CVE Intelligence

Golang vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Golang products: 78 record(s), with severity, exploitation and fixes.

Go 49Crypto 18Net 6Http2 2Tiff 2Image 2Networking 1Gopls 1

Exploited only (KEV) →

CVE-2023-44487 High · 7.5 KEV Urgent · 73 Public exploit CWE-400 Oct 10, 2023
HTTP/2 Rapid Reset Attack Vulnerability
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2022-32189 High · 7.5 Aug 10, 2022
Panic when decoding Float and Rat types in math/big
A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVE-2020-0601 High · 8.1 KEV Urgent · 70 Public exploit CWE-295 Jan 14, 2020
Microsoft Windows CryptoAPI Spoofing Vulnerability
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.