Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: languages Tag: go Clear

ID	Title	Severity	Tags	Detected
CVE-2026-79658	Vulnerability in dos (CVE-2026-79658) vulnerability in dos (CVE-2026-79658). Risk of unauthorized operations or information disclosure.	High	Go Denial of Service Cwe 400	4 days ago
CVE-2026-64679	Path Traversal in github.com/runatlantis/atlantis (CVE-2026-64679) path traversal in github.com/runatlantis/atlantis (CVE-2026-64679). Data can be tampered with by attackers. Exploitable via ``workspace``. Mitigation: upgrade to `0.45.0` or later.	High	Go Denial of Service Cwe 22 Cwe 73	1 week ago
CVE-2026-46603	Vulnerability in dos (CVE-2026-46603) vulnerability in dos (CVE-2026-46603). Risk of unauthorized operations or information disclosure.	High	Go Denial of Service Cwe 789	2 weeks ago
CVE-2026-56865	Vulnerability in CVE-2026-56865 (CVE-2026-56865) vulnerability in CVE-2026-56865 (CVE-2026-56865). Successful exploitation can lead to full system takeover.	High	Go Cwe 347	2 weeks ago
CVE-2026-71272	Memos' webhook dispatch function safeDialContext() (internal/webhook/webhook.go) resolves the... Memos' webhook dispatch function safeDialContext() (internal/webhook/webhook.go) resolves the...	High	Server-Side Request Forgery Cwe 367 Go DNS	3 weeks ago
CVE-2026-71271	Memos' webhook URL validation, isReservedIP() (internal/webhook/validate.go), checks a candidate... Memos' webhook URL validation, isReservedIP() (internal/webhook/validate.go), checks a candidate...	High	Cwe 918 Remote Code Execution Go HTTP	3 weeks ago
CVE-2026-71235	Code Injection in ssrf (CVE-2026-71235) code injection in ssrf (CVE-2026-71235). Successful exploitation can lead to full system takeover.	High	Go Server-Side Request Forgery Cwe 94	3 weeks ago
CVE-2026-71206	Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature... Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature...	High	Cwe 613 Go Authentication Bypass	3 weeks ago
CVE-2026-42505	Vulnerability in golang (CVE-2026-42505) vulnerability in golang (CVE-2026-42505). Risk of unauthorized operations or information disclosure.	Medium	Cwe 201 Golang Go	1 month ago
CVE-2026-39822	Vulnerability in golang (CVE-2026-39822) vulnerability in golang (CVE-2026-39822). Successful exploitation can lead to full system takeover.	High	Cwe 61 Golang Go	1 month ago
CVE-2026-50138	Vulnerability in goshs.de/goshs/v2 (CVE-2026-50138) vulnerability in goshs.de/goshs/v2 (CVE-2026-50138). Confidential information can be exposed externally. Exploitable via ``goshs``. Mitigation: upgrade to `2.1.0` or later.	High	Go Cwe 284	1 month ago
CVE-2026-13426	Path Traversal in c (CVE-2026-13426) path traversal in c (CVE-2026-13426). Risk of unauthorized operations or information disclosure.	Medium	Go C Path Traversal Cwe 22	2 months ago
CVE-2026-52814	Vulnerability in gogs.io/gogs (CVE-2026-52814) vulnerability in gogs.io/gogs (CVE-2026-52814). Risk of unauthorized operations or information disclosure.		Go Denial of Service Cwe 400	2 months ago
CVE-2023-54365	Vulnerability in traefik (CVE-2023-54365) vulnerability in traefik (CVE-2023-54365). Risk of unauthorized operations or information disclosure.	High	Cwe 400 Cwe 770 Traefik Golang +3	2 months ago
CVE-2026-48154	Vulnerability in github.com/pilinux/gorest (CVE-2026-48154) vulnerability in github.com/pilinux/gorest (CVE-2026-48154). Risk of unauthorized operations or information disclosure. Exploitable via ``InMemorySecret2FA``. Mitigation: upgrade to `1.12.2` or later.	Medium	Go Cwe 362	2 months ago
CVE-2026-11400	AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance	High	AWS Amazon Cloud Cwe 426 +4	2 months ago
CVE-2026-11401	AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance	High	Cwe 426 AWS Go Privilege Escalation	2 months ago
CVE-2026-42083	Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI	High	Cwe 862 Authentication Bypass Go 5G +1	3 months ago
CVE-2026-45135	Vulnerability in github.com/caddyserver/caddy/v2 (CVE-2026-45135) vulnerability in github.com/caddyserver/caddy/v2 (CVE-2026-45135). Successful exploitation can lead to full system takeover. Exploitable via ``search.IgnoreCase``. Mitigation: upgrade to `2.11.3` or later.	High	PHP Go Remote Code Execution Cwe 20 +4	3 months ago
CVE-2026-45062	Vulnerability in github.com/dunglas/frankenphp (CVE-2026-45062) vulnerability in github.com/dunglas/frankenphp (CVE-2026-45062). Successful exploitation can lead to full system takeover. Exploitable via ``cgi.go``. Mitigation: upgrade to `1.12.3` or later.	High	PHP Go Remote Code Execution Cwe 20 +2	3 months ago
CVE-2026-42072	Vulnerability in graph (CVE-2026-42072) vulnerability in graph (CVE-2026-42072). Successful exploitation can lead to full system takeover. Exploitable via ``NORNICDB_ADDRESS``.	Critical	Cwe 1392 Go Graph Database +10	3 months ago
CVE-2026-42501	Vulnerability in golang (CVE-2026-42501) vulnerability in golang (CVE-2026-42501). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	High	Cwe 347 Golang Go	3 months ago
CVE-2026-42499	Vulnerability in golang (CVE-2026-42499) vulnerability in golang (CVE-2026-42499). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	High	Denial of Service Golang Go Cwe 1046	3 months ago
CVE-2026-39819	Vulnerability in golang (CVE-2026-39819) vulnerability in golang (CVE-2026-39819). Data can be tampered with by attackers. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	Medium	Cwe 59 Golang Go	3 months ago
CVE-2026-39820	Vulnerability in golang (CVE-2026-39820) vulnerability in golang (CVE-2026-39820). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	High	Cwe 770 Golang Go Cwe 606	3 months ago
CVE-2026-39823	Cross-Site Scripting (XSS) in golang (CVE-2026-39823) cross-site scripting in golang (CVE-2026-39823). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	Medium	Cross-Site Scripting Cwe 79 Golang Go	3 months ago
CVE-2026-39825	Vulnerability in golang (CVE-2026-39825) vulnerability in golang (CVE-2026-39825). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	Medium	Golang Go	3 months ago
CVE-2026-39826	Vulnerability in golang (CVE-2026-39826) vulnerability in golang (CVE-2026-39826). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	Medium	Cwe 116 Golang Go	3 months ago
CVE-2026-39836	Vulnerability in golang (CVE-2026-39836) vulnerability in golang (CVE-2026-39836). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	High	Cwe 476 Golang Go	3 months ago
CVE-2026-39817	Out-of-Bounds Write in golang (CVE-2026-39817) out-of-bounds write in golang (CVE-2026-39817). Data can be tampered with by attackers. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	Medium	Cwe 787 Golang Go	3 months ago
CVE-2026-33814	Vulnerability in golang (CVE-2026-33814) vulnerability in golang (CVE-2026-33814). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	High	Cwe 835 Golang Go Http2 +1	3 months ago
CVE-2026-33811	Vulnerability in golang (CVE-2026-33811) vulnerability in golang (CVE-2026-33811). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.10, 1.26.3` or later.	High	C Cwe 415 Golang Go +1	3 months ago
CVE-2026-39383	SSRF (Server-Side Request Forgery) in github.com/gotenberg/gotenberg/v8 (CVE-2026-39383) SSRF in github.com/gotenberg/gotenberg/v8 (CVE-2026-39383). Confidential information can be exposed externally. Exploitable via ``FilterDeadline``. Mitigation: upgrade to `8.31.0` or later.	High	Server-Side Request Forgery Cwe 918 Thecodingmachine Gotenberg +3	3 months ago
CVE-2026-35579	Authentication Bypass in github.com/coredns/coredns (CVE-2026-35579) authentication bypass in github.com/coredns/coredns (CVE-2026-35579). Successful exploitation can lead to full system takeover. Exploitable via ``tsigStatus``. Mitigation: upgrade to `1.14.3` or later.	Critical	Cwe 287 Corednsio Coredns Go +20	3 months ago
CVE-2026-33489	Vulnerability in github.com/coredns/coredns (CVE-2026-33489) vulnerability in github.com/coredns/coredns (CVE-2026-33489). Confidential information can be exposed externally. Mitigation: upgrade to `1.14.3` or later.	High	Cwe 863 Corednsio Coredns Go +2	3 months ago
CVE-2026-33190	Authentication Bypass in github.com/coredns/coredns (CVE-2026-33190) authentication bypass in github.com/coredns/coredns (CVE-2026-33190). Confidential information can be exposed externally. Mitigation: upgrade to `1.14.3` or later.	High	Cwe 303 Corednsio Coredns Go +3	3 months ago
CVE-2026-32936	Vulnerability in github.com/coredns/coredns (CVE-2026-32936) vulnerability in github.com/coredns/coredns (CVE-2026-32936). Risk of unauthorized operations or information disclosure. Exploitable via ``dns``. Mitigation: upgrade to `1.14.3` or later.	High	Denial of Service Cwe 400 Corednsio Coredns +3	3 months ago
CVE-2026-32934	Vulnerability in github.com/coredns/coredns (CVE-2026-32934) vulnerability in github.com/coredns/coredns (CVE-2026-32934). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.14.3` or later.	High	Cwe 770 Corednsio Coredns Go +2	3 months ago
CVE-2026-35527	SSRF (Server-Side Request Forgery) in github.com/lxc/incus/v6/cmd/incusd (CVE-2026-35527) SSRF in github.com/lxc/incus/v6/cmd/incusd (CVE-2026-35527). Risk of unauthorized operations or information disclosure. Exploitable via ``restricted.images.servers``. Mitigation: upgrade to `7.0.0` or later.	Medium	Go Githubcomlxcincusv6Cmdincusd Server-Side Request Forgery Cwe 918 +2	3 months ago
CVE-2026-44015	SSRF (Server-Side Request Forgery) in github.com/0xJacky/Nginx-UI (CVE-2026-44015) SSRF in github.com/0xJacky/Nginx-UI (CVE-2026-44015). Confidential information can be exposed externally. Exploitable via `GET /api/settings`.	High	Go Githubcom0Xjackynginx Ui Python nginx +5	4 months ago
CVE-2026-30246	Vulnerability in github.com/gofiber/fiber/v3 (CVE-2026-30246) vulnerability in github.com/gofiber/fiber/v3 (CVE-2026-30246). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.0` or later.	Medium	Go Githubcomgofiberfiberv3 C Cwe 200 +4	4 months ago
CVE-2026-27140	Vulnerability in toolchain (CVE-2026-27140) vulnerability in toolchain (CVE-2026-27140). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	High	Cwe 863 Cwe 641 Golang Go	4 months ago
CVE-2026-32280	Vulnerability in stdlib (CVE-2026-32280) vulnerability in stdlib (CVE-2026-32280). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	High	Denial of Service Cwe 770 Golang Go	4 months ago
CVE-2026-32282	Vulnerability in stdlib (CVE-2026-32282) vulnerability in stdlib (CVE-2026-32282). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	Medium	Cwe 59 Golang Go	4 months ago
CVE-2026-33810	Vulnerability in stdlib (CVE-2026-33810) vulnerability in stdlib (CVE-2026-33810). Confidential information can be exposed externally. Mitigation: upgrade to `1.26.2` or later.	High	Cwe 295 Cwe 1289 Golang Go	4 months ago
CVE-2026-32281	Vulnerability in stdlib (CVE-2026-32281) vulnerability in stdlib (CVE-2026-32281). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	High	Denial of Service Cwe 295 Golang Go	4 months ago
CVE-2026-32288	Vulnerability in stdlib (CVE-2026-32288) vulnerability in stdlib (CVE-2026-32288). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	Medium	Cwe 770 Golang Go	4 months ago
CVE-2026-27143	Vulnerability in toolchain (CVE-2026-27143) vulnerability in toolchain (CVE-2026-27143). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	Critical	Golang Go	4 months ago
CVE-2026-32289	Cross-Site Scripting (XSS) in stdlib (CVE-2026-32289) cross-site scripting in stdlib (CVE-2026-32289). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	Medium	JavaScript Cross-Site Scripting Cwe 79 Golang +1	4 months ago
CVE-2026-27144	Vulnerability in toolchain (CVE-2026-27144) vulnerability in toolchain (CVE-2026-27144). Data can be tampered with by attackers. Mitigation: upgrade to `1.25.9, 1.26.2` or later.	High	Cwe 843 Golang Go	4 months ago

Vulnerabilities

🍪 About cookies