux.org/9/ALSA-2025-4488.html https://errata.rockylinux.org/RLSA-2025:4493 https://github.com/advisories/GHSA-22h5-pq3x-2gf2 https://github.com/ruby/uri https://github.com/ruby/uri/pull/154 https://github.com/ruby/uri/pull/155 https://github.com/ruby/uri/pull/156 https://github.com/ruby/uri/pull/157 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-27221.yml https://hackerone.com/reports/2957667 https://linux.oracle.com/cve/CVE-2025-27221.html https://linux.oracle.com/errata/ELSA-2025-8131.html https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html https://lists.debian.org/debian-lts-announce/2025/05/msg00015.html https://nvd.nist.gov/vuln/detail/CVE-2025-27221 https://ubuntu.com/security/notices/USN-7418-1 https://ubuntu.com/security/notices/USN-7442-1 https://www.cve.org/CVERecord?id=CVE-2025-27221 https://www.ruby-lang.org/en/news/2025/02/26/security-advisories
zlib	CVE-2026-27820	CRITICAL	2.1.1	~> 3.0.1, ~> 3.1.2, >= 3.2.3	https://access.redhat.com/security/cve/CVE-2026-27820 https://github.com/ruby/zlib https://github.com/ruby/zlib/security/advisories/GHSA-g857-hhfv-j68w https://github.com/rubysec/ruby-advisory-db/blob/master/gems/zlib/CVE-2026-27820.yml https://hackerone.com/reports/3467067 https://nvd.nist.gov/vuln/detail/CVE-2026-27820 https://rubygems.org/gems/zlib/versions/3.0.1 https://rubygems.org/gems/zlib/versions/3.1.2 https://rubygems.org/gems/zlib/versions/3.2.3 https://www.cve.org/CVERecord?id=CVE-2026-27820 https://www.ruby-lang.org/en/news/2026/03/05/buffer-overflow-zlib-cve-2026-27820
No Misconfigurations found

root/.cf/plugins/AutoScaler (gobinary)¶

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
golang.org/x/crypto	CVE-2025-47914	MEDIUM	v0.36.0	0.45.0	https://access.redhat.com/security/cve/CVE-2025-47914 https://go.dev/cl/721960 https://go.dev/issue/76364 https://go.googlesource.com/crypto https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA https://nvd.nist.gov/vuln/detail/CVE-2025-47914 https://pkg.go.dev/vuln/GO-2025-4135 https://www.cve.org/CVERecord?id=CVE-2025-47914
golang.org/x/crypto	CVE-2025-58181	MEDIUM	v0.36.0	0.45.0	https://access.redhat.com/security/cve/CVE-2025-58181 https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c https://github.com/golang/go/issues/76363 https://go.dev/cl/721961 https://go.dev/issue/76363 https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA?pli=1 https://nvd.nist.gov/vuln/detail/CVE-2025-58181 https://pkg.go.dev/vuln/GO-2025-4134 https://ubuntu.com/security/notices/USN-7956-1 https://www.cve.org/CVERecord?id=CVE-2025-58181
stdlib	CVE-2025-68121	CRITICAL	v1.24.1	1.24.13, 1.25.7, 1.26.0-rc.3	https://access.redhat.com/errata/RHSA-2026:4177 https://access.redhat.com/security/cve/CVE-2025-68121 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-4177.html https://errata.rockylinux.org/RLSA-2026:4177 https://github.com/golang/go/issues/77113 https://go.dev/cl/737700 https://go.dev/issue/77217 https://groups.google.com/g/golang-announce/c/K09ubi9FQFk https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://linux.oracle.com/cve/CVE-2025-68121.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-68121 https://pkg.go.dev/vuln/GO-2026-4337 https://www.cve.org/CVERecord?id=CVE-2025-68121
stdlib	CVE-2025-22874	HIGH	v1.24.1	1.24.4	https://access.redhat.com/security/cve/CVE-2025-22874 https://go.dev/cl/670375 https://go.dev/issue/73612 https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A https://nvd.nist.gov/vuln/detail/CVE-2025-22874 https://pkg.go.dev/vuln/GO-2025-3749 https://www.cve.org/CVERecord?id=CVE-2025-22874
stdlib	CVE-2025-61726	HIGH	v1.24.1	1.24.12, 1.25.6	https://access.redhat.com/errata/RHSA-2026:4177 https://access.redhat.com/security/cve/CVE-2025-61726 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-4177.html https://errata.rockylinux.org/RLSA-2026:4177 https://go.dev/cl/736712 https://go.dev/issue/77101 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://linux.oracle.com/cve/CVE-2025-61726.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-61726 https://pkg.go.dev/vuln/GO-2026-4341 https://www.cve.org/CVERecord?id=CVE-2025-61726
stdlib	CVE-2025-61729	HIGH	v1.24.1	1.24.11, 1.25.5	https://access.redhat.com/errata/RHSA-2026:3928 https://access.redhat.com/security/cve/CVE-2025-61729 https://bugzilla.redhat.com/2418462 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2418462 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-3928.html https://errata.rockylinux.org/RLSA-2026:3928 https://go.dev/cl/725920 https://go.dev/issue/76445 https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 https://linux.oracle.com/cve/CVE-2025-61729.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-61729 https://pkg.go.dev/vuln/GO-2025-4155 https://www.cve.org/CVERecord?id=CVE-2025-61729
stdlib	CVE-2026-25679	HIGH	v1.24.1	1.25.8, 1.26.1	https://access.redhat.com/errata/RHSA-2026:9044 https://access.redhat.com/security/cve/CVE-2026-25679 https://bugzilla.redhat.com/2445356 https://bugzilla.redhat.com/show_bug.cgi?id=2445356 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679 https://errata.almalinux.org/9/ALSA-2026-9044.html https://errata.rockylinux.org/RLSA-2026:9044 https://go.dev/cl/752180 https://go.dev/issue/77578 https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk https://linux.oracle.com/cve/CVE-2026-25679.html https://linux.oracle.com/errata/ELSA-2026-9044.html https://nvd.nist.gov/vuln/detail/CVE-2026-25679 https://pkg.go.dev/vuln/GO-2026-4601 https://www.cve.org/CVERecord?id=CVE-2026-25679
stdlib	CVE-2026-32280	HIGH	v1.24.1	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:26447 https://access.redhat.com/security/cve/CVE-2026-32280 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2456333 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://bugzilla.redhat.com/show_bug.cgi?id=2456339 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://errata.almalinux.org/9/ALSA-2026-26447.html https://errata.rockylinux.org/RLSA-2026:26447 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://linux.oracle.com/cve/CVE-2026-32280.html https://linux.oracle.com/errata/ELSA-2026-16875.html https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.24.1	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:26447 https://access.redhat.com/security/cve/CVE-2026-32281 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2456333 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://bugzilla.redhat.com/show_bug.cgi?id=2456339 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://errata.almalinux.org/9/ALSA-2026-26447.html https://errata.rockylinux.org/RLSA-2026:26447 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.24.1	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:26447 https://access.redhat.com/security/cve/CVE-2026-32283 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2456333 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://bugzilla.redhat.com/show_bug.cgi?id=2456339 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://errata.almalinux.org/9/ALSA-2026-26447.html https://errata.rockylinux.org/RLSA-2026:26447 https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://linux.oracle.com/cve/CVE-2026-32283.html https://linux.oracle.com/errata/ELSA-2026-17075.html https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870 https://www.cve.org/CVERecord?id=CVE-2026-32283
stdlib	CVE-2026-33811	HIGH	v1.24.1	1.25.10, 1.26.3	https://access.redhat.com/security/cve/CVE-2026-33811 https://go.dev/cl/767860 https://go.dev/issue/78803 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-33811.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-33811 https://pkg.go.dev/vuln/GO-2026-4981 https://www.cve.org/CVERecord?id=CVE-2026-33811
stdlib	CVE-2026-33814	HIGH	v1.24.1	1.25.10, 1.26.3	https://github.com/golang/go/issues/78476 https://go-review.googlesource.com/c/go/+/761581 https://go-review.googlesource.com/c/net/+/761640 https://go.dev/cl/761581 https://go.dev/cl/761640 https://go.dev/issue/78476 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-33814.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-33814 https://pkg.go.dev/vuln/GO-2026-4918 https://ubuntu.com/security/notices/USN-8430-1 https://www.cve.org/CVERecord?id=CVE-2026-33814
stdlib	CVE-2026-39820	HIGH	v1.24.1	1.25.10, 1.26.3	https://go.dev/cl/759940 https://go.dev/issue/78566 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39820.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39820 https://pkg.go.dev/vuln/GO-2026-4986
stdlib	CVE-2026-39823	HIGH	v1.24.1	1.25.10, 1.26.3	https://go.dev/cl/769920 https://go.dev/issue/78913 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39823.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39823 https://pkg.go.dev/vuln/GO-2026-4982
stdlib	CVE-2026-39825	HIGH	v1.24.1	1.25.10, 1.26.3	https://go.dev/cl/770541 https://go.dev/issue/78948 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39825.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39825 https://pkg.go.dev/vuln/GO-2026-4976
stdlib	CVE-2026-39836	HIGH	v1.24.1	1.25.10, 1.26.3	https://go.dev/cl/775320 https://go.dev/issue/79006 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39836.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39836 https://pkg.go.dev/vuln/GO-2026-4971
stdlib	CVE-2026-42499	HIGH	v1.24.1	1.25.10, 1.26.3	https://go.dev/cl/771520 https://go.dev/issue/78987 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-42499.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-42499 https://pkg.go.dev/vuln/GO-2026-4977
stdlib	CVE-2026-42504	HIGH	v1.24.1	1.25.11, 1.26.4	https://go.dev/cl/774481 https://go.dev/issue/79217 https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw https://nvd.nist.gov/vuln/detail/CVE-2026-42504 https://pkg.go.dev/vuln/GO-2026-5038
stdlib	CVE-2025-0913	MEDIUM	v1.24.1	1.23.10, 1.24.4	https://go.dev/cl/672396 https://go.dev/issue/73702 https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A https://nvd.nist.gov/vuln/detail/CVE-2025-0913 https://pkg.go.dev/vuln/GO-2025-3750
stdlib	CVE-2025-22871	MEDIUM	v1.24.1	1.23.8, 1.24.2	http://www.openwall.com/lists/oss-security/2025/04/04/4 https://access.redhat.com/errata/RHSA-2025:9635 https://access.redhat.com/security/cve/CVE-2025-22871 https://bugzilla.redhat.com/2358493 https://bugzilla.redhat.com/show_bug.cgi?id=2358493 https://cert-portal.siemens.com/productcert/html/ssa-783943.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22871 https://errata.almalinux.org/9/ALSA-2025-9635.html https://errata.rockylinux.org/RLSA-2025:9635 https://github.com/golang/go/issues/71988 https://github.com/roadrunner-server/roadrunner https://github.com/roadrunner-server/roadrunner/commit/f269279ee87d0b88127741cad1042389af7605fa https://github.com/roadrunner-server/roadrunner/issues/2166 https://github.com/roadrunner-server/roadrunner/releases/tag/v2025.1.0 https://go.dev/cl/652998 https://go.dev/issue/71988 https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk/m/cs_6qIK5BAAJ https://linux.oracle.com/cve/CVE-2025-22871.html https://linux.oracle.com/errata/ELSA-2025-9845.html https://nvd.nist.gov/vuln/detail/CVE-2025-22871 https://pkg.go.dev/vuln/GO-2025-3563 https://www.cve.org/CVERecord?id=CVE-2025-22871
stdlib	CVE-2025-22873	MEDIUM	v1.24.1	1.23.9, 1.24.3	http://www.openwall.com/lists/oss-security/2025/05/06/2 https://access.redhat.com/security/cve/CVE-2025-22873 https://go.dev/cl/670036 https://go.dev/issue/73555 https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ https://nvd.nist.gov/vuln/detail/CVE-2025-22873 https://pkg.go.dev/vuln/GO-2026-4403 https://www.cve.org/CVERecord?id=CVE-2025-22873
stdlib	CVE-2025-4673	MEDIUM	v1.24.1	1.23.10, 1.24.4	https://access.redhat.com/errata/RHSA-2025:15887 https://access.redhat.com/security/cve/CVE-2025-4673 https://bugzilla.redhat.com/2373305 https://bugzilla.redhat.com/show_bug.cgi?id=2373305 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4673 https://errata.almalinux.org/9/ALSA-2025-15887.html https://errata.rockylinux.org/RLSA-2025:15887 https://go.dev/cl/679257 https://go.dev/issue/73816 https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A https://linux.oracle.com/cve/CVE-2025-4673.html https://linux.oracle.com/errata/ELSA-2025-10677.html https://nvd.nist.gov/vuln/detail/CVE-2025-4673 https://pkg.go.dev/vuln/GO-2025-3751 https://ubuntu.com/security/notices/USN-7574-1 https://www.cve.org/CVERecord?id=CVE-2025-4673
stdlib	CVE-2025-47906	MEDIUM	v1.24.1	1.23.12, 1.24.6	http://www.openwall.com/lists/oss-security/2025/08/06/1 https://access.redhat.com/errata/RHSA-2025:22005 https://access.redhat.com/security/cve/CVE-2025-47906 https://bugzilla.redhat.com/2396546 https://bugzilla.redhat.com/show_bug.cgi?id=2396546 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47906 https://errata.almalinux.org/9/ALSA-2025-22005.html https://errata.rockylinux.org/RLSA-2025:22005 https://go.dev/cl/691775 https://go.dev/issue/74466 https://groups.google.com/g/golang-announce/c/x5MKroML2yM https://linux.oracle.com/cve/CVE-2025-47906.html https://linux.oracle.com/errata/ELSA-2025-22668.html https://nvd.nist.gov/vuln/detail/CVE-2025-47906 https://pkg.go.dev/vuln/GO-2025-3956 https://www.cve.org/CVERecord?id=CVE-2025-47906
stdlib	CVE-2025-47907	MEDIUM	v1.24.1	1.23.12, 1.24.6	http://www.openwall.com/lists/oss-security/2025/08/06/1 https://access.redhat.com/errata/RHSA-2025:20909 https://access.redhat.com/security/cve/CVE-2025-47907 https://bugzilla.redhat.com/2387083 https://bugzilla.redhat.com/2393152 https://errata.almalinux.org/9/ALSA-2025-20909.html https://github.com/golang/go/commit/83b4a5db240960720e51b7d5a6da1f399bd868ee (go1.24.6) https://github.com/golang/go/commit/8a924caaf348fdc366bab906424616b2974ad4e9 (go1.23.12) https://github.com/golang/go/issues/74831 https://go.dev/cl/693735 https://go.dev/issue/74831 https://groups.google.com/g/golang-announce/c/x5MKroML2yM https://groups.google.com/g/golang-announce/c/x5MKroML2yM/m/5_v-oMjUAgAJ https://linux.oracle.com/cve/CVE-2025-47907.html https://linux.oracle.com/errata/ELSA-2025-20983.html https://nvd.nist.gov/vuln/detail/CVE-2025-47907 https://pkg.go.dev/vuln/GO-2025-3849 https://www.cve.org/CVERecord?id=CVE-2025-47907
stdlib	CVE-2025-47912	MEDIUM	v1.24.1	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-47912 https://go.dev/cl/709857 https://go.dev/issue/75678 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-47912 https://pkg.go.dev/vuln/GO-2025-4010 https://www.cve.org/CVERecord?id=CVE-2025-47912
stdlib	CVE-2025-58183	MEDIUM	v1.24.1	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/errata/RHSA-2026:1381 https://access.redhat.com/security/cve/CVE-2025-58183 https://bugzilla.redhat.com/2407258 https://bugzilla.redhat.com/show_bug.cgi?id=2407258 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58183 https://errata.almalinux.org/9/ALSA-2026-1381.html https://errata.rockylinux.org/RLSA-2026:1381 https://go.dev/cl/709861 https://go.dev/issue/75677 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://linux.oracle.com/cve/CVE-2025-58183.html https://linux.oracle.com/errata/ELSA-2026-50076.html https://nvd.nist.gov/vuln/detail/CVE-2025-58183 https://pkg.go.dev/vuln/GO-2025-4014 https://www.cve.org/CVERecord?id=CVE-2025-58183
stdlib	CVE-2025-58185	MEDIUM	v1.24.1	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58185 https://github.com/golang/go/commit/8709a41d5ef7321f486a1857f189c3fee20e8edd https://go.dev/cl/709856 https://go.dev/issue/75671 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58185 https://pkg.go.dev/vuln/GO-2025-4011 https://www.cve.org/CVERecord?id=CVE-2025-58185
stdlib	CVE-2025-58187	MEDIUM	v1.24.1	1.24.9, 1.25.3	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58187 https://github.com/golang/go/commit/3fc4c79fdbb17b9b29ea9f8c29dd780df075d4c4 https://go.dev/cl/709854 https://go.dev/issue/75681 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58187 https://pkg.go.dev/vuln/GO-2025-4007 https://www.cve.org/CVERecord?id=CVE-2025-58187
stdlib	CVE-2025-58188	MEDIUM	v1.24.1	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58188 https://github.com/golang/go/commit/6e4007e8cffbb870e6b606307ab7308236ecefb9 https://go.dev/cl/709853 https://go.dev/issue/75675 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58188 https://pkg.go.dev/vuln/GO-2025-4013 https://www.cve.org/CVERecord?id=CVE-2025-58188
stdlib	CVE-2025-58189	MEDIUM	v1.24.1	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58189 https://go.dev/cl/707776 https://go.dev/issue/75652 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58189 https://pkg.go.dev/vuln/GO-2025-4008 https://www.cve.org/CVERecord?id=CVE-2025-58189
stdlib	CVE-2025-61723	MEDIUM	v1.24.1	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-61723 https://github.com/golang/go/commit/5ce8cd16f3859ec5ac4106ad8ec15d6236f4501b https://go.dev/cl/709858 https://go.dev/issue/75676 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-61723 https://pkg.go.dev/vuln/GO-2025-4009 https://www.cve.org/CVERecord?id=CVE-2025-61723
stdlib	CVE-2025-61724	MEDIUM	v1.24.1	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-61724 https://go.dev/cl/709859 https://go.dev/issue/75716 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-61724 https://pkg.go.dev/vuln/GO-2025-4015 https://www.cve.org/CVERecord?id=CVE-2025-61724
stdlib	CVE-2025-61725	MEDIUM	v1.24.1	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-61725 https://go.dev/cl/709860 https://go.dev/issue/75680 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-61725 https://pkg.go.dev/vuln/GO-2025-4006 https://www.cve.org/CVERecord?id=CVE-2025-61725
stdlib	CVE-2025-61727	MEDIUM	v1.24.1	1.24.11, 1.25.5	https://access.redhat.com/security/cve/CVE-2025-61727 https://go.dev/cl/723900 https://go.dev/issue/76442 https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 https://nvd.nist.gov/vuln/detail/CVE-2025-61727 https://pkg.go.dev/vuln/GO-2025-4175 https://www.cve.org/CVERecord?id=CVE-2025-61727
stdlib	CVE-2025-61728	MEDIUM	v1.24.1	1.24.12, 1.25.6	http://www.openwall.com/lists/oss-security/2026/01/15/4 https://access.redhat.com/errata/RHSA-2026:3753 https://access.redhat.com/security/cve/CVE-2025-61728 https://bugzilla.redhat.com/2418462 https://bugzilla.redhat.com/2434431 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2418462 https://bugzilla.redhat.com/show_bug.cgi?id=2434431 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61728 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-3753.html https://errata.rockylinux.org/RLSA-2026:3753 https://go.dev/cl/736713 https://go.dev/issue/77102 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://linux.oracle.com/cve/CVE-2025-61728.html https://linux.oracle.com/errata/ELSA-2026-4672.html https://nvd.nist.gov/vuln/detail/CVE-2025-61728 https://pkg.go.dev/vuln/GO-2026-4342 https://www.cve.org/CVERecord?id=CVE-2025-61728
stdlib	CVE-2025-61730	MEDIUM	v1.24.1	1.24.12, 1.25.6	https://access.redhat.com/security/cve/CVE-2025-61730 https://go.dev/cl/724120 https://go.dev/issue/76443 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://nvd.nist.gov/vuln/detail/CVE-2025-61730 https://pkg.go.dev/vuln/GO-2026-4340 https://www.cve.org/CVERecord?id=CVE-2025-61730
stdlib	CVE-2026-27142	MEDIUM	v1.24.1	1.25.8, 1.26.1	https://access.redhat.com/security/cve/CVE-2026-27142 https://go.dev/cl/752081 https://go.dev/issue/77954 https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk https://nvd.nist.gov/vuln/detail/CVE-2026-27142 https://pkg.go.dev/vuln/GO-2026-4603 https://www.cve.org/CVERecord?id=CVE-2026-27142
stdlib	CVE-2026-27145	MEDIUM	v1.24.1	1.25.11, 1.26.4	https://go.dev/cl/783621 https://go.dev/issue/79694 https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw https://nvd.nist.gov/vuln/detail/CVE-2026-27145 https://pkg.go.dev/vuln/GO-2026-5037
stdlib	CVE-2026-32282	MEDIUM	v1.24.1	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:19353 https://access.redhat.com/security/cve/CVE-2026-32282 https://bugzilla.redhat.com/2445356 https://bugzilla.redhat.com/2449833 https://bugzilla.redhat.com/2455470 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456335 https://bugzilla.redhat.com/2456336 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2445345 https://bugzilla.redhat.com/show_bug.cgi?id=2445356 https://bugzilla.redhat.com/show_bug.cgi?id=2449833 https://bugzilla.redhat.com/show_bug.cgi?id=2455470 https://bugzilla.redhat.com/show_bug.cgi?id=2456336 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27137 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32282 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34986 https://errata.almalinux.org/9/ALSA-2026-19353.html https://errata.rockylinux.org/RLSA-2026:23228 https://go.dev/cl/763761 https://go.dev/issue/78293 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://linux.oracle.com/cve/CVE-2026-32282.html https://linux.oracle.com/errata/ELSA-2026-17075.html https://nvd.nist.gov/vuln/detail/CVE-2026-32282 https://pkg.go.dev/vuln/GO-2026-4864 https://www.cve.org/CVERecord?id=CVE-2026-32282
stdlib	CVE-2026-32288	MEDIUM	v1.24.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32288 https://go.dev/cl/763766 https://go.dev/issue/78301 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32288 https://pkg.go.dev/vuln/GO-2026-4869 https://www.cve.org/CVERecord?id=CVE-2026-32288
stdlib	CVE-2026-32289	MEDIUM	v1.24.1	1.25.9, 1.26.2	https://access.redhat.com/security/cve/CVE-2026-32289 https://go.dev/cl/763762 https://go.dev/issue/78331 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32289 https://pkg.go.dev/vuln/GO-2026-4865 https://www.cve.org/CVERecord?id=CVE-2026-32289
stdlib	CVE-2026-39826	MEDIUM	v1.24.1	1.25.10, 1.26.3	https://access.redhat.com/security/cve/CVE-2026-39826 https://go.dev/cl/771180 https://go.dev/issue/78981 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39826.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39826 https://pkg.go.dev/vuln/GO-2026-4980 https://www.cve.org/CVERecord?id=CVE-2026-39826
stdlib	CVE-2026-42507	MEDIUM	v1.24.1	1.25.11, 1.26.4	https://access.redhat.com/security/cve/CVE-2026-42507 https://go.dev/cl/777060 https://go.dev/issue/79346 https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw https://nvd.nist.gov/vuln/detail/CVE-2026-42507 https://pkg.go.dev/vuln/GO-2026-5039 https://www.cve.org/CVERecord?id=CVE-2026-42507
stdlib	CVE-2025-58186	LOW	v1.24.1	1.24.8, 1.25.2	http://www.openwall.com/lists/oss-security/2025/10/08/1 https://access.redhat.com/security/cve/CVE-2025-58186 https://go.dev/cl/709855 https://go.dev/issue/75672 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://nvd.nist.gov/vuln/detail/CVE-2025-58186 https://pkg.go.dev/vuln/GO-2025-4012 https://www.cve.org/CVERecord?id=CVE-2025-58186
stdlib	CVE-2026-27139	LOW	v1.24.1	1.25.8, 1.26.1	https://access.redhat.com/security/cve/CVE-2026-27139 https://go.dev/cl/749480 https://go.dev/issue/77827 https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk https://nvd.nist.gov/vuln/detail/CVE-2026-27139 https://pkg.go.dev/vuln/GO-2026-4602 https://www.cve.org/CVERecord?id=CVE-2026-27139
No Misconfigurations found

usr/local/bin/cf8 (gobinary)¶

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
github.com/cyphar/filepath-securejoin	GHSA-6xv5-86q9-7xr8	MEDIUM	v0.2.1	0.2.4	https://github.com/cyphar/filepath-securejoin https://github.com/cyphar/filepath-securejoin/commit/c121231e1276e11049547bee5ce68d5a2cfe2d9b https://github.com/cyphar/filepath-securejoin/pull/9 https://github.com/cyphar/filepath-securejoin/releases/tag/v0.2.4 https://github.com/cyphar/filepath-securejoin/security/advisories/GHSA-6xv5-86q9-7xr8
github.com/docker/distribution	CVE-2023-2253	HIGH	v2.8.0+incompatible	2.8.2-beta.1	https://access.redhat.com/security/cve/CVE-2023-2253 https://bugzilla.redhat.com/show_bug.cgi?id=2189886 https://github.com/distribution/distribution https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54 https://github.com/distribution/distribution/commit/f55a6552b006a381d9167e328808565dd2bf77dc https://github.com/distribution/distribution/security/advisories/GHSA-hqxw-f8mx-cpmw https://lists.debian.org/debian-lts-announce/2023/06/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2023-2253 https://ubuntu.com/security/notices/USN-6336-1 https://www.cve.org/CVERecord?id=CVE-2023-2253 https://www.openwall.com/lists/oss-security/2023/05/09/1
github.com/sirupsen/logrus	CVE-2025-65637	HIGH	v1.2.0	1.8.3, 1.9.1, 1.9.3	https://access.redhat.com/errata/RHSA-2026:3428 https://access.redhat.com/security/cve/CVE-2025-65637 https://bugzilla.redhat.com/2268022 https://bugzilla.redhat.com/2418462 https://bugzilla.redhat.com/2418900 https://bugzilla.redhat.com/show_bug.cgi?id=2268022 https://bugzilla.redhat.com/show_bug.cgi?id=2418462 https://bugzilla.redhat.com/show_bug.cgi?id=2418900 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65637 https://errata.almalinux.org/8/ALSA-2026-3428.html https://errata.rockylinux.org/RLSA-2026:3428 https://github.com/mjuanxd/logrus-dos-poc https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md https://github.com/sirupsen/logrus https://github.com/sirupsen/logrus/commit/6acd903758687c4a3db3c11701e6c414fcf1c1f7 https://github.com/sirupsen/logrus/issues/1370 https://github.com/sirupsen/logrus/pull/1376 https://github.com/sirupsen/logrus/releases/tag/v1.8.3 https://github.com/sirupsen/logrus/releases/tag/v1.9.1 https://github.com/sirupsen/logrus/releases/tag/v1.9.3 https://linux.oracle.com/cve/CVE-2025-65637.html https://linux.oracle.com/errata/ELSA-2026-3428.html https://nvd.nist.gov/vuln/detail/CVE-2025-65637 https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391 https://www.cve.org/CVERecord?id=CVE-2025-65637
golang.org/x/crypto	CVE-2024-45337	CRITICAL	v0.8.0	0.31.0	http://www.openwall.com/lists/oss-security/2024/12/11/2 https://access.redhat.com/security/cve/CVE-2024-45337 https://github.com/golang/crypto https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909 https://go-review.googlesource.com/c/crypto/+/635315/ https://go.dev/cl/635315 https://go.dev/issue/70779 https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ https://nvd.nist.gov/vuln/detail/CVE-2024-45337 https://pkg.go.dev/vuln/GO-2024-3321 https://security.netapp.com/advisory/ntap-20250131-0007 https://security.netapp.com/advisory/ntap-20250131-0007/ https://ubuntu.com/security/notices/USN-7839-1 https://ubuntu.com/security/notices/USN-7839-2 https://www.cve.org/CVERecord?id=CVE-2024-45337
golang.org/x/crypto	CVE-2025-22869	HIGH	v0.8.0	0.35.0	https://access.redhat.com/errata/RHSA-2025:3833 https://access.redhat.com/security/cve/CVE-2025-22869 https://bugzilla.redhat.com/2348367 https://bugzilla.redhat.com/show_bug.cgi?id=2348367 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869 https://errata.almalinux.org/9/ALSA-2025-3833.html https://errata.rockylinux.org/RLSA-2025:7416 https://github.com/golang/crypto https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22 https://go-review.googlesource.com/c/crypto/+/652135 https://go.dev/cl/652135 https://go.dev/issue/71931 https://linux.oracle.com/cve/CVE-2025-22869.html https://linux.oracle.com/errata/ELSA-2025-7484.html https://nvd.nist.gov/vuln/detail/CVE-2025-22869 https://pkg.go.dev/vuln/GO-2025-3487 https://security.netapp.com/advisory/ntap-20250411-0010 https://security.netapp.com/advisory/ntap-20250411-0010/ https://www.cve.org/CVERecord?id=CVE-2025-22869
golang.org/x/crypto	CVE-2023-48795	MEDIUM	v0.8.0	0.17.0, 0.0.0-20231218163308-9d2ee975ef9f	http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html http://seclists.org/fulldisclosure/2024/Mar/21 http://www.openwall.com/lists/oss-security/2023/12/18/3 http://www.openwall.com/lists/oss-security/2023/12/19/5 http://www.openwall.com/lists/oss-security/2023/12/20/3 http://www.openwall.com/lists/oss-security/2024/03/06/3 http://www.openwall.com/lists/oss-security/2024/04/17/8 https://access.redhat.com/errata/RHSA-2024:1150 https://access.redhat.com/security/cve/CVE-2023-48795 https://access.redhat.com/security/cve/cve-2023-48795 https://access.redhat.com/solutions/7071748 https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/ https://bugs.gentoo.org/920280 https://bugzilla.redhat.com/2254210 https://bugzilla.redhat.com/show_bug.cgi?id=2254210 https://bugzilla.suse.com/show_bug.cgi?id=1217950 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-364175.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://crates.io/crates/thrussh/versions https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795 https://errata.almalinux.org/9/ALSA-2024-1150.html https://errata.rockylinux.org/RLSA-2024:0628 https://filezilla-project.org/versions.php https://forum.netgate.com/topic/184941/terrapin-ssh-attack https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6 https://github.com/NixOS/nixpkgs/pull/275249 https://github.com/PowerShell/Win32-OpenSSH/issues/2189 https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0 https://github.com/TeraTermProject/teraterm/releases/tag/v5.1 https://github.com/advisories/GHSA-45x7-px36-x8w8 https://github.com/apache/mina-sshd/issues/445 https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22 https://github.com/cyd01/KiTTY/issues/520 https://github.com/drakkan/sftpgo/releases/tag/v2.5.6 https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42 https://github.com/erlang/otp/releases/tag/OTP-26.2.1 https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d https://github.com/hierynomus/sshj/issues/916 https://github.com/janmojzis/tinyssh/issues/81 https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5 https://github.com/libssh2/libssh2/pull/1291 https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25 https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3 https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15 https://github.com/mwiede/jsch/issues/457 https://github.com/mwiede/jsch/pull/461 https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16 https://github.com/openssh/openssh-portable/commits/master https://github.com/paramiko/paramiko/issues/2337 https://github.com/paramiko/paramiko/issues/2337#issuecomment-1887642773 https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES https://github.com/proftpd/proftpd/issues/456 https://github.com/rapier1/hpn-ssh/releases https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst https://github.com/ronf/asyncssh/security/advisories/GHSA-hfmc-7525-mj55 https://github.com/ronf/asyncssh/tags https://github.com/ssh-mitm/ssh-mitm/issues/165 https://github.com/warp-tech/russh https://github.com/warp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951 https://github.com/warp-tech/russh/releases/tag/v0.40.2 https://github.com/warp-tech/russh/security/advisories/GHSA-45x7-px36-x8w8 https://gitlab.com/libssh/libssh-mirror/-/tags https://go.dev/cl/550715 https://go.dev/issue/64784 https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg https://help.panic.com/releasenotes/transmit5 https://help.panic.com/releasenotes/transmit5/ https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795 https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/ https://linux.oracle.com/cve/CVE-2023-48795.html https://linux.oracle.com/errata/ELSA-2024-2988.html https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/ https://matt.ucc.asn.au/dropbear/CHANGES https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC https://news.ycombinator.com/item?id=38684904 https://news.ycombinator.com/item?id=38685286 https://news.ycombinator.com/item?id=38732005 https://nova.app/releases/#v11.8 https://nvd.nist.gov/vuln/detail/CVE-2023-48795 https://oryx-embedded.com/download/#changelog https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002 https://roumenpetrov.info/secsh/#news20231220 https://security-tracker.debian.org/tracker/CVE-2023-48795 https://security-tracker.debian.org/tracker/source-package/libssh2 https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg https://security-tracker.debian.org/tracker/source-package/trilead-ssh2 https://security.gentoo.org/glsa/202312-16 https://security.gentoo.org/glsa/202312-17 https://security.netapp.com/advisory/ntap-20240105-0004 https://security.netapp.com/advisory/ntap-20240105-0004/ https://support.apple.com/kb/HT214084 https://terrapin-attack.com/ https://thorntech.com/cve-2023-48795-and-sftp-gateway https://thorntech.com/cve-2023-48795-and-sftp-gateway/ https://twitter.com/TrueSkrillor/status/1736774389725565005 https://ubuntu.com/security/CVE-2023-48795 https://ubuntu.com/security/notices/USN-6560-1 https://ubuntu.com/security/notices/USN-6560-2 https://ubuntu.com/security/notices/USN-6561-1 https://ubuntu.com/security/notices/USN-6585-1 https://ubuntu.com/security/notices/USN-6589-1 https://ubuntu.com/security/notices/USN-6598-1 https://ubuntu.com/security/notices/USN-6738-1 https://ubuntu.com/security/notices/USN-7051-1 https://ubuntu.com/security/notices/USN-7292-1 https://ubuntu.com/security/notices/USN-7297-1 https://winscp.net/eng/docs/history#6.2.2 https://www.bitvise.com/ssh-client-version-history#933 https://www.bitvise.com/ssh-server-version-history https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update https://www.cve.org/CVERecord?id=CVE-2023-48795 https://www.debian.org/security/2023/dsa-5586 https://www.debian.org/security/2023/dsa-5588 https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508 https://www.netsarang.com/en/xshell-update-history https://www.netsarang.com/en/xshell-update-history/ https://www.openssh.com/openbsd.html https://www.openssh.com/txt/release-9.6 https://www.openwall.com/lists/oss-security/2023/12/18/2 https://www.openwall.com/lists/oss-security/2023/12/18/3 https://www.openwall.com/lists/oss-security/2023/12/20/3 https://www.paramiko.org/changelog.html https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/ https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795 https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/ https://www.terrapin-attack.com https://www.theregister.com/2023/12/20/terrapin_attack_ssh https://www.vandyke.com/products/securecrt/history.txt https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability
golang.org/x/crypto	CVE-2025-47914	MEDIUM	v0.8.0	0.45.0	https://access.redhat.com/security/cve/CVE-2025-47914 https://go.dev/cl/721960 https://go.dev/issue/76364 https://go.googlesource.com/crypto https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA https://nvd.nist.gov/vuln/detail/CVE-2025-47914 https://pkg.go.dev/vuln/GO-2025-4135 https://www.cve.org/CVERecord?id=CVE-2025-47914
golang.org/x/crypto	CVE-2025-58181	MEDIUM	v0.8.0	0.45.0	https://access.redhat.com/security/cve/CVE-2025-58181 https://github.com/golang/crypto/commit/e79546e28b85ea53dd37afe1c4102746ef553b9c https://github.com/golang/go/issues/76363 https://go.dev/cl/721961 https://go.dev/issue/76363 https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA?pli=1 https://nvd.nist.gov/vuln/detail/CVE-2025-58181 https://pkg.go.dev/vuln/GO-2025-4134 https://ubuntu.com/security/notices/USN-7956-1 https://www.cve.org/CVERecord?id=CVE-2025-58181
golang.org/x/net	CVE-2023-39325	HIGH	v0.9.0	0.17.0	golang.org/x/net https://access.redhat.com/errata/RHSA-2023:6077 https://access.redhat.com/security/cve/CVE-2023-39325 https://access.redhat.com/security/cve/CVE-2023-44487 https://bugzilla.redhat.com/2242803 https://bugzilla.redhat.com/2243296 https://bugzilla.redhat.com/show_bug.cgi?id=2242803 https://bugzilla.redhat.com/show_bug.cgi?id=2243296 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487 https://errata.almalinux.org/9/ALSA-2023-6077.html https://errata.rockylinux.org/RLSA-2023:6077 https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21] https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20] https://github.com/golang/go/issues/63417 https://go.dev/cl/534215 https://go.dev/cl/534235 https://go.dev/issue/63417 https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ https://linux.oracle.com/cve/CVE-2023-39325.html https://linux.oracle.com/errata/ELSA-2023-5867.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/ https://nvd.nist.gov/vuln/detail/CVE-2023-39325 https://pkg.go.dev/vuln/GO-2023-2102 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20231110-0008 https://security.netapp.com/advisory/ntap-20231110-0008/ https://ubuntu.com/security/notices/USN-6574-1 https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 https://www.cve.org/CVERecord?id=CVE-2023-39325
golang.org/x/net	CVE-2023-3978	MEDIUM	v0.9.0	0.13.0	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-3978 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2163037 https://bugzilla.redhat.com/show_bug.cgi?id=2174485 https://bugzilla.redhat.com/show_bug.cgi?id=2175721 https://bugzilla.redhat.com/show_bug.cgi?id=2178358 https://bugzilla.redhat.com/show_bug.cgi?id=2178488 https://bugzilla.redhat.com/show_bug.cgi?id=2178492 https://bugzilla.redhat.com/show_bug.cgi?id=2182883 https://bugzilla.redhat.com/show_bug.cgi?id=2182884 https://bugzilla.redhat.com/show_bug.cgi?id=2184481 https://bugzilla.redhat.com/show_bug.cgi?id=2184482 https://bugzilla.redhat.com/show_bug.cgi?id=2184483 https://bugzilla.redhat.com/show_bug.cgi?id=2184484 https://bugzilla.redhat.com/show_bug.cgi?id=2196026 https://bugzilla.redhat.com/show_bug.cgi?id=2196027 https://bugzilla.redhat.com/show_bug.cgi?id=2196029 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2228689 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:6939 https://go.dev/cl/514896 https://go.dev/issue/61615 https://linux.oracle.com/cve/CVE-2023-3978.html https://linux.oracle.com/errata/ELSA-2023-6939.html https://nvd.nist.gov/vuln/detail/CVE-2023-3978 https://pkg.go.dev/vuln/GO-2023-1988 https://ubuntu.com/security/notices/USN-8089-1 https://ubuntu.com/security/notices/USN-8089-2 https://ubuntu.com/security/notices/USN-8089-3 https://www.cve.org/CVERecord?id=CVE-2023-3978
golang.org/x/net	CVE-2023-44487	MEDIUM	v0.9.0	0.17.0	http://www.openwall.com/lists/oss-security/2023/10/10/6 http://www.openwall.com/lists/oss-security/2023/10/10/7 http://www.openwall.com/lists/oss-security/2023/10/13/4 http://www.openwall.com/lists/oss-security/2023/10/13/9 http://www.openwall.com/lists/oss-security/2023/10/18/4 http://www.openwall.com/lists/oss-security/2023/10/18/8 http://www.openwall.com/lists/oss-security/2023/10/19/6 http://www.openwall.com/lists/oss-security/2023/10/20/8 http://www.openwall.com/lists/oss-security/2025/08/13/6 https://access.redhat.com/errata/RHSA-2023:6746 https://access.redhat.com/security/cve/CVE-2023-44487 https://access.redhat.com/security/cve/cve-2023-44487 https://akka.io/security/akka-http-cve-2023-44487.html https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/ https://aws.amazon.com/security/security-bulletins/AWS-2023-011 https://aws.amazon.com/security/security-bulletins/AWS-2023-011/ https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/ https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/ https://blog.powerdns.com/2024/02/16/powerdns-dnsdist-1.9.0-released https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack https://blog.vespa.ai/cve-2023-44487 https://blog.vespa.ai/cve-2023-44487/ https://bugzilla.proxmox.com/show_bug.cgi?id=4988 https://bugzilla.redhat.com/2242803 https://bugzilla.redhat.com/show_bug.cgi?id=2242803 https://bugzilla.suse.com/show_bug.cgi?id=1216123 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-784301.html https://cert-portal.siemens.com/productcert/html/ssa-832273.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9 https://chaos.social/@icing/111210915918780532 https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/ https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487 https://devblogs.microsoft.com/dotnet/october-2023-updates/ https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715 https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve https://errata.almalinux.org/9/ALSA-2023-6746.html https://errata.rockylinux.org/RLSA-2023:5838 https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764 https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088 https://github.com/Azure/AKS/issues/3947 https://github.com/Kong/kong/discussions/11741 https://github.com/advisories/GHSA-qppj-fm5r-hxr3 https://github.com/advisories/GHSA-vx74-f528-fxqg https://github.com/advisories/GHSA-xpw8-rcwv-8f8p https://github.com/akka/akka-http/issues/4323 https://github.com/akka/akka-http/pull/4324 https://github.com/akka/akka-http/pull/4325 https://github.com/alibaba/tengine/issues/1872 https://github.com/apache/apisix/issues/10320 https://github.com/apache/httpd-site/pull/10 https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113 https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628 https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2 https://github.com/apache/trafficserver/pull/10564 https://github.com/apple/swift-nio-http2 https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3 https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487 https://github.com/bcdannyboy/CVE-2023-44487 https://github.com/caddyserver/caddy/issues/5877 https://github.com/caddyserver/caddy/releases/tag/v2.7.5 https://github.com/dotnet/announcements/issues/277 https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73 https://github.com/eclipse/jetty.project/issues/10679 https://github.com/envoyproxy/envoy/pull/30055 https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76 https://github.com/etcd-io/etcd/issues/16740 https://github.com/facebook/proxygen/pull/466 https://github.com/golang/go/issues/63417 https://github.com/grpc/grpc-go/pull/6703 https://github.com/grpc/grpc-go/releases https://github.com/grpc/grpc/releases/tag/v1.59.2 https://github.com/h2o/h2o/pull/3291 https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf https://github.com/haproxy/haproxy/issues/2312 https://github.com/hyperium/hyper/issues/3337 https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244 https://github.com/junkurihara/rust-rpxy/issues/97 https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1 https://github.com/kazu-yamamoto/http2/issues/93 https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15 https://github.com/kubernetes/kubernetes/pull/121120 https://github.com/line/armeria/pull/5232 https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632 https://github.com/micrictor/http2-rst-stream https://github.com/microsoft/CBL-Mariner/pull/6381 https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61 https://github.com/nghttp2/nghttp2/pull/1961 https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0 https://github.com/ninenines/cowboy/issues/1615 https://github.com/nodejs/node/pull/50121 https://github.com/openresty/openresty/issues/930 https://github.com/opensearch-project/data-prepper/issues/3474 https://github.com/oqtane/oqtane.framework/discussions/3367 https://github.com/projectcontour/contour/pull/5826 https://github.com/tempesta-tech/tempesta/issues/1986 https://github.com/varnishcache/varnish-cache/issues/3996 https://go.dev/cl/534215 https://go.dev/cl/534235 https://go.dev/issue/63417 https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ https://istio.io/latest/news/security/istio-security-2023-004 https://istio.io/latest/news/security/istio-security-2023-004/ https://linkerd.io/2023/10/12/linkerd-cve-2023-44487 https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/ https://linux.oracle.com/cve/CVE-2023-44487.html https://linux.oracle.com/errata/ELSA-2024-1444.html https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/ https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html https://mailman.powerdns.com/pipermail/dnsdist/2023-October/001409.html https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2 https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/ https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487 https://my.f5.com/manage/s/article/K000137106 https://netty.io/news/2023/10/10/4-1-100-Final.html https://news.ycombinator.com/item?id=37830987 https://news.ycombinator.com/item?id=37830998 https://news.ycombinator.com/item?id=37831062 https://news.ycombinator.com/item?id=37837043 https://nodejs.org/en/blog/vulnerability/october-2023-security-releases https://nvd.nist.gov/vuln/detail/CVE-2023-44487 https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/ https://pkg.go.dev/vuln/GO-2023-2102 https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20231016-0001 https://security.netapp.com/advisory/ntap-20231016-0001/ https://security.netapp.com/advisory/ntap-20240426-0007 https://security.netapp.com/advisory/ntap-20240426-0007/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://security.netapp.com/advisory/ntap-20240621-0007 https://security.netapp.com/advisory/ntap-20240621-0007/ https://security.paloaltonetworks.com/CVE-2023-44487 https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14 https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12 https://tomcat.apache.org/security-8.html https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94 https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81 https://ubuntu.com/security/CVE-2023-44487 https://ubuntu.com/security/notices/USN-6427-1 https://ubuntu.com/security/notices/USN-6427-2 https://ubuntu.com/security/notices/USN-6438-1 https://ubuntu.com/security/notices/USN-6505-1 https://ubuntu.com/security/notices/USN-6574-1 https://ubuntu.com/security/notices/USN-6754-1 https://ubuntu.com/security/notices/USN-6994-1 https://ubuntu.com/security/notices/USN-7067-1 https://ubuntu.com/security/notices/USN-7410-1 https://ubuntu.com/security/notices/USN-7469-1 https://ubuntu.com/security/notices/USN-7469-2 https://ubuntu.com/security/notices/USN-7469-3 https://ubuntu.com/security/notices/USN-7469-4 https://ubuntu.com/security/notices/USN-7892-1 https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12 https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1 https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2 https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487 https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 https://www.cve.org/CVERecord?id=CVE-2023-44487 https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event https://www.debian.org/security/2023/dsa-5521 https://www.debian.org/security/2023/dsa-5522 https://www.debian.org/security/2023/dsa-5540 https://www.debian.org/security/2023/dsa-5549 https://www.debian.org/security/2023/dsa-5558 https://www.debian.org/security/2023/dsa-5570 https://www.eclipse.org/lists/jetty-announce/msg00181.html https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487 https://www.mail-archive.com/haproxy@formilux.org/msg44134.html https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487 https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/ https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/ https://www.openwall.com/lists/oss-security/2023/10/10/6 https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/ https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause
golang.org/x/net	CVE-2023-45288	MEDIUM	v0.9.0	0.23.0	http://www.openwall.com/lists/oss-security/2024/04/03/16 http://www.openwall.com/lists/oss-security/2024/04/05/4 https://access.redhat.com/errata/RHSA-2024:2724 https://access.redhat.com/security/cve/CVE-2023-45288 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268018 https://bugzilla.redhat.com/2268019 https://bugzilla.redhat.com/2268273 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268018 https://bugzilla.redhat.com/show_bug.cgi?id=2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268273 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783 https://errata.almalinux.org/9/ALSA-2024-2724.html https://errata.rockylinux.org/RLSA-2024:2724 https://go.dev/cl/576155 https://go.dev/issue/65051 https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M https://kb.cert.org/vuls/id/421644 https://linux.oracle.com/cve/CVE-2023-45288.html https://linux.oracle.com/errata/ELSA-2024-3346.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/ https://nowotarski.info/http2-continuation-flood-technical-details https://nowotarski.info/http2-continuation-flood/ https://nvd.nist.gov/vuln/detail/CVE-2023-45288 https://pkg.go.dev/vuln/GO-2024-2687 https://security.netapp.com/advisory/ntap-20240419-0009 https://security.netapp.com/advisory/ntap-20240419-0009/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2023-45288 https://www.kb.cert.org/vuls/id/421644
golang.org/x/net	CVE-2025-22870	MEDIUM	v0.9.0	0.36.0	http://www.openwall.com/lists/oss-security/2025/03/07/2 https://access.redhat.com/security/cve/CVE-2025-22870 https://github.com/golang/go/issues/71984 https://go-review.googlesource.com/q/project:net https://go.dev/cl/654697 https://go.dev/issue/71984 https://groups.google.com/g/golang-announce/c/4t3lzH3I0eI/m/b42ImqrBAQAJ https://nvd.nist.gov/vuln/detail/CVE-2025-22870 https://pkg.go.dev/vuln/GO-2025-3503 https://security.netapp.com/advisory/ntap-20250509-0007 https://security.netapp.com/advisory/ntap-20250509-0007/ https://ubuntu.com/security/notices/USN-7574-1 https://www.cve.org/CVERecord?id=CVE-2025-22870
golang.org/x/net	CVE-2025-22872	MEDIUM	v0.9.0	0.38.0	https://access.redhat.com/security/cve/CVE-2025-22872 https://github.com/TheDegenerateDev5150/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9 https://github.com/advisories/GHSA-vvgc-356p-c3xw https://go.dev/cl/662715 https://go.dev/issue/73070 https://groups.google.com/g/golang-announce/c/ezSKR9vqbqA https://nvd.nist.gov/vuln/detail/CVE-2025-22872 https://pkg.go.dev/vuln/GO-2025-3595 https://security.netapp.com/advisory/ntap-20250516-0007 https://security.netapp.com/advisory/ntap-20250516-0007/ https://ubuntu.com/security/notices/USN-8089-1 https://ubuntu.com/security/notices/USN-8089-2 https://ubuntu.com/security/notices/USN-8089-3 https://www.cve.org/CVERecord?id=CVE-2025-22872
golang.org/x/oauth2	CVE-2025-22868	HIGH	v0.0.0-20210819190943-2bc19b11175f	0.27.0	https://access.redhat.com/security/cve/CVE-2025-22868 https://bugzilla.redhat.com/show_bug.cgi?id=2347423 https://bugzilla.redhat.com/show_bug.cgi?id=2348366 https://bugzilla.redhat.com/show_bug.cgi?id=2352914 https://bugzilla.redhat.com/show_bug.cgi?id=2354195 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29786 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30204 https://errata.rockylinux.org/RLSA-2025:7479 https://go.dev/cl/652155 https://go.dev/issue/71490 https://nvd.nist.gov/vuln/detail/CVE-2025-22868 https://pkg.go.dev/vuln/GO-2025-3488 https://www.cve.org/CVERecord?id=CVE-2025-22868
google.golang.org/grpc	CVE-2026-33186	CRITICAL	v1.41.0	1.79.3	https://access.redhat.com/errata/RHSA-2026:19353 https://access.redhat.com/security/cve/CVE-2026-33186 https://bugzilla.redhat.com/2445356 https://bugzilla.redhat.com/2449833 https://bugzilla.redhat.com/2455470 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456335 https://bugzilla.redhat.com/2456336 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2445345 https://bugzilla.redhat.com/show_bug.cgi?id=2445356 https://bugzilla.redhat.com/show_bug.cgi?id=2449833 https://bugzilla.redhat.com/show_bug.cgi?id=2455470 https://bugzilla.redhat.com/show_bug.cgi?id=2456336 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27137 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32282 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34986 https://errata.almalinux.org/9/ALSA-2026-19353.html https://errata.rockylinux.org/RLSA-2026:23228 https://github.com/grpc/grpc-go https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3 https://nvd.nist.gov/vuln/detail/CVE-2026-33186 https://www.cve.org/CVERecord?id=CVE-2026-33186
google.golang.org/grpc	GHSA-m425-mq94-257g	HIGH	v1.41.0	1.56.3, 1.57.1, 1.58.3	https://github.com/grpc/grpc-go https://github.com/grpc/grpc-go/commit/f2180b4d5403d2210b30b93098eb7da31c05c721 https://github.com/grpc/grpc-go/pull/6703 https://github.com/grpc/grpc-go/security/advisories/GHSA-m425-mq94-257g https://nvd.nist.gov/vuln/detail/CVE-2023-44487
google.golang.org/protobuf	CVE-2024-24786	MEDIUM	v1.30.0	1.33.0	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:2550 https://access.redhat.com/security/cve/CVE-2024-24786 https://bugzilla.redhat.com/2268046 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786 https://errata.almalinux.org/9/ALSA-2024-2550.html https://errata.rockylinux.org/RLSA-2024:2550 https://github.com/protocolbuffers/protobuf-go https://github.com/protocolbuffers/protobuf-go/commit/f01a588e5810b90996452eec4a28f22a0afae023 https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.33.0 https://go-review.googlesource.com/c/protobuf/+/569356 https://go.dev/cl/569356 https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/ https://linux.oracle.com/cve/CVE-2024-24786.html https://linux.oracle.com/errata/ELSA-2024-4246.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU/ https://nvd.nist.gov/vuln/detail/CVE-2024-24786 https://pkg.go.dev/vuln/GO-2024-2611 https://security.netapp.com/advisory/ntap-20240517-0002 https://security.netapp.com/advisory/ntap-20240517-0002/ https://ubuntu.com/security/notices/USN-6746-1 https://ubuntu.com/security/notices/USN-6746-2 https://www.cve.org/CVERecord?id=CVE-2024-24786
stdlib	CVE-2024-24790	CRITICAL	v1.20.5	1.21.11, 1.22.4	http://www.openwall.com/lists/oss-security/2024/06/04/1 https://access.redhat.com/errata/RHSA-2025:7256 https://access.redhat.com/security/cve/CVE-2024-24790 https://bugzilla.redhat.com/2237777 https://bugzilla.redhat.com/2237778 https://bugzilla.redhat.com/2279814 https://bugzilla.redhat.com/2292787 https://bugzilla.redhat.com/2295310 https://bugzilla.redhat.com/2315719 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2279814 https://bugzilla.redhat.com/show_bug.cgi?id=2292787 https://bugzilla.redhat.com/show_bug.cgi?id=2295310 https://bugzilla.redhat.com/show_bug.cgi?id=2315719 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9355 https://errata.almalinux.org/9/ALSA-2025-7256.html https://errata.rockylinux.org/RLSA-2025:7256 https://github.com/golang/go/commit/051bdf3fd12a40307606ff9381138039c5f452f0 (1.21) https://github.com/golang/go/commit/12d5810cdb1f73cf23d7a86462143e9463317fca (1.22) https://github.com/golang/go/issues/67680 https://go.dev/cl/590316 https://go.dev/issue/67680 https://groups.google.com/g/golang-announce/c/XbxouI9gY7k https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ https://linux.oracle.com/cve/CVE-2024-24790.html https://linux.oracle.com/errata/ELSA-2025-7256.html https://nvd.nist.gov/vuln/detail/CVE-2024-24790 https://pkg.go.dev/vuln/GO-2024-2887 https://security.netapp.com/advisory/ntap-20240905-0002/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://www.cve.org/CVERecord?id=CVE-2024-24790
stdlib	CVE-2025-68121	CRITICAL	v1.20.5	1.24.13, 1.25.7, 1.26.0-rc.3	https://access.redhat.com/errata/RHSA-2026:4177 https://access.redhat.com/security/cve/CVE-2025-68121 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-4177.html https://errata.rockylinux.org/RLSA-2026:4177 https://github.com/golang/go/issues/77113 https://go.dev/cl/737700 https://go.dev/issue/77217 https://groups.google.com/g/golang-announce/c/K09ubi9FQFk https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://linux.oracle.com/cve/CVE-2025-68121.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-68121 https://pkg.go.dev/vuln/GO-2026-4337 https://www.cve.org/CVERecord?id=CVE-2025-68121
stdlib	CVE-2023-39325	HIGH	v1.20.5	1.20.10, 1.21.3	golang.org/x/net https://access.redhat.com/errata/RHSA-2023:6077 https://access.redhat.com/security/cve/CVE-2023-39325 https://access.redhat.com/security/cve/CVE-2023-44487 https://bugzilla.redhat.com/2242803 https://bugzilla.redhat.com/2243296 https://bugzilla.redhat.com/show_bug.cgi?id=2242803 https://bugzilla.redhat.com/show_bug.cgi?id=2243296 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487 https://errata.almalinux.org/9/ALSA-2023-6077.html https://errata.rockylinux.org/RLSA-2023:6077 https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21] https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20] https://github.com/golang/go/issues/63417 https://go.dev/cl/534215 https://go.dev/cl/534235 https://go.dev/issue/63417 https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ https://linux.oracle.com/cve/CVE-2023-39325.html https://linux.oracle.com/errata/ELSA-2023-5867.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/ https://nvd.nist.gov/vuln/detail/CVE-2023-39325 https://pkg.go.dev/vuln/GO-2023-2102 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20231110-0008 https://security.netapp.com/advisory/ntap-20231110-0008/ https://ubuntu.com/security/notices/USN-6574-1 https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 https://www.cve.org/CVERecord?id=CVE-2023-39325
stdlib	CVE-2023-45283	HIGH	v1.20.5	1.20.11, 1.21.4, 1.20.12, 1.21.5	http://www.openwall.com/lists/oss-security/2023/12/05/2 https://go.dev/cl/540277 https://go.dev/cl/541175 https://go.dev/issue/63713 https://go.dev/issue/64028 https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ https://nvd.nist.gov/vuln/detail/CVE-2023-45283 https://pkg.go.dev/vuln/GO-2023-2185 https://security.netapp.com/advisory/ntap-20231214-0008/
stdlib	CVE-2023-45288	HIGH	v1.20.5	1.21.9, 1.22.2	http://www.openwall.com/lists/oss-security/2024/04/03/16 http://www.openwall.com/lists/oss-security/2024/04/05/4 https://access.redhat.com/errata/RHSA-2024:2724 https://access.redhat.com/security/cve/CVE-2023-45288 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268018 https://bugzilla.redhat.com/2268019 https://bugzilla.redhat.com/2268273 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268018 https://bugzilla.redhat.com/show_bug.cgi?id=2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268273 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783 https://errata.almalinux.org/9/ALSA-2024-2724.html https://errata.rockylinux.org/RLSA-2024:2724 https://go.dev/cl/576155 https://go.dev/issue/65051 https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M https://kb.cert.org/vuls/id/421644 https://linux.oracle.com/cve/CVE-2023-45288.html https://linux.oracle.com/errata/ELSA-2024-3346.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/ https://nowotarski.info/http2-continuation-flood-technical-details https://nowotarski.info/http2-continuation-flood/ https://nvd.nist.gov/vuln/detail/CVE-2023-45288 https://pkg.go.dev/vuln/GO-2024-2687 https://security.netapp.com/advisory/ntap-20240419-0009 https://security.netapp.com/advisory/ntap-20240419-0009/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2023-45288 https://www.kb.cert.org/vuls/id/421644
stdlib	CVE-2024-34156	HIGH	v1.20.5	1.22.7, 1.23.1	https://access.redhat.com/errata/RHSA-2025:3773 https://access.redhat.com/security/cve/CVE-2024-34156 https://bugzilla.redhat.com/2310528 https://bugzilla.redhat.com/show_bug.cgi?id=2310528 https://bugzilla.redhat.com/show_bug.cgi?id=2341750 https://bugzilla.redhat.com/show_bug.cgi?id=2341751 https://bugzilla.redhat.com/show_bug.cgi?id=2344219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866 https://errata.almalinux.org/9/ALSA-2025-3773.html https://errata.rockylinux.org/RLSA-2025:3773 https://github.com/golang/go/commit/2092294f2b097c5828f4eace6c98a322c1510b01 (go1.22.7) https://github.com/golang/go/commit/fa8ff1a46deb6c816304441ec6740ec112e19012 (go1.23.1) https://go.dev/cl/611239 https://go.dev/issue/69139 https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc https://groups.google.com/g/golang-dev/c/S9POB9NCTdk https://linux.oracle.com/cve/CVE-2024-34156.html https://linux.oracle.com/errata/ELSA-2025-3773.html https://nvd.nist.gov/vuln/detail/CVE-2024-34156 https://pkg.go.dev/vuln/GO-2024-3106 https://security.netapp.com/advisory/ntap-20240926-0004/ https://ubuntu.com/security/notices/USN-7081-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-34156
stdlib	CVE-2025-61726	HIGH	v1.20.5	1.24.12, 1.25.6	https://access.redhat.com/errata/RHSA-2026:4177 https://access.redhat.com/security/cve/CVE-2025-61726 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-4177.html https://errata.rockylinux.org/RLSA-2026:4177 https://go.dev/cl/736712 https://go.dev/issue/77101 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://linux.oracle.com/cve/CVE-2025-61726.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-61726 https://pkg.go.dev/vuln/GO-2026-4341 https://www.cve.org/CVERecord?id=CVE-2025-61726
stdlib	CVE-2025-61729	HIGH	v1.20.5	1.24.11, 1.25.5	https://access.redhat.com/errata/RHSA-2026:3928 https://access.redhat.com/security/cve/CVE-2025-61729 https://bugzilla.redhat.com/2418462 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2418462 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-3928.html https://errata.rockylinux.org/RLSA-2026:3928 https://go.dev/cl/725920 https://go.dev/issue/76445 https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 https://linux.oracle.com/cve/CVE-2025-61729.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-61729 https://pkg.go.dev/vuln/GO-2025-4155 https://www.cve.org/CVERecord?id=CVE-2025-61729
stdlib	CVE-2026-25679	HIGH	v1.20.5	1.25.8, 1.26.1	https://access.redhat.com/errata/RHSA-2026:9044 https://access.redhat.com/security/cve/CVE-2026-25679 https://bugzilla.redhat.com/2445356 https://bugzilla.redhat.com/show_bug.cgi?id=2445356 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679 https://errata.almalinux.org/9/ALSA-2026-9044.html https://errata.rockylinux.org/RLSA-2026:9044 https://go.dev/cl/752180 https://go.dev/issue/77578 https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk https://linux.oracle.com/cve/CVE-2026-25679.html https://linux.oracle.com/errata/ELSA-2026-9044.html https://nvd.nist.gov/vuln/detail/CVE-2026-25679 https://pkg.go.dev/vuln/GO-2026-4601 https://www.cve.org/CVERecord?id=CVE-2026-25679
stdlib	CVE-2026-32280	HIGH	v1.20.5	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:26447 https://access.redhat.com/security/cve/CVE-2026-32280 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2456333 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://bugzilla.redhat.com/show_bug.cgi?id=2456339 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://errata.almalinux.org/9/ALSA-2026-26447.html https://errata.rockylinux.org/RLSA-2026:26447 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://linux.oracle.com/cve/CVE-2026-32280.html https://linux.oracle.com/errata/ELSA-2026-16875.html https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.20.5	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:26447 https://access.redhat.com/security/cve/CVE-2026-32281 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2456333 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://bugzilla.redhat.com/show_bug.cgi?id=2456339 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://errata.almalinux.org/9/ALSA-2026-26447.html https://errata.rockylinux.org/RLSA-2026:26447 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.20.5	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:26447 https://access.redhat.com/security/cve/CVE-2026-32283 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2456333 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://bugzilla.redhat.com/show_bug.cgi?id=2456339 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://errata.almalinux.org/9/ALSA-2026-26447.html https://errata.rockylinux.org/RLSA-2026:26447 https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://linux.oracle.com/cve/CVE-2026-32283.html https://linux.oracle.com/errata/ELSA-2026-17075.html https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870 https://www.cve.org/CVERecord?id=CVE-2026-32283
stdlib	CVE-2026-33811	HIGH	v1.20.5	1.25.10, 1.26.3	https://access.redhat.com/security/cve/CVE-2026-33811 https://go.dev/cl/767860 https://go.dev/issue/78803 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-33811.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-33811 https://pkg.go.dev/vuln/GO-2026-4981 https://www.cve.org/CVERecord?id=CVE-2026-33811
stdlib	CVE-2026-33814	HIGH	v1.20.5	1.25.10, 1.26.3	https://github.com/golang/go/issues/78476 https://go-review.googlesource.com/c/go/+/761581 https://go-review.googlesource.com/c/net/+/761640 https://go.dev/cl/761581 https://go.dev/cl/761640 https://go.dev/issue/78476 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-33814.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-33814 https://pkg.go.dev/vuln/GO-2026-4918 https://ubuntu.com/security/notices/USN-8430-1 https://www.cve.org/CVERecord?id=CVE-2026-33814
stdlib	CVE-2026-39820	HIGH	v1.20.5	1.25.10, 1.26.3	https://go.dev/cl/759940 https://go.dev/issue/78566 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39820.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39820 https://pkg.go.dev/vuln/GO-2026-4986
stdlib	CVE-2026-39823	HIGH	v1.20.5	1.25.10, 1.26.3	https://go.dev/cl/769920 https://go.dev/issue/78913 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39823.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39823 https://pkg.go.dev/vuln/GO-2026-4982
stdlib	CVE-2026-39825	HIGH	v1.20.5	1.25.10, 1.26.3	https://go.dev/cl/770541 https://go.dev/issue/78948 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39825.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39825 https://pkg.go.dev/vuln/GO-2026-4976
stdlib	CVE-2026-39836	HIGH	v1.20.5	1.25.10, 1.26.3	https://go.dev/cl/775320 https://go.dev/issue/79006 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39836.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39836 https://pkg.go.dev/vuln/GO-2026-4971
stdlib	CVE-2026-42499	HIGH	v1.20.5	1.25.10, 1.26.3	https://go.dev/cl/771520 https://go.dev/issue/78987 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-42499.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-42499 https://pkg.go.dev/vuln/GO-2026-4977
stdlib	CVE-2026-42504	HIGH	v1.20.5	1.25.11, 1.26.4	https://go.dev/cl/774481 https://go.dev/issue/79217 https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw https://nvd.nist.gov/vuln/detail/CVE-2026-42504 https://pkg.go.dev/vuln/GO-2026-5038
stdlib	CVE-2023-29406	MEDIUM	v1.20.5	1.19.11, 1.20.6	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-29406 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2242871 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:7202 https://github.com/golang/go/commit/312920c00aac9897b2a0693e752390b5b0711a5a (go1.20.6) https://github.com/golang/go/commit/5fa6923b1ea891400153d04ddf1545e23b40041b (go1.19.11) https://github.com/golang/go/issues/60374 https://go.dev/cl/506996 https://go.dev/issue/60374 https://groups.google.com/g/golang-announce/c/2q13H6LEEx0 https://linux.oracle.com/cve/CVE-2023-29406.html https://linux.oracle.com/errata/ELSA-2023-7202.html https://nvd.nist.gov/vuln/detail/CVE-2023-29406 https://pkg.go.dev/vuln/GO-2023-1878 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20230814-0002/ https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://www.cve.org/CVERecord?id=CVE-2023-29406
stdlib	CVE-2023-29409	MEDIUM	v1.20.5	1.19.12, 1.20.7, 1.21.0-rc.4	https://access.redhat.com/errata/RHSA-2023:7766 https://access.redhat.com/security/cve/CVE-2023-29409 https://bugzilla.redhat.com/2228743 https://bugzilla.redhat.com/2237773 https://bugzilla.redhat.com/2237776 https://bugzilla.redhat.com/2237777 https://bugzilla.redhat.com/2237778 https://bugzilla.redhat.com/show_bug.cgi?id=1983596 https://bugzilla.redhat.com/show_bug.cgi?id=1989575 https://bugzilla.redhat.com/show_bug.cgi?id=2132867 https://bugzilla.redhat.com/show_bug.cgi?id=2132868 https://bugzilla.redhat.com/show_bug.cgi?id=2132872 https://bugzilla.redhat.com/show_bug.cgi?id=2228743 https://bugzilla.redhat.com/show_bug.cgi?id=2237773 https://bugzilla.redhat.com/show_bug.cgi?id=2237776 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2244340 https://bugzilla.redhat.com/show_bug.cgi?id=2246840 https://bugzilla.redhat.com/show_bug.cgi?id=2253193 https://bugzilla.redhat.com/show_bug.cgi?id=2253330 https://bugzilla.redhat.com/show_bug.cgi?id=2254210 https://bugzilla.redhat.com/show_bug.cgi?id=2262272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650 https://errata.almalinux.org/9/ALSA-2023-7766.html https://errata.rockylinux.org/RLSA-2024:2988 https://go.dev/cl/515257 https://go.dev/issue/61460 https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ https://linux.oracle.com/cve/CVE-2023-29409.html https://linux.oracle.com/errata/ELSA-2024-2988.html https://nvd.nist.gov/vuln/detail/CVE-2023-29409 https://pkg.go.dev/vuln/GO-2023-1987 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20230831-0010/ https://www.cve.org/CVERecord?id=CVE-2023-29409
stdlib	CVE-2023-39318	MEDIUM	v1.20.5	1.20.8, 1.21.1	https://access.redhat.com/errata/RHSA-2024:2160 https://access.redhat.com/security/cve/CVE-2023-39318 https://bugzilla.redhat.com/2237773 https://bugzilla.redhat.com/2237776 https://bugzilla.redhat.com/2253330 https://bugzilla.redhat.com/show_bug.cgi?id=1983596 https://bugzilla.redhat.com/show_bug.cgi?id=1989575 https://bugzilla.redhat.com/show_bug.cgi?id=2132867 https://bugzilla.redhat.com/show_bug.cgi?id=2132868 https://bugzilla.redhat.com/show_bug.cgi?id=2132872 https://bugzilla.redhat.com/show_bug.cgi?id=2228743 https://bugzilla.redhat.com/show_bug.cgi?id=2237773 https://bugzilla.redhat.com/show_bug.cgi?id=2237776 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2244340 https://bugzilla.redhat.com/show_bug.cgi?id=2246840 https://bugzilla.redhat.com/show_bug.cgi?id=2253193 https://bugzilla.redhat.com/show_bug.cgi?id=2253330 https://bugzilla.redhat.com/show_bug.cgi?id=2254210 https://bugzilla.redhat.com/show_bug.cgi?id=2262272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650 https://errata.almalinux.org/9/ALSA-2024-2160.html https://errata.rockylinux.org/RLSA-2024:2988 https://github.com/golang/go/commit/023b542edf38e2a1f87fcefb9f75ff2f99401b4c (go1.20.8) https://github.com/golang/go/commit/b0e1d3ea26e8e8fce7726690c9ef0597e60739fb (go1.21.1) https://go.dev/cl/526156 https://go.dev/issue/62196 https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ https://linux.oracle.com/cve/CVE-2023-39318.html https://linux.oracle.com/errata/ELSA-2024-2988.html https://nvd.nist.gov/vuln/detail/CVE-2023-39318 https://pkg.go.dev/vuln/GO-2023-2041 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20231020-0009/ https://ubuntu.com/security/notices/USN-6574-1 https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://vuln.go.dev/ID/GO-2023-2041.json https://www.cve.org/CVERecord?id=CVE-2023-39318
stdlib	CVE-2023-39319	MEDIUM	v1.20.5	1.20.8, 1.21.1	https://access.redhat.com/errata/RHSA-2024:2160 https://access.redhat.com/security/cve/CVE-2023-39319 https://bugzilla.redhat.com/2237773 https://bugzilla.redhat.com/2237776 https://bugzilla.redhat.com/2253330 https://bugzilla.redhat.com/show_bug.cgi?id=1983596 https://bugzilla.redhat.com/show_bug.cgi?id=1989575 https://bugzilla.redhat.com/show_bug.cgi?id=2132867 https://bugzilla.redhat.com/show_bug.cgi?id=2132868 https://bugzilla.redhat.com/show_bug.cgi?id=2132872 https://bugzilla.redhat.com/show_bug.cgi?id=2228743 https://bugzilla.redhat.com/show_bug.cgi?id=2237773 https://bugzilla.redhat.com/show_bug.cgi?id=2237776 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2244340 https://bugzilla.redhat.com/show_bug.cgi?id=2246840 https://bugzilla.redhat.com/show_bug.cgi?id=2253193 https://bugzilla.redhat.com/show_bug.cgi?id=2253330 https://bugzilla.redhat.com/show_bug.cgi?id=2254210 https://bugzilla.redhat.com/show_bug.cgi?id=2262272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650 https://errata.almalinux.org/9/ALSA-2024-2160.html https://errata.rockylinux.org/RLSA-2024:2988 https://github.com/golang/go/commit/2070531d2f53df88e312edace6c8dfc9686ab2f5 (go1.20.8) https://github.com/golang/go/commit/bbd043ff0d6d59f1a9232d31ecd5eacf6507bf6a (go1.21.1) https://go.dev/cl/526157 https://go.dev/issue/62197 https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ https://linux.oracle.com/cve/CVE-2023-39319.html https://linux.oracle.com/errata/ELSA-2024-2988.html https://nvd.nist.gov/vuln/detail/CVE-2023-39319 https://pkg.go.dev/vuln/GO-2023-2043 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20231020-0009/ https://ubuntu.com/security/notices/USN-6574-1 https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://vuln.go.dev/ID/GO-2023-2043.json https://www.cve.org/CVERecord?id=CVE-2023-39319
stdlib	CVE-2023-39326	MEDIUM	v1.20.5	1.20.12, 1.21.5	https://access.redhat.com/errata/RHSA-2024:2272 https://access.redhat.com/security/cve/CVE-2023-39326 https://bugzilla.redhat.com/2253193 https://bugzilla.redhat.com/2253330 https://bugzilla.redhat.com/show_bug.cgi?id=1983596 https://bugzilla.redhat.com/show_bug.cgi?id=1989575 https://bugzilla.redhat.com/show_bug.cgi?id=2132867 https://bugzilla.redhat.com/show_bug.cgi?id=2132868 https://bugzilla.redhat.com/show_bug.cgi?id=2132872 https://bugzilla.redhat.com/show_bug.cgi?id=2228743 https://bugzilla.redhat.com/show_bug.cgi?id=2237773 https://bugzilla.redhat.com/show_bug.cgi?id=2237776 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2244340 https://bugzilla.redhat.com/show_bug.cgi?id=2246840 https://bugzilla.redhat.com/show_bug.cgi?id=2253193 https://bugzilla.redhat.com/show_bug.cgi?id=2253330 https://bugzilla.redhat.com/show_bug.cgi?id=2254210 https://bugzilla.redhat.com/show_bug.cgi?id=2262272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650 https://errata.almalinux.org/9/ALSA-2024-2272.html https://errata.rockylinux.org/RLSA-2024:2988 https://github.com/golang/go/commit/6446af942e2e2b161c4ec1b60d9703a2b55dc4dd (go1.20.12) https://github.com/golang/go/commit/ec8c526e4be720e94b98ca509e6364f0efaf28f7 (go1.21.5) https://go.dev/cl/547335 https://go.dev/issue/64433 https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ https://linux.oracle.com/cve/CVE-2023-39326.html https://linux.oracle.com/errata/ELSA-2024-2988.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIU6HOGV6RRIKWM57LOXQA75BGZSIH6G/ https://nvd.nist.gov/vuln/detail/CVE-2023-39326 https://pkg.go.dev/vuln/GO-2023-2382 https://ubuntu.com/security/notices/USN-6574-1 https://www.cve.org/CVERecord?id=CVE-2023-39326
stdlib	CVE-2023-45284	MEDIUM	v1.20.5	1.20.11, 1.21.4	https://go.dev/cl/540277 https://go.dev/issue/63713 https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY https://nvd.nist.gov/vuln/detail/CVE-2023-45284 https://pkg.go.dev/vuln/GO-2023-2186
stdlib	CVE-2023-45289	MEDIUM	v1.20.5	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:2724 https://access.redhat.com/security/cve/CVE-2023-45289 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268018 https://bugzilla.redhat.com/2268019 https://bugzilla.redhat.com/2268273 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268018 https://bugzilla.redhat.com/show_bug.cgi?id=2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268273 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783 https://errata.almalinux.org/9/ALSA-2024-2724.html https://errata.rockylinux.org/RLSA-2024:2724 https://github.com/golang/go/commit/20586c0dbe03d144f914155f879fa5ee287591a1 (go1.21.8) https://github.com/golang/go/commit/3a855208e3efed2e9d7c20ad023f1fa78afcc0be (go1.22.1) https://github.com/golang/go/issues/65065 https://go.dev/cl/569340 https://go.dev/issue/65065 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2023-45289.html https://linux.oracle.com/errata/ELSA-2024-3346.html https://nvd.nist.gov/vuln/detail/CVE-2023-45289 https://pkg.go.dev/vuln/GO-2024-2600 https://security.netapp.com/advisory/ntap-20240329-0006/ https://ubuntu.com/security/notices/USN-6886-1 https://www.cve.org/CVERecord?id=CVE-2023-45289
stdlib	CVE-2023-45290	MEDIUM	v1.20.5	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:9135 https://access.redhat.com/security/cve/CVE-2023-45290 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268022 https://bugzilla.redhat.com/2279814 https://bugzilla.redhat.com/2295310 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268022 https://bugzilla.redhat.com/show_bug.cgi?id=2279814 https://bugzilla.redhat.com/show_bug.cgi?id=2295310 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791 https://errata.almalinux.org/9/ALSA-2024-9135.html https://errata.rockylinux.org/RLSA-2024:9135 https://github.com/golang/go/commit/041a47712e765e94f86d841c3110c840e76d8f82 (go1.22.1) https://github.com/golang/go/commit/bf80213b121074f4ad9b449410a4d13bae5e9be0 (go1.21.8) https://github.com/golang/go/issues/65383 https://go.dev/cl/569341 https://go.dev/issue/65383 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2023-45290.html https://linux.oracle.com/errata/ELSA-2024-8038.html https://nvd.nist.gov/vuln/detail/CVE-2023-45290 https://pkg.go.dev/vuln/GO-2024-2599 https://security.netapp.com/advisory/ntap-20240329-0004 https://security.netapp.com/advisory/ntap-20240329-0004/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2023-45290
stdlib	CVE-2024-24783	MEDIUM	v1.20.5	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:6195 https://access.redhat.com/security/cve/CVE-2024-24783 https://bugzilla.redhat.com/2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268018 https://bugzilla.redhat.com/show_bug.cgi?id=2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268273 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783 https://errata.almalinux.org/9/ALSA-2024-6195.html https://errata.rockylinux.org/RLSA-2024:2724 https://github.com/advisories/GHSA-3q2c-pvp5-3cqp https://github.com/golang/go/commit/337b8e9cbfa749d9d5c899e0dc358e2208d5e54f (go1.22.1) https://github.com/golang/go/commit/be5b52bea674190ef7de272664be6c7ae93ec5a0 (go1.21.8) https://github.com/golang/go/issues/65390 https://go.dev/cl/569339 https://go.dev/issue/65390 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2024-24783.html https://linux.oracle.com/errata/ELSA-2024-6969.html https://nvd.nist.gov/vuln/detail/CVE-2024-24783 https://pkg.go.dev/vuln/GO-2024-2598 https://security.netapp.com/advisory/ntap-20240329-0005 https://security.netapp.com/advisory/ntap-20240329-0005/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-24783
stdlib	CVE-2024-24784	MEDIUM	v1.20.5	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:2562 https://access.redhat.com/security/cve/CVE-2024-24784 https://bugzilla.redhat.com/2262921 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268018 https://bugzilla.redhat.com/2268019 https://bugzilla.redhat.com/2268021 https://bugzilla.redhat.com/2268022 https://bugzilla.redhat.com/2268273 https://bugzilla.redhat.com/show_bug.cgi?id=2262921 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268018 https://bugzilla.redhat.com/show_bug.cgi?id=2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268021 https://bugzilla.redhat.com/show_bug.cgi?id=2268022 https://bugzilla.redhat.com/show_bug.cgi?id=2268273 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1394 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24784 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785 https://errata.almalinux.org/9/ALSA-2024-2562.html https://errata.rockylinux.org/RLSA-2024:2562 https://github.com/golang/go/commit/263c059b09fdd40d9dd945f2ecb20c89ea28efe5 (go1.21.8) https://github.com/golang/go/commit/5330cd225ba54c7dc78c1b46dcdf61a4671a632c (go1.22.1) https://github.com/golang/go/issues/65083 https://go.dev/cl/555596 https://go.dev/issue/65083 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2024-24784.html https://linux.oracle.com/errata/ELSA-2024-6969.html https://nvd.nist.gov/vuln/detail/CVE-2024-24784 https://pkg.go.dev/vuln/GO-2024-2609 https://security.netapp.com/advisory/ntap-20240329-0007/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-24784
stdlib	CVE-2024-24785	MEDIUM	v1.20.5	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:9135 https://access.redhat.com/security/cve/CVE-2024-24785 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268022 https://bugzilla.redhat.com/2279814 https://bugzilla.redhat.com/2295310 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268022 https://bugzilla.redhat.com/show_bug.cgi?id=2279814 https://bugzilla.redhat.com/show_bug.cgi?id=2295310 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791 https://errata.almalinux.org/9/ALSA-2024-9135.html https://errata.rockylinux.org/RLSA-2024:9135 https://github.com/golang/go/commit/056b0edcb8c152152021eebf4cf42adbfbe77992 (go1.22.1) https://github.com/golang/go/commit/3643147a29352ca2894fd5d0d2069bc4b4335a7e (go1.21.8) https://github.com/golang/go/issues/65697 https://go.dev/cl/564196 https://go.dev/issue/65697 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2024-24785.html https://linux.oracle.com/errata/ELSA-2026-3428.html https://nvd.nist.gov/vuln/detail/CVE-2024-24785 https://pkg.go.dev/vuln/GO-2024-2610 https://security.netapp.com/advisory/ntap-20240329-0008/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://vuln.go.dev/ID/GO-2024-2610.json https://www.cve.org/CVERecord?id=CVE-2024-24785
stdlib	CVE-2024-24789	MEDIUM	v1.20.5	1.21.11, 1.22.4	http://www.openwall.com/lists/oss-security/2024/06/04/1 https://access.redhat.com/errata/RHSA-2024:9115 https://access.redhat.com/security/cve/CVE-2024-24789 https://bugzilla.redhat.com/2279814 https://bugzilla.redhat.com/2292668 https://bugzilla.redhat.com/2292787 https://bugzilla.redhat.com/2294000 https://bugzilla.redhat.com/2295310 https://bugzilla.redhat.com/show_bug.cgi?id=2144983 https://bugzilla.redhat.com/show_bug.cgi?id=2274767 https://bugzilla.redhat.com/show_bug.cgi?id=2292668 https://bugzilla.redhat.com/show_bug.cgi?id=2295310 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4122 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24789 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727 https://errata.almalinux.org/9/ALSA-2024-9115.html https://errata.rockylinux.org/RLSA-2024:9102 https://github.com/golang/go/commit/c8e40338cf00f3c1d86c8fb23863ad67a4c72bcc (1.21) https://github.com/golang/go/commit/cf501ac0c5fe351a8582d20b43562027927906e7 (1.22) https://github.com/golang/go/issues/66869 https://go.dev/cl/585397 https://go.dev/issue/66869 https://groups.google.com/g/golang-announce/c/XbxouI9gY7k https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ https://linux.oracle.com/cve/CVE-2024-24789.html https://linux.oracle.com/errata/ELSA-2024-9115.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5YAEIA6IUHUNGJ7AIXXPQT6D2GYENX7/ https://nvd.nist.gov/vuln/detail/CVE-2024-24789 https://pkg.go.dev/vuln/GO-2024-2888 https://security.netapp.com/advisory/ntap-20250131-0008/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-24789
34 other vulnerabilities found...
No Misconfigurations found

usr/local/bin/spruce (gobinary)¶

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
stdlib	CVE-2023-24538	CRITICAL	v1.20.2	1.19.8, 1.20.3	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-24538 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2163037 https://bugzilla.redhat.com/show_bug.cgi?id=2174485 https://bugzilla.redhat.com/show_bug.cgi?id=2175721 https://bugzilla.redhat.com/show_bug.cgi?id=2178358 https://bugzilla.redhat.com/show_bug.cgi?id=2178488 https://bugzilla.redhat.com/show_bug.cgi?id=2178492 https://bugzilla.redhat.com/show_bug.cgi?id=2182883 https://bugzilla.redhat.com/show_bug.cgi?id=2182884 https://bugzilla.redhat.com/show_bug.cgi?id=2184481 https://bugzilla.redhat.com/show_bug.cgi?id=2184482 https://bugzilla.redhat.com/show_bug.cgi?id=2184483 https://bugzilla.redhat.com/show_bug.cgi?id=2184484 https://bugzilla.redhat.com/show_bug.cgi?id=2196026 https://bugzilla.redhat.com/show_bug.cgi?id=2196027 https://bugzilla.redhat.com/show_bug.cgi?id=2196029 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2228689 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:6939 https://github.com/golang/go/commit/20374d1d759bc4e17486bde1cb9dca5be37d9e52 (go1.20.3) https://github.com/golang/go/commit/b1e3ecfa06b67014429a197ec5e134ce4303ad9b (go1.19.8) https://github.com/golang/go/issues/59234 https://go.dev/cl/482079 https://go.dev/issue/59234 https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8 https://linux.oracle.com/cve/CVE-2023-24538.html https://linux.oracle.com/errata/ELSA-2023-6939.html https://nvd.nist.gov/vuln/detail/CVE-2023-24538 https://pkg.go.dev/vuln/GO-2023-1703 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20241115-0007/ https://ubuntu.com/security/notices/USN-6038-1 https://ubuntu.com/security/notices/USN-6038-2 https://ubuntu.com/security/notices/USN-6140-1 https://ubuntu.com/security/notices/USN-7061-1 https://www.cve.org/CVERecord?id=CVE-2023-24538
stdlib	CVE-2023-24540	CRITICAL	v1.20.2	1.19.9, 1.20.4	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-24540 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2163037 https://bugzilla.redhat.com/show_bug.cgi?id=2174485 https://bugzilla.redhat.com/show_bug.cgi?id=2175721 https://bugzilla.redhat.com/show_bug.cgi?id=2178358 https://bugzilla.redhat.com/show_bug.cgi?id=2178488 https://bugzilla.redhat.com/show_bug.cgi?id=2178492 https://bugzilla.redhat.com/show_bug.cgi?id=2182883 https://bugzilla.redhat.com/show_bug.cgi?id=2182884 https://bugzilla.redhat.com/show_bug.cgi?id=2184481 https://bugzilla.redhat.com/show_bug.cgi?id=2184482 https://bugzilla.redhat.com/show_bug.cgi?id=2184483 https://bugzilla.redhat.com/show_bug.cgi?id=2184484 https://bugzilla.redhat.com/show_bug.cgi?id=2196026 https://bugzilla.redhat.com/show_bug.cgi?id=2196027 https://bugzilla.redhat.com/show_bug.cgi?id=2196029 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2228689 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:6939 https://github.com/golang/go/commit/4a28cad66655ee01c6e944271e23c33cab021765 (go1.20.4) https://github.com/golang/go/commit/ce7bd33345416e6d8cac901792060591cafc2797 (go1.19.9) https://github.com/golang/go/issues/59721 https://go.dev/cl/491616 https://go.dev/issue/59721 https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU https://linux.oracle.com/cve/CVE-2023-24540.html https://linux.oracle.com/errata/ELSA-2023-6939.html https://nvd.nist.gov/vuln/detail/CVE-2023-24540 https://pkg.go.dev/vuln/GO-2023-1752 https://security.netapp.com/advisory/ntap-20241115-0008/ https://ubuntu.com/security/notices/USN-6140-1 https://www.cve.org/CVERecord?id=CVE-2023-24540
stdlib	CVE-2024-24790	CRITICAL	v1.20.2	1.21.11, 1.22.4	http://www.openwall.com/lists/oss-security/2024/06/04/1 https://access.redhat.com/errata/RHSA-2025:7256 https://access.redhat.com/security/cve/CVE-2024-24790 https://bugzilla.redhat.com/2237777 https://bugzilla.redhat.com/2237778 https://bugzilla.redhat.com/2279814 https://bugzilla.redhat.com/2292787 https://bugzilla.redhat.com/2295310 https://bugzilla.redhat.com/2315719 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2279814 https://bugzilla.redhat.com/show_bug.cgi?id=2292787 https://bugzilla.redhat.com/show_bug.cgi?id=2295310 https://bugzilla.redhat.com/show_bug.cgi?id=2315719 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9355 https://errata.almalinux.org/9/ALSA-2025-7256.html https://errata.rockylinux.org/RLSA-2025:7256 https://github.com/golang/go/commit/051bdf3fd12a40307606ff9381138039c5f452f0 (1.21) https://github.com/golang/go/commit/12d5810cdb1f73cf23d7a86462143e9463317fca (1.22) https://github.com/golang/go/issues/67680 https://go.dev/cl/590316 https://go.dev/issue/67680 https://groups.google.com/g/golang-announce/c/XbxouI9gY7k https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ https://linux.oracle.com/cve/CVE-2024-24790.html https://linux.oracle.com/errata/ELSA-2025-7256.html https://nvd.nist.gov/vuln/detail/CVE-2024-24790 https://pkg.go.dev/vuln/GO-2024-2887 https://security.netapp.com/advisory/ntap-20240905-0002/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://www.cve.org/CVERecord?id=CVE-2024-24790
stdlib	CVE-2025-68121	CRITICAL	v1.20.2	1.24.13, 1.25.7, 1.26.0-rc.3	https://access.redhat.com/errata/RHSA-2026:4177 https://access.redhat.com/security/cve/CVE-2025-68121 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-4177.html https://errata.rockylinux.org/RLSA-2026:4177 https://github.com/golang/go/issues/77113 https://go.dev/cl/737700 https://go.dev/issue/77217 https://groups.google.com/g/golang-announce/c/K09ubi9FQFk https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://linux.oracle.com/cve/CVE-2025-68121.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-68121 https://pkg.go.dev/vuln/GO-2026-4337 https://www.cve.org/CVERecord?id=CVE-2025-68121
stdlib	CVE-2023-24534	HIGH	v1.20.2	1.19.8, 1.20.3	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-24534 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2163037 https://bugzilla.redhat.com/show_bug.cgi?id=2174485 https://bugzilla.redhat.com/show_bug.cgi?id=2175721 https://bugzilla.redhat.com/show_bug.cgi?id=2178358 https://bugzilla.redhat.com/show_bug.cgi?id=2178488 https://bugzilla.redhat.com/show_bug.cgi?id=2178492 https://bugzilla.redhat.com/show_bug.cgi?id=2182883 https://bugzilla.redhat.com/show_bug.cgi?id=2182884 https://bugzilla.redhat.com/show_bug.cgi?id=2184481 https://bugzilla.redhat.com/show_bug.cgi?id=2184482 https://bugzilla.redhat.com/show_bug.cgi?id=2184483 https://bugzilla.redhat.com/show_bug.cgi?id=2184484 https://bugzilla.redhat.com/show_bug.cgi?id=2196026 https://bugzilla.redhat.com/show_bug.cgi?id=2196027 https://bugzilla.redhat.com/show_bug.cgi?id=2196029 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2228689 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:6939 https://github.com/golang/go/commit/3991f6c41c7dfd167e889234c0cf1d840475e93c (go1.20.3) https://github.com/golang/go/commit/d6759e7a059f4208f07aa781402841d7ddaaef96 (go1.19.8) https://go.dev/cl/481994 https://go.dev/issue/58975 https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8 https://linux.oracle.com/cve/CVE-2023-24534.html https://linux.oracle.com/errata/ELSA-2023-6939.html https://nvd.nist.gov/vuln/detail/CVE-2023-24534 https://pkg.go.dev/vuln/GO-2023-1704 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20230526-0007/ https://ubuntu.com/security/notices/USN-6038-1 https://ubuntu.com/security/notices/USN-6038-2 https://ubuntu.com/security/notices/USN-6140-1 https://www.cve.org/CVERecord?id=CVE-2023-24534
stdlib	CVE-2023-24536	HIGH	v1.20.2	1.19.8, 1.20.3	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-24536 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2163037 https://bugzilla.redhat.com/show_bug.cgi?id=2174485 https://bugzilla.redhat.com/show_bug.cgi?id=2175721 https://bugzilla.redhat.com/show_bug.cgi?id=2178358 https://bugzilla.redhat.com/show_bug.cgi?id=2178488 https://bugzilla.redhat.com/show_bug.cgi?id=2178492 https://bugzilla.redhat.com/show_bug.cgi?id=2182883 https://bugzilla.redhat.com/show_bug.cgi?id=2182884 https://bugzilla.redhat.com/show_bug.cgi?id=2184481 https://bugzilla.redhat.com/show_bug.cgi?id=2184482 https://bugzilla.redhat.com/show_bug.cgi?id=2184483 https://bugzilla.redhat.com/show_bug.cgi?id=2184484 https://bugzilla.redhat.com/show_bug.cgi?id=2196026 https://bugzilla.redhat.com/show_bug.cgi?id=2196027 https://bugzilla.redhat.com/show_bug.cgi?id=2196029 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2228689 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:6939 https://github.com/golang/go/commit/7917b5f31204528ea72e0629f0b7d52b35b27538 (go.1.19.8) https://github.com/golang/go/commit/bf8c7c575c8a552d9d79deb29e80854dc88528d0 (go1.20.3) https://go.dev/cl/482075 https://go.dev/cl/482076 https://go.dev/cl/482077 https://go.dev/issue/59153 https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8 https://linux.oracle.com/cve/CVE-2023-24536.html https://linux.oracle.com/errata/ELSA-2023-6939.html https://nvd.nist.gov/vuln/detail/CVE-2023-24536 https://pkg.go.dev/vuln/GO-2023-1705 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20230526-0007/ https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2023-24536
stdlib	CVE-2023-24537	HIGH	v1.20.2	1.19.8, 1.20.3	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-24537 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2163037 https://bugzilla.redhat.com/show_bug.cgi?id=2174485 https://bugzilla.redhat.com/show_bug.cgi?id=2175721 https://bugzilla.redhat.com/show_bug.cgi?id=2178358 https://bugzilla.redhat.com/show_bug.cgi?id=2178488 https://bugzilla.redhat.com/show_bug.cgi?id=2178492 https://bugzilla.redhat.com/show_bug.cgi?id=2182883 https://bugzilla.redhat.com/show_bug.cgi?id=2182884 https://bugzilla.redhat.com/show_bug.cgi?id=2184481 https://bugzilla.redhat.com/show_bug.cgi?id=2184482 https://bugzilla.redhat.com/show_bug.cgi?id=2184483 https://bugzilla.redhat.com/show_bug.cgi?id=2184484 https://bugzilla.redhat.com/show_bug.cgi?id=2196026 https://bugzilla.redhat.com/show_bug.cgi?id=2196027 https://bugzilla.redhat.com/show_bug.cgi?id=2196029 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2228689 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:6939 https://github.com/golang/go/commit/126a1d02da82f93ede7ce0bd8d3c51ef627f2104 (go1.19.8) https://github.com/golang/go/commit/e7c4b07ecf6b367f1afc9cc48cde963829dd0aab (go1.20.3) https://github.com/golang/go/issues/59180 https://go.dev/cl/482078 https://go.dev/issue/59180 https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8 https://linux.oracle.com/cve/CVE-2023-24537.html https://linux.oracle.com/errata/ELSA-2023-6939.html https://nvd.nist.gov/vuln/detail/CVE-2023-24537 https://pkg.go.dev/vuln/GO-2023-1702 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20241129-0004/ https://ubuntu.com/security/notices/USN-6038-1 https://ubuntu.com/security/notices/USN-6038-2 https://ubuntu.com/security/notices/USN-6140-1 https://www.cve.org/CVERecord?id=CVE-2023-24537
stdlib	CVE-2023-24539	HIGH	v1.20.2	1.19.9, 1.20.4	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-24539 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2163037 https://bugzilla.redhat.com/show_bug.cgi?id=2174485 https://bugzilla.redhat.com/show_bug.cgi?id=2175721 https://bugzilla.redhat.com/show_bug.cgi?id=2178358 https://bugzilla.redhat.com/show_bug.cgi?id=2178488 https://bugzilla.redhat.com/show_bug.cgi?id=2178492 https://bugzilla.redhat.com/show_bug.cgi?id=2182883 https://bugzilla.redhat.com/show_bug.cgi?id=2182884 https://bugzilla.redhat.com/show_bug.cgi?id=2184481 https://bugzilla.redhat.com/show_bug.cgi?id=2184482 https://bugzilla.redhat.com/show_bug.cgi?id=2184483 https://bugzilla.redhat.com/show_bug.cgi?id=2184484 https://bugzilla.redhat.com/show_bug.cgi?id=2196026 https://bugzilla.redhat.com/show_bug.cgi?id=2196027 https://bugzilla.redhat.com/show_bug.cgi?id=2196029 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2228689 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:6939 https://github.com/golang/go/commit/090590fdccc8442728aa31601927da1bf2ef1288 (go1.20.4) https://github.com/golang/go/commit/e49282327b05192e46086bf25fd3ac691205fe80 (go1.19.9) https://github.com/golang/go/issues/59720 https://go.dev/cl/491615 https://go.dev/issue/59720 https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU https://linux.oracle.com/cve/CVE-2023-24539.html https://linux.oracle.com/errata/ELSA-2023-6939.html https://nvd.nist.gov/vuln/detail/CVE-2023-24539 https://pkg.go.dev/vuln/GO-2023-1751 https://security.netapp.com/advisory/ntap-20241129-0005/ https://ubuntu.com/security/notices/USN-6140-1 https://www.cve.org/CVERecord?id=CVE-2023-24539
stdlib	CVE-2023-29400	HIGH	v1.20.2	1.19.9, 1.20.4	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-29400 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2163037 https://bugzilla.redhat.com/show_bug.cgi?id=2174485 https://bugzilla.redhat.com/show_bug.cgi?id=2175721 https://bugzilla.redhat.com/show_bug.cgi?id=2178358 https://bugzilla.redhat.com/show_bug.cgi?id=2178488 https://bugzilla.redhat.com/show_bug.cgi?id=2178492 https://bugzilla.redhat.com/show_bug.cgi?id=2182883 https://bugzilla.redhat.com/show_bug.cgi?id=2182884 https://bugzilla.redhat.com/show_bug.cgi?id=2184481 https://bugzilla.redhat.com/show_bug.cgi?id=2184482 https://bugzilla.redhat.com/show_bug.cgi?id=2184483 https://bugzilla.redhat.com/show_bug.cgi?id=2184484 https://bugzilla.redhat.com/show_bug.cgi?id=2196026 https://bugzilla.redhat.com/show_bug.cgi?id=2196027 https://bugzilla.redhat.com/show_bug.cgi?id=2196029 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2228689 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:6939 https://github.com/golang/go/commit/337dd75343145b74ed2073d793322eb4103b56ad (go1.20.4) https://github.com/golang/go/commit/9db0e74f606b8afb28cc71d4b1c8b4ed24cabbf5 (go1.19.9) https://github.com/golang/go/issues/59722 https://go.dev/cl/491617 https://go.dev/issue/59722 https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU https://linux.oracle.com/cve/CVE-2023-29400.html https://linux.oracle.com/errata/ELSA-2023-6939.html https://nvd.nist.gov/vuln/detail/CVE-2023-29400 https://pkg.go.dev/vuln/GO-2023-1753 https://security.netapp.com/advisory/ntap-20241213-0005/ https://ubuntu.com/security/notices/USN-6140-1 https://www.cve.org/CVERecord?id=CVE-2023-29400
stdlib	CVE-2023-29403	HIGH	v1.20.2	1.19.10, 1.20.5	https://access.redhat.com/errata/RHSA-2023:3923 https://access.redhat.com/security/cve/CVE-2023-29403 https://bugzilla.redhat.com/2216965 https://bugzilla.redhat.com/2217562 https://bugzilla.redhat.com/2217565 https://bugzilla.redhat.com/2217569 https://bugzilla.redhat.com/show_bug.cgi?id=2216965 https://bugzilla.redhat.com/show_bug.cgi?id=2217562 https://bugzilla.redhat.com/show_bug.cgi?id=2217565 https://bugzilla.redhat.com/show_bug.cgi?id=2217569 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29402 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29403 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29405 https://errata.almalinux.org/9/ALSA-2023-3923.html https://errata.rockylinux.org/RLSA-2023:3923 https://github.com/golang/go/commit/36144ba429ef2650940c72e7a0b932af3612d420 (go1.20.5) https://github.com/golang/go/commit/a7b1cd452ddc69a6606c2f35ac5786dc892e62cb (go1.19.10) https://github.com/golang/go/issues/60272 https://go.dev/cl/501223 https://go.dev/issue/60272 https://groups.google.com/g/golang-announce/c/q5135a9d924 https://groups.google.com/g/golang-announce/c/q5135a9d924/m/j0ZoAJOHAwAJ https://linux.oracle.com/cve/CVE-2023-29403.html https://linux.oracle.com/errata/ELSA-2023-3923.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBS3IIK6ADV24C5ULQU55QLT2UE762ZX/ https://nvd.nist.gov/vuln/detail/CVE-2023-29403 https://pkg.go.dev/vuln/GO-2023-1840 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20241220-0009/ https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://www.cve.org/CVERecord?id=CVE-2023-29403
stdlib	CVE-2023-39325	HIGH	v1.20.2	1.20.10, 1.21.3	golang.org/x/net https://access.redhat.com/errata/RHSA-2023:6077 https://access.redhat.com/security/cve/CVE-2023-39325 https://access.redhat.com/security/cve/CVE-2023-44487 https://bugzilla.redhat.com/2242803 https://bugzilla.redhat.com/2243296 https://bugzilla.redhat.com/show_bug.cgi?id=2242803 https://bugzilla.redhat.com/show_bug.cgi?id=2243296 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487 https://errata.almalinux.org/9/ALSA-2023-6077.html https://errata.rockylinux.org/RLSA-2023:6077 https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21] https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20] https://github.com/golang/go/issues/63417 https://go.dev/cl/534215 https://go.dev/cl/534235 https://go.dev/issue/63417 https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ https://linux.oracle.com/cve/CVE-2023-39325.html https://linux.oracle.com/errata/ELSA-2023-5867.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/ https://nvd.nist.gov/vuln/detail/CVE-2023-39325 https://pkg.go.dev/vuln/GO-2023-2102 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20231110-0008 https://security.netapp.com/advisory/ntap-20231110-0008/ https://ubuntu.com/security/notices/USN-6574-1 https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 https://www.cve.org/CVERecord?id=CVE-2023-39325
stdlib	CVE-2023-45283	HIGH	v1.20.2	1.20.11, 1.21.4, 1.20.12, 1.21.5	http://www.openwall.com/lists/oss-security/2023/12/05/2 https://go.dev/cl/540277 https://go.dev/cl/541175 https://go.dev/issue/63713 https://go.dev/issue/64028 https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ https://nvd.nist.gov/vuln/detail/CVE-2023-45283 https://pkg.go.dev/vuln/GO-2023-2185 https://security.netapp.com/advisory/ntap-20231214-0008/
stdlib	CVE-2023-45288	HIGH	v1.20.2	1.21.9, 1.22.2	http://www.openwall.com/lists/oss-security/2024/04/03/16 http://www.openwall.com/lists/oss-security/2024/04/05/4 https://access.redhat.com/errata/RHSA-2024:2724 https://access.redhat.com/security/cve/CVE-2023-45288 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268018 https://bugzilla.redhat.com/2268019 https://bugzilla.redhat.com/2268273 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268018 https://bugzilla.redhat.com/show_bug.cgi?id=2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268273 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783 https://errata.almalinux.org/9/ALSA-2024-2724.html https://errata.rockylinux.org/RLSA-2024:2724 https://go.dev/cl/576155 https://go.dev/issue/65051 https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M https://kb.cert.org/vuls/id/421644 https://linux.oracle.com/cve/CVE-2023-45288.html https://linux.oracle.com/errata/ELSA-2024-3346.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/ https://nowotarski.info/http2-continuation-flood-technical-details https://nowotarski.info/http2-continuation-flood/ https://nvd.nist.gov/vuln/detail/CVE-2023-45288 https://pkg.go.dev/vuln/GO-2024-2687 https://security.netapp.com/advisory/ntap-20240419-0009 https://security.netapp.com/advisory/ntap-20240419-0009/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2023-45288 https://www.kb.cert.org/vuls/id/421644
stdlib	CVE-2024-34156	HIGH	v1.20.2	1.22.7, 1.23.1	https://access.redhat.com/errata/RHSA-2025:3773 https://access.redhat.com/security/cve/CVE-2024-34156 https://bugzilla.redhat.com/2310528 https://bugzilla.redhat.com/show_bug.cgi?id=2310528 https://bugzilla.redhat.com/show_bug.cgi?id=2341750 https://bugzilla.redhat.com/show_bug.cgi?id=2341751 https://bugzilla.redhat.com/show_bug.cgi?id=2344219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866 https://errata.almalinux.org/9/ALSA-2025-3773.html https://errata.rockylinux.org/RLSA-2025:3773 https://github.com/golang/go/commit/2092294f2b097c5828f4eace6c98a322c1510b01 (go1.22.7) https://github.com/golang/go/commit/fa8ff1a46deb6c816304441ec6740ec112e19012 (go1.23.1) https://go.dev/cl/611239 https://go.dev/issue/69139 https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc https://groups.google.com/g/golang-dev/c/S9POB9NCTdk https://linux.oracle.com/cve/CVE-2024-34156.html https://linux.oracle.com/errata/ELSA-2025-3773.html https://nvd.nist.gov/vuln/detail/CVE-2024-34156 https://pkg.go.dev/vuln/GO-2024-3106 https://security.netapp.com/advisory/ntap-20240926-0004/ https://ubuntu.com/security/notices/USN-7081-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-34156
stdlib	CVE-2025-61726	HIGH	v1.20.2	1.24.12, 1.25.6	https://access.redhat.com/errata/RHSA-2026:4177 https://access.redhat.com/security/cve/CVE-2025-61726 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-4177.html https://errata.rockylinux.org/RLSA-2026:4177 https://go.dev/cl/736712 https://go.dev/issue/77101 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://linux.oracle.com/cve/CVE-2025-61726.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-61726 https://pkg.go.dev/vuln/GO-2026-4341 https://www.cve.org/CVERecord?id=CVE-2025-61726
stdlib	CVE-2025-61729	HIGH	v1.20.2	1.24.11, 1.25.5	https://access.redhat.com/errata/RHSA-2026:3928 https://access.redhat.com/security/cve/CVE-2025-61729 https://bugzilla.redhat.com/2418462 https://bugzilla.redhat.com/2434432 https://bugzilla.redhat.com/2437111 https://bugzilla.redhat.com/show_bug.cgi?id=2418462 https://bugzilla.redhat.com/show_bug.cgi?id=2434432 https://bugzilla.redhat.com/show_bug.cgi?id=2437111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61726 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61729 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68121 https://errata.almalinux.org/9/ALSA-2026-3928.html https://errata.rockylinux.org/RLSA-2026:3928 https://go.dev/cl/725920 https://go.dev/issue/76445 https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 https://linux.oracle.com/cve/CVE-2025-61729.html https://linux.oracle.com/errata/ELSA-2026-5146.html https://nvd.nist.gov/vuln/detail/CVE-2025-61729 https://pkg.go.dev/vuln/GO-2025-4155 https://www.cve.org/CVERecord?id=CVE-2025-61729
stdlib	CVE-2026-25679	HIGH	v1.20.2	1.25.8, 1.26.1	https://access.redhat.com/errata/RHSA-2026:9044 https://access.redhat.com/security/cve/CVE-2026-25679 https://bugzilla.redhat.com/2445356 https://bugzilla.redhat.com/show_bug.cgi?id=2445356 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25679 https://errata.almalinux.org/9/ALSA-2026-9044.html https://errata.rockylinux.org/RLSA-2026:9044 https://go.dev/cl/752180 https://go.dev/issue/77578 https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk https://linux.oracle.com/cve/CVE-2026-25679.html https://linux.oracle.com/errata/ELSA-2026-9044.html https://nvd.nist.gov/vuln/detail/CVE-2026-25679 https://pkg.go.dev/vuln/GO-2026-4601 https://www.cve.org/CVERecord?id=CVE-2026-25679
stdlib	CVE-2026-32280	HIGH	v1.20.2	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:26447 https://access.redhat.com/security/cve/CVE-2026-32280 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2456333 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://bugzilla.redhat.com/show_bug.cgi?id=2456339 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://errata.almalinux.org/9/ALSA-2026-26447.html https://errata.rockylinux.org/RLSA-2026:26447 https://go.dev/cl/758320 https://go.dev/issue/78282 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://linux.oracle.com/cve/CVE-2026-32280.html https://linux.oracle.com/errata/ELSA-2026-16875.html https://nvd.nist.gov/vuln/detail/CVE-2026-32280 https://pkg.go.dev/vuln/GO-2026-4947 https://www.cve.org/CVERecord?id=CVE-2026-32280
stdlib	CVE-2026-32281	HIGH	v1.20.2	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:26447 https://access.redhat.com/security/cve/CVE-2026-32281 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2456333 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://bugzilla.redhat.com/show_bug.cgi?id=2456339 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://errata.almalinux.org/9/ALSA-2026-26447.html https://errata.rockylinux.org/RLSA-2026:26447 https://go.dev/cl/758061 https://go.dev/issue/78281 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://nvd.nist.gov/vuln/detail/CVE-2026-32281 https://pkg.go.dev/vuln/GO-2026-4946 https://www.cve.org/CVERecord?id=CVE-2026-32281
stdlib	CVE-2026-32283	HIGH	v1.20.2	1.25.9, 1.26.2	https://access.redhat.com/errata/RHSA-2026:26447 https://access.redhat.com/security/cve/CVE-2026-32283 https://bugzilla.redhat.com/2456333 https://bugzilla.redhat.com/2456338 https://bugzilla.redhat.com/2456339 https://bugzilla.redhat.com/show_bug.cgi?id=2456333 https://bugzilla.redhat.com/show_bug.cgi?id=2456338 https://bugzilla.redhat.com/show_bug.cgi?id=2456339 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32280 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32281 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32283 https://errata.almalinux.org/9/ALSA-2026-26447.html https://errata.rockylinux.org/RLSA-2026:26447 https://go.dev/cl/763767 https://go.dev/issue/78334 https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU https://linux.oracle.com/cve/CVE-2026-32283.html https://linux.oracle.com/errata/ELSA-2026-17075.html https://nvd.nist.gov/vuln/detail/CVE-2026-32283 https://pkg.go.dev/vuln/GO-2026-4870 https://www.cve.org/CVERecord?id=CVE-2026-32283
stdlib	CVE-2026-33811	HIGH	v1.20.2	1.25.10, 1.26.3	https://access.redhat.com/security/cve/CVE-2026-33811 https://go.dev/cl/767860 https://go.dev/issue/78803 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-33811.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-33811 https://pkg.go.dev/vuln/GO-2026-4981 https://www.cve.org/CVERecord?id=CVE-2026-33811
stdlib	CVE-2026-33814	HIGH	v1.20.2	1.25.10, 1.26.3	https://github.com/golang/go/issues/78476 https://go-review.googlesource.com/c/go/+/761581 https://go-review.googlesource.com/c/net/+/761640 https://go.dev/cl/761581 https://go.dev/cl/761640 https://go.dev/issue/78476 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-33814.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-33814 https://pkg.go.dev/vuln/GO-2026-4918 https://ubuntu.com/security/notices/USN-8430-1 https://www.cve.org/CVERecord?id=CVE-2026-33814
stdlib	CVE-2026-39820	HIGH	v1.20.2	1.25.10, 1.26.3	https://go.dev/cl/759940 https://go.dev/issue/78566 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39820.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39820 https://pkg.go.dev/vuln/GO-2026-4986
stdlib	CVE-2026-39823	HIGH	v1.20.2	1.25.10, 1.26.3	https://go.dev/cl/769920 https://go.dev/issue/78913 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39823.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39823 https://pkg.go.dev/vuln/GO-2026-4982
stdlib	CVE-2026-39825	HIGH	v1.20.2	1.25.10, 1.26.3	https://go.dev/cl/770541 https://go.dev/issue/78948 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39825.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39825 https://pkg.go.dev/vuln/GO-2026-4976
stdlib	CVE-2026-39836	HIGH	v1.20.2	1.25.10, 1.26.3	https://go.dev/cl/775320 https://go.dev/issue/79006 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-39836.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-39836 https://pkg.go.dev/vuln/GO-2026-4971
stdlib	CVE-2026-42499	HIGH	v1.20.2	1.25.10, 1.26.3	https://go.dev/cl/771520 https://go.dev/issue/78987 https://groups.google.com/g/golang-announce/c/qcCIEXso47M https://linux.oracle.com/cve/CVE-2026-42499.html https://linux.oracle.com/errata/ELSA-2026-22112.html https://nvd.nist.gov/vuln/detail/CVE-2026-42499 https://pkg.go.dev/vuln/GO-2026-4977
stdlib	CVE-2026-42504	HIGH	v1.20.2	1.25.11, 1.26.4	https://go.dev/cl/774481 https://go.dev/issue/79217 https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw https://nvd.nist.gov/vuln/detail/CVE-2026-42504 https://pkg.go.dev/vuln/GO-2026-5038
stdlib	CVE-2023-29406	MEDIUM	v1.20.2	1.19.11, 1.20.6	https://access.redhat.com/errata/RHSA-2023:6474 https://access.redhat.com/security/cve/CVE-2023-29406 https://bugzilla.redhat.com/2174485 https://bugzilla.redhat.com/2178358 https://bugzilla.redhat.com/2178488 https://bugzilla.redhat.com/2178492 https://bugzilla.redhat.com/2184481 https://bugzilla.redhat.com/2184482 https://bugzilla.redhat.com/2184483 https://bugzilla.redhat.com/2184484 https://bugzilla.redhat.com/2196026 https://bugzilla.redhat.com/2196027 https://bugzilla.redhat.com/2196029 https://bugzilla.redhat.com/2222167 https://bugzilla.redhat.com/2228689 https://bugzilla.redhat.com/show_bug.cgi?id=2222167 https://bugzilla.redhat.com/show_bug.cgi?id=2242871 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406 https://errata.almalinux.org/9/ALSA-2023-6474.html https://errata.rockylinux.org/RLSA-2023:7202 https://github.com/golang/go/commit/312920c00aac9897b2a0693e752390b5b0711a5a (go1.20.6) https://github.com/golang/go/commit/5fa6923b1ea891400153d04ddf1545e23b40041b (go1.19.11) https://github.com/golang/go/issues/60374 https://go.dev/cl/506996 https://go.dev/issue/60374 https://groups.google.com/g/golang-announce/c/2q13H6LEEx0 https://linux.oracle.com/cve/CVE-2023-29406.html https://linux.oracle.com/errata/ELSA-2023-7202.html https://nvd.nist.gov/vuln/detail/CVE-2023-29406 https://pkg.go.dev/vuln/GO-2023-1878 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20230814-0002/ https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://www.cve.org/CVERecord?id=CVE-2023-29406
stdlib	CVE-2023-29409	MEDIUM	v1.20.2	1.19.12, 1.20.7, 1.21.0-rc.4	https://access.redhat.com/errata/RHSA-2023:7766 https://access.redhat.com/security/cve/CVE-2023-29409 https://bugzilla.redhat.com/2228743 https://bugzilla.redhat.com/2237773 https://bugzilla.redhat.com/2237776 https://bugzilla.redhat.com/2237777 https://bugzilla.redhat.com/2237778 https://bugzilla.redhat.com/show_bug.cgi?id=1983596 https://bugzilla.redhat.com/show_bug.cgi?id=1989575 https://bugzilla.redhat.com/show_bug.cgi?id=2132867 https://bugzilla.redhat.com/show_bug.cgi?id=2132868 https://bugzilla.redhat.com/show_bug.cgi?id=2132872 https://bugzilla.redhat.com/show_bug.cgi?id=2228743 https://bugzilla.redhat.com/show_bug.cgi?id=2237773 https://bugzilla.redhat.com/show_bug.cgi?id=2237776 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2244340 https://bugzilla.redhat.com/show_bug.cgi?id=2246840 https://bugzilla.redhat.com/show_bug.cgi?id=2253193 https://bugzilla.redhat.com/show_bug.cgi?id=2253330 https://bugzilla.redhat.com/show_bug.cgi?id=2254210 https://bugzilla.redhat.com/show_bug.cgi?id=2262272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650 https://errata.almalinux.org/9/ALSA-2023-7766.html https://errata.rockylinux.org/RLSA-2024:2988 https://go.dev/cl/515257 https://go.dev/issue/61460 https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ https://linux.oracle.com/cve/CVE-2023-29409.html https://linux.oracle.com/errata/ELSA-2024-2988.html https://nvd.nist.gov/vuln/detail/CVE-2023-29409 https://pkg.go.dev/vuln/GO-2023-1987 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20230831-0010/ https://www.cve.org/CVERecord?id=CVE-2023-29409
stdlib	CVE-2023-39318	MEDIUM	v1.20.2	1.20.8, 1.21.1	https://access.redhat.com/errata/RHSA-2024:2160 https://access.redhat.com/security/cve/CVE-2023-39318 https://bugzilla.redhat.com/2237773 https://bugzilla.redhat.com/2237776 https://bugzilla.redhat.com/2253330 https://bugzilla.redhat.com/show_bug.cgi?id=1983596 https://bugzilla.redhat.com/show_bug.cgi?id=1989575 https://bugzilla.redhat.com/show_bug.cgi?id=2132867 https://bugzilla.redhat.com/show_bug.cgi?id=2132868 https://bugzilla.redhat.com/show_bug.cgi?id=2132872 https://bugzilla.redhat.com/show_bug.cgi?id=2228743 https://bugzilla.redhat.com/show_bug.cgi?id=2237773 https://bugzilla.redhat.com/show_bug.cgi?id=2237776 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2244340 https://bugzilla.redhat.com/show_bug.cgi?id=2246840 https://bugzilla.redhat.com/show_bug.cgi?id=2253193 https://bugzilla.redhat.com/show_bug.cgi?id=2253330 https://bugzilla.redhat.com/show_bug.cgi?id=2254210 https://bugzilla.redhat.com/show_bug.cgi?id=2262272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650 https://errata.almalinux.org/9/ALSA-2024-2160.html https://errata.rockylinux.org/RLSA-2024:2988 https://github.com/golang/go/commit/023b542edf38e2a1f87fcefb9f75ff2f99401b4c (go1.20.8) https://github.com/golang/go/commit/b0e1d3ea26e8e8fce7726690c9ef0597e60739fb (go1.21.1) https://go.dev/cl/526156 https://go.dev/issue/62196 https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ https://linux.oracle.com/cve/CVE-2023-39318.html https://linux.oracle.com/errata/ELSA-2024-2988.html https://nvd.nist.gov/vuln/detail/CVE-2023-39318 https://pkg.go.dev/vuln/GO-2023-2041 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20231020-0009/ https://ubuntu.com/security/notices/USN-6574-1 https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://vuln.go.dev/ID/GO-2023-2041.json https://www.cve.org/CVERecord?id=CVE-2023-39318
stdlib	CVE-2023-39319	MEDIUM	v1.20.2	1.20.8, 1.21.1	https://access.redhat.com/errata/RHSA-2024:2160 https://access.redhat.com/security/cve/CVE-2023-39319 https://bugzilla.redhat.com/2237773 https://bugzilla.redhat.com/2237776 https://bugzilla.redhat.com/2253330 https://bugzilla.redhat.com/show_bug.cgi?id=1983596 https://bugzilla.redhat.com/show_bug.cgi?id=1989575 https://bugzilla.redhat.com/show_bug.cgi?id=2132867 https://bugzilla.redhat.com/show_bug.cgi?id=2132868 https://bugzilla.redhat.com/show_bug.cgi?id=2132872 https://bugzilla.redhat.com/show_bug.cgi?id=2228743 https://bugzilla.redhat.com/show_bug.cgi?id=2237773 https://bugzilla.redhat.com/show_bug.cgi?id=2237776 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2244340 https://bugzilla.redhat.com/show_bug.cgi?id=2246840 https://bugzilla.redhat.com/show_bug.cgi?id=2253193 https://bugzilla.redhat.com/show_bug.cgi?id=2253330 https://bugzilla.redhat.com/show_bug.cgi?id=2254210 https://bugzilla.redhat.com/show_bug.cgi?id=2262272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650 https://errata.almalinux.org/9/ALSA-2024-2160.html https://errata.rockylinux.org/RLSA-2024:2988 https://github.com/golang/go/commit/2070531d2f53df88e312edace6c8dfc9686ab2f5 (go1.20.8) https://github.com/golang/go/commit/bbd043ff0d6d59f1a9232d31ecd5eacf6507bf6a (go1.21.1) https://go.dev/cl/526157 https://go.dev/issue/62197 https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ https://linux.oracle.com/cve/CVE-2023-39319.html https://linux.oracle.com/errata/ELSA-2024-2988.html https://nvd.nist.gov/vuln/detail/CVE-2023-39319 https://pkg.go.dev/vuln/GO-2023-2043 https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20231020-0009/ https://ubuntu.com/security/notices/USN-6574-1 https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://vuln.go.dev/ID/GO-2023-2043.json https://www.cve.org/CVERecord?id=CVE-2023-39319
stdlib	CVE-2023-39326	MEDIUM	v1.20.2	1.20.12, 1.21.5	https://access.redhat.com/errata/RHSA-2024:2272 https://access.redhat.com/security/cve/CVE-2023-39326 https://bugzilla.redhat.com/2253193 https://bugzilla.redhat.com/2253330 https://bugzilla.redhat.com/show_bug.cgi?id=1983596 https://bugzilla.redhat.com/show_bug.cgi?id=1989575 https://bugzilla.redhat.com/show_bug.cgi?id=2132867 https://bugzilla.redhat.com/show_bug.cgi?id=2132868 https://bugzilla.redhat.com/show_bug.cgi?id=2132872 https://bugzilla.redhat.com/show_bug.cgi?id=2228743 https://bugzilla.redhat.com/show_bug.cgi?id=2237773 https://bugzilla.redhat.com/show_bug.cgi?id=2237776 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2244340 https://bugzilla.redhat.com/show_bug.cgi?id=2246840 https://bugzilla.redhat.com/show_bug.cgi?id=2253193 https://bugzilla.redhat.com/show_bug.cgi?id=2253330 https://bugzilla.redhat.com/show_bug.cgi?id=2254210 https://bugzilla.redhat.com/show_bug.cgi?id=2262272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25091 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34558 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2879 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41715 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29409 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39318 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39319 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39326 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45287 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45803 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23650 https://errata.almalinux.org/9/ALSA-2024-2272.html https://errata.rockylinux.org/RLSA-2024:2988 https://github.com/golang/go/commit/6446af942e2e2b161c4ec1b60d9703a2b55dc4dd (go1.20.12) https://github.com/golang/go/commit/ec8c526e4be720e94b98ca509e6364f0efaf28f7 (go1.21.5) https://go.dev/cl/547335 https://go.dev/issue/64433 https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ https://linux.oracle.com/cve/CVE-2023-39326.html https://linux.oracle.com/errata/ELSA-2024-2988.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIU6HOGV6RRIKWM57LOXQA75BGZSIH6G/ https://nvd.nist.gov/vuln/detail/CVE-2023-39326 https://pkg.go.dev/vuln/GO-2023-2382 https://ubuntu.com/security/notices/USN-6574-1 https://www.cve.org/CVERecord?id=CVE-2023-39326
stdlib	CVE-2023-45284	MEDIUM	v1.20.2	1.20.11, 1.21.4	https://go.dev/cl/540277 https://go.dev/issue/63713 https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY https://nvd.nist.gov/vuln/detail/CVE-2023-45284 https://pkg.go.dev/vuln/GO-2023-2186
stdlib	CVE-2023-45289	MEDIUM	v1.20.2	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:2724 https://access.redhat.com/security/cve/CVE-2023-45289 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268018 https://bugzilla.redhat.com/2268019 https://bugzilla.redhat.com/2268273 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268018 https://bugzilla.redhat.com/show_bug.cgi?id=2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268273 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783 https://errata.almalinux.org/9/ALSA-2024-2724.html https://errata.rockylinux.org/RLSA-2024:2724 https://github.com/golang/go/commit/20586c0dbe03d144f914155f879fa5ee287591a1 (go1.21.8) https://github.com/golang/go/commit/3a855208e3efed2e9d7c20ad023f1fa78afcc0be (go1.22.1) https://github.com/golang/go/issues/65065 https://go.dev/cl/569340 https://go.dev/issue/65065 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2023-45289.html https://linux.oracle.com/errata/ELSA-2024-3346.html https://nvd.nist.gov/vuln/detail/CVE-2023-45289 https://pkg.go.dev/vuln/GO-2024-2600 https://security.netapp.com/advisory/ntap-20240329-0006/ https://ubuntu.com/security/notices/USN-6886-1 https://www.cve.org/CVERecord?id=CVE-2023-45289
stdlib	CVE-2023-45290	MEDIUM	v1.20.2	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:9135 https://access.redhat.com/security/cve/CVE-2023-45290 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268022 https://bugzilla.redhat.com/2279814 https://bugzilla.redhat.com/2295310 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268022 https://bugzilla.redhat.com/show_bug.cgi?id=2279814 https://bugzilla.redhat.com/show_bug.cgi?id=2295310 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791 https://errata.almalinux.org/9/ALSA-2024-9135.html https://errata.rockylinux.org/RLSA-2024:9135 https://github.com/golang/go/commit/041a47712e765e94f86d841c3110c840e76d8f82 (go1.22.1) https://github.com/golang/go/commit/bf80213b121074f4ad9b449410a4d13bae5e9be0 (go1.21.8) https://github.com/golang/go/issues/65383 https://go.dev/cl/569341 https://go.dev/issue/65383 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2023-45290.html https://linux.oracle.com/errata/ELSA-2024-8038.html https://nvd.nist.gov/vuln/detail/CVE-2023-45290 https://pkg.go.dev/vuln/GO-2024-2599 https://security.netapp.com/advisory/ntap-20240329-0004 https://security.netapp.com/advisory/ntap-20240329-0004/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2023-45290
stdlib	CVE-2024-24783	MEDIUM	v1.20.2	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:6195 https://access.redhat.com/security/cve/CVE-2024-24783 https://bugzilla.redhat.com/2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268018 https://bugzilla.redhat.com/show_bug.cgi?id=2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268273 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783 https://errata.almalinux.org/9/ALSA-2024-6195.html https://errata.rockylinux.org/RLSA-2024:2724 https://github.com/advisories/GHSA-3q2c-pvp5-3cqp https://github.com/golang/go/commit/337b8e9cbfa749d9d5c899e0dc358e2208d5e54f (go1.22.1) https://github.com/golang/go/commit/be5b52bea674190ef7de272664be6c7ae93ec5a0 (go1.21.8) https://github.com/golang/go/issues/65390 https://go.dev/cl/569339 https://go.dev/issue/65390 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2024-24783.html https://linux.oracle.com/errata/ELSA-2024-6969.html https://nvd.nist.gov/vuln/detail/CVE-2024-24783 https://pkg.go.dev/vuln/GO-2024-2598 https://security.netapp.com/advisory/ntap-20240329-0005 https://security.netapp.com/advisory/ntap-20240329-0005/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-24783
stdlib	CVE-2024-24784	MEDIUM	v1.20.2	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:2562 https://access.redhat.com/security/cve/CVE-2024-24784 https://bugzilla.redhat.com/2262921 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268018 https://bugzilla.redhat.com/2268019 https://bugzilla.redhat.com/2268021 https://bugzilla.redhat.com/2268022 https://bugzilla.redhat.com/2268273 https://bugzilla.redhat.com/show_bug.cgi?id=2262921 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268018 https://bugzilla.redhat.com/show_bug.cgi?id=2268019 https://bugzilla.redhat.com/show_bug.cgi?id=2268021 https://bugzilla.redhat.com/show_bug.cgi?id=2268022 https://bugzilla.redhat.com/show_bug.cgi?id=2268273 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1394 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24784 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785 https://errata.almalinux.org/9/ALSA-2024-2562.html https://errata.rockylinux.org/RLSA-2024:2562 https://github.com/golang/go/commit/263c059b09fdd40d9dd945f2ecb20c89ea28efe5 (go1.21.8) https://github.com/golang/go/commit/5330cd225ba54c7dc78c1b46dcdf61a4671a632c (go1.22.1) https://github.com/golang/go/issues/65083 https://go.dev/cl/555596 https://go.dev/issue/65083 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2024-24784.html https://linux.oracle.com/errata/ELSA-2024-6969.html https://nvd.nist.gov/vuln/detail/CVE-2024-24784 https://pkg.go.dev/vuln/GO-2024-2609 https://security.netapp.com/advisory/ntap-20240329-0007/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-24784
stdlib	CVE-2024-24785	MEDIUM	v1.20.2	1.21.8, 1.22.1	http://www.openwall.com/lists/oss-security/2024/03/08/4 https://access.redhat.com/errata/RHSA-2024:9135 https://access.redhat.com/security/cve/CVE-2024-24785 https://bugzilla.redhat.com/2268017 https://bugzilla.redhat.com/2268022 https://bugzilla.redhat.com/2279814 https://bugzilla.redhat.com/2295310 https://bugzilla.redhat.com/show_bug.cgi?id=2268017 https://bugzilla.redhat.com/show_bug.cgi?id=2268022 https://bugzilla.redhat.com/show_bug.cgi?id=2279814 https://bugzilla.redhat.com/show_bug.cgi?id=2295310 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24785 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791 https://errata.almalinux.org/9/ALSA-2024-9135.html https://errata.rockylinux.org/RLSA-2024:9135 https://github.com/golang/go/commit/056b0edcb8c152152021eebf4cf42adbfbe77992 (go1.22.1) https://github.com/golang/go/commit/3643147a29352ca2894fd5d0d2069bc4b4335a7e (go1.21.8) https://github.com/golang/go/issues/65697 https://go.dev/cl/564196 https://go.dev/issue/65697 https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg https://linux.oracle.com/cve/CVE-2024-24785.html https://linux.oracle.com/errata/ELSA-2026-3428.html https://nvd.nist.gov/vuln/detail/CVE-2024-24785 https://pkg.go.dev/vuln/GO-2024-2610 https://security.netapp.com/advisory/ntap-20240329-0008/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7061-1 https://ubuntu.com/security/notices/USN-7109-1 https://vuln.go.dev/ID/GO-2024-2610.json https://www.cve.org/CVERecord?id=CVE-2024-24785
stdlib	CVE-2024-24789	MEDIUM	v1.20.2	1.21.11, 1.22.4	http://www.openwall.com/lists/oss-security/2024/06/04/1 https://access.redhat.com/errata/RHSA-2024:9115 https://access.redhat.com/security/cve/CVE-2024-24789 https://bugzilla.redhat.com/2279814 https://bugzilla.redhat.com/2292668 https://bugzilla.redhat.com/2292787 https://bugzilla.redhat.com/2294000 https://bugzilla.redhat.com/2295310 https://bugzilla.redhat.com/show_bug.cgi?id=2144983 https://bugzilla.redhat.com/show_bug.cgi?id=2274767 https://bugzilla.redhat.com/show_bug.cgi?id=2292668 https://bugzilla.redhat.com/show_bug.cgi?id=2295310 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4122 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24789 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727 https://errata.almalinux.org/9/ALSA-2024-9115.html https://errata.rockylinux.org/RLSA-2024:9102 https://github.com/golang/go/commit/c8e40338cf00f3c1d86c8fb23863ad67a4c72bcc (1.21) https://github.com/golang/go/commit/cf501ac0c5fe351a8582d20b43562027927906e7 (1.22) https://github.com/golang/go/issues/66869 https://go.dev/cl/585397 https://go.dev/issue/66869 https://groups.google.com/g/golang-announce/c/XbxouI9gY7k https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ https://linux.oracle.com/cve/CVE-2024-24789.html https://linux.oracle.com/errata/ELSA-2024-9115.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5YAEIA6IUHUNGJ7AIXXPQT6D2GYENX7/ https://nvd.nist.gov/vuln/detail/CVE-2024-24789 https://pkg.go.dev/vuln/GO-2024-2888 https://security.netapp.com/advisory/ntap-20250131-0008/ https://ubuntu.com/security/notices/USN-6886-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-24789
stdlib	CVE-2024-24791	MEDIUM	v1.20.2	1.21.12, 1.22.5	https://access.redhat.com/errata/RHSA-2025:7256 https://access.redhat.com/security/cve/CVE-2024-24791 https://bugzilla.redhat.com/2237777 https://bugzilla.redhat.com/2237778 https://bugzilla.redhat.com/2279814 https://bugzilla.redhat.com/2292787 https://bugzilla.redhat.com/2295310 https://bugzilla.redhat.com/2315719 https://bugzilla.redhat.com/show_bug.cgi?id=2237777 https://bugzilla.redhat.com/show_bug.cgi?id=2237778 https://bugzilla.redhat.com/show_bug.cgi?id=2279814 https://bugzilla.redhat.com/show_bug.cgi?id=2292787 https://bugzilla.redhat.com/show_bug.cgi?id=2295310 https://bugzilla.redhat.com/show_bug.cgi?id=2315719 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9355 https://errata.almalinux.org/9/ALSA-2025-7256.html https://errata.rockylinux.org/RLSA-2025:7256 https://go.dev/cl/591255 https://go.dev/issue/67555 https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ https://linux.oracle.com/cve/CVE-2024-24791.html https://linux.oracle.com/errata/ELSA-2025-7256.html https://nvd.nist.gov/vuln/detail/CVE-2024-24791 https://pkg.go.dev/vuln/GO-2024-2963 https://security.netapp.com/advisory/ntap-20241004-0004/ https://ubuntu.com/security/notices/USN-7081-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-24791
stdlib	CVE-2024-34155	MEDIUM	v1.20.2	1.22.7, 1.23.1	https://access.redhat.com/errata/RHSA-2024:9459 https://access.redhat.com/security/cve/CVE-2024-34155 https://bugzilla.redhat.com/2310527 https://bugzilla.redhat.com/2310528 https://bugzilla.redhat.com/2310529 https://bugzilla.redhat.com/2315691 https://bugzilla.redhat.com/2315887 https://bugzilla.redhat.com/2317458 https://bugzilla.redhat.com/2317467 https://bugzilla.redhat.com/show_bug.cgi?id=2310527 https://bugzilla.redhat.com/show_bug.cgi?id=2310528 https://bugzilla.redhat.com/show_bug.cgi?id=2310529 https://bugzilla.redhat.com/show_bug.cgi?id=2315691 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34155 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34158 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9341 https://errata.almalinux.org/9/ALSA-2024-9459.html https://errata.rockylinux.org/RLSA-2024:8039 https://github.com/golang/go/commit/53487e5477151ed75da50e50a0ba8f1ca64c00a3 (go1.23.1) https://github.com/golang/go/commit/b232596139dbe96a62edbe3a2a203e856bf556eb (go1.22.7) https://go.dev/cl/611238 https://go.dev/issue/69138 https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc https://groups.google.com/g/golang-dev/c/S9POB9NCTdk https://linux.oracle.com/cve/CVE-2024-34155.html https://linux.oracle.com/errata/ELSA-2024-9459.html https://nvd.nist.gov/vuln/detail/CVE-2024-34155 https://pkg.go.dev/vuln/GO-2024-3105 https://security.netapp.com/advisory/ntap-20240926-0005/ https://ubuntu.com/security/notices/USN-7081-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-34155
stdlib	CVE-2024-34158	MEDIUM	v1.20.2	1.22.7, 1.23.1	https://access.redhat.com/errata/RHSA-2025:7118 https://access.redhat.com/security/cve/CVE-2024-34158 https://bugzilla.redhat.com/2262921 https://bugzilla.redhat.com/2310529 https://bugzilla.redhat.com/2315719 https://bugzilla.redhat.com/show_bug.cgi?id=2310527 https://bugzilla.redhat.com/show_bug.cgi?id=2310528 https://bugzilla.redhat.com/show_bug.cgi?id=2310529 https://bugzilla.redhat.com/show_bug.cgi?id=2315691 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34155 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34158 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9341 https://errata.almalinux.org/9/ALSA-2025-7118.html https://errata.rockylinux.org/RLSA-2024:8039 https://github.com/golang/go/commit/032ac075c20c01c6c35a672d1542d3e98eab84ea (go1.23.1) https://github.com/golang/go/commit/d4c53812e6ce2ac368173d7fcd31d0ecfcffb002 (go1.22.7) https://go.dev/cl/611240 https://go.dev/issue/69141 https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc https://groups.google.com/g/golang-dev/c/S9POB9NCTdk https://linux.oracle.com/cve/CVE-2024-34158.html https://linux.oracle.com/errata/ELSA-2025-7118.html https://nvd.nist.gov/vuln/detail/CVE-2024-34158 https://pkg.go.dev/vuln/GO-2024-3107 https://security.netapp.com/advisory/ntap-20241004-0003/ https://ubuntu.com/security/notices/USN-7081-1 https://ubuntu.com/security/notices/USN-7109-1 https://ubuntu.com/security/notices/USN-7111-1 https://www.cve.org/CVERecord?id=CVE-2024-34158
stdlib	CVE-2024-45336	MEDIUM	v1.20.2	1.22.11, 1.23.5, 1.24.0-rc.2	https://access.redhat.com/errata/RHSA-2025:3772 https://access.redhat.com/security/cve/CVE-2024-45336 https://bugzilla.redhat.com/2341750 https://bugzilla.redhat.com/2341751 https://bugzilla.redhat.com/show_bug.cgi?id=2310528 https://bugzilla.redhat.com/show_bug.cgi?id=2341750 https://bugzilla.redhat.com/show_bug.cgi?id=2341751 https://bugzilla.redhat.com/show_bug.cgi?id=2344219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866 https://errata.almalinux.org/8/ALSA-2025-3772.html https://errata.rockylinux.org/RLSA-2025:3773 https://github.com/golang/go/issues/70530 https://go.dev/cl/643100 https://go.dev/issue/70530 https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ https://linux.oracle.com/cve/CVE-2024-45336.html https://linux.oracle.com/errata/ELSA-2025-7592.html https://nvd.nist.gov/vuln/detail/CVE-2024-45336 https://pkg.go.dev/vuln/GO-2025-3420 https://security.netapp.com/advisory/ntap-20250221-0003/ https://ubuntu.com/security/notices/USN-7574-1 https://www.cve.org/CVERecord?id=CVE-2024-45336
stdlib	CVE-2025-0913	MEDIUM	v1.20.2	1.23.10, 1.24.4	https://go.dev/cl/672396 https://go.dev/issue/73702 https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A https://nvd.nist.gov/vuln/detail/CVE-2025-0913 https://pkg.go.dev/vuln/GO-2025-3750
stdlib	CVE-2025-22866	MEDIUM	v1.20.2	1.22.12, 1.23.6, 1.24.0-rc.3	https://access.redhat.com/security/cve/CVE-2025-22866 https://bugzilla.redhat.com/show_bug.cgi?id=2310528 https://bugzilla.redhat.com/show_bug.cgi?id=2341750 https://bugzilla.redhat.com/show_bug.cgi?id=2341751 https://bugzilla.redhat.com/show_bug.cgi?id=2344219 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45336 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45341 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22866 https://errata.rockylinux.org/RLSA-2025:3773 https://github.com/golang/go/commit/0cc45e7ca668b103c1055ae84402ad3f3425dd56 (go1.22.12) https://github.com/golang/go/commit/6644ed63b1e6ccc129647ef6b0d4647fdbe14056 (go1.23.6) https://github.com/golang/go/commit/6fc23a3cff5e38ff72923fee50f51254dcdc6e93 (go1.24rc3) https://github.com/golang/go/issues/71383 https://go.dev/cl/643735 https://go.dev/issue/71383 https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k https://linux.oracle.com/cve/CVE-2025-22866.html https://linux.oracle.com/errata/ELSA-2025-7466.html https://nvd.nist.gov/vuln/detail/CVE-2025-22866 https://pkg.go.dev/vuln/GO-2025-3447 https://security.netapp.com/advisory/ntap-20250221-0002/ https://ubuntu.com/security/notices/USN-7574-1 https://www.cve.org/CVERecord?id=CVE-2025-22866
stdlib	CVE-2025-22870	MEDIUM	v1.20.2	1.23.7, 1.24.1	http://www.openwall.com/lists/oss-security/2025/03/07/2 https://access.redhat.com/security/cve/CVE-2025-22870 https://github.com/golang/go/issues/71984 https://go-review.googlesource.com/q/project:net https://go.dev/cl/654697 https://go.dev/issue/71984 https://groups.google.com/g/golang-announce/c/4t3lzH3I0eI/m/b42ImqrBAQAJ https://nvd.nist.gov/vuln/detail/CVE-2025-22870 https://pkg.go.dev/vuln/GO-2025-3503 https://security.netapp.com/advisory/ntap-20250509-0007 https://security.netapp.com/advisory/ntap-20250509-0007/ https://ubuntu.com/security/notices/USN-7574-1 https://www.cve.org/CVERecord?id=CVE-2025-22870
stdlib	CVE-2025-22871	MEDIUM	v1.20.2	1.23.8, 1.24.2	http://www.openwall.com/lists/oss-security/2025/04/04/4 https://access.redhat.com/errata/RHSA-2025:9635 https://access.redhat.com/security/cve/CVE-2025-22871 https://bugzilla.redhat.com/2358493 https://bugzilla.redhat.com/show_bug.cgi?id=2358493 https://cert-portal.siemens.com/productcert/html/ssa-783943.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22871 https://errata.almalinux.org/9/ALSA-2025-9635.html https://errata.rockylinux.org/RLSA-2025:9635 https://github.com/golang/go/issues/71988 https://github.com/roadrunner-server/roadrunner https://github.com/roadrunner-server/roadrunner/commit/f269279ee87d0b88127741cad1042389af7605fa https://github.com/roadrunner-server/roadrunner/issues/2166 https://github.com/roadrunner-server/roadrunner/releases/tag/v2025.1.0 https://go.dev/cl/652998 https://go.dev/issue/71988 https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk/m/cs_6qIK5BAAJ https://linux.oracle.com/cve/CVE-2025-22871.html https://linux.oracle.com/errata/ELSA-2025-9845.html https://nvd.nist.gov/vuln/detail/CVE-2025-22871 https://pkg.go.dev/vuln/GO-2025-3563 https://www.cve.org/CVERecord?id=CVE-2025-22871
stdlib	CVE-2025-22873	MEDIUM	v1.20.2	1.23.9, 1.24.3	http://www.openwall.com/lists/oss-security/2025/05/06/2 https://access.redhat.com/security/cve/CVE-2025-22873 https://go.dev/cl/670036 https://go.dev/issue/73555 https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ https://nvd.nist.gov/vuln/detail/CVE-2025-22873 https://pkg.go.dev/vuln/GO-2026-4403 https://www.cve.org/CVERecord?id=CVE-2025-22873
stdlib	CVE-2025-4673	MEDIUM	v1.20.2	1.23.10, 1.24.4	https://access.redhat.com/errata/RHSA-2025:15887 https://access.redhat.com/security/cve/CVE-2025-4673 https://bugzilla.redhat.com/2373305 https://bugzilla.redhat.com/show_bug.cgi?id=2373305 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4673 https://errata.almalinux.org/9/ALSA-2025-15887.html https://errata.rockylinux.org/RLSA-2025:15887 https://go.dev/cl/679257 https://go.dev/issue/73816 https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A https://linux.oracle.com/cve/CVE-2025-4673.html https://linux.oracle.com/errata/ELSA-2025-10677.html https://nvd.nist.gov/vuln/detail/CVE-2025-4673 https://pkg.go.dev/vuln/GO-2025-3751 https://ubuntu.com/security/notices/USN-7574-1 https://www.cve.org/CVERecord?id=CVE-2025-4673
24 other vulnerabilities found...
No Misconfigurations found