Search for packages
| purl | pkg:alpm/archlinux/go@2:1.17-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4ndn-vpw4-17gz | go: encoding/xml: XML directives instability |
CVE-2020-29510
|
| VCID-63v8-dt23-9ue7 | Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution. |
CVE-2021-29923
|
| VCID-qway-uy4e-vucf | go: encoding/xml: XML element instability |
CVE-2020-29511
|
| VCID-w8xe-6aaj-aycr | Authentication Bypass in github.com/russellhaering/gosaml2 ### Impact Given a valid SAML Response, it may be possible for an attacker to mutate the XML document in such a way that gosaml2 will trust a different portion of the document than was signed. Depending on the implementation of the Service Provider this enables a variety of attacks, including users accessing accounts other than the one to which they authenticated in the Identity Provider, or full authentication bypass. ### Patches Service Providers utilizing gosaml2 should upgrade to v0.6.0 or greater. |
CVE-2020-29509
GHSA-xhqq-x44f-9fgg |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T18:26:37.123947+00:00 | Arch Linux Importer | Fixing | VCID-w8xe-6aaj-aycr | https://security.archlinux.org/AVG-1357 | 38.0.0 |
| 2026-04-01T18:26:37.097934+00:00 | Arch Linux Importer | Fixing | VCID-4ndn-vpw4-17gz | https://security.archlinux.org/AVG-1357 | 38.0.0 |
| 2026-04-01T18:26:37.038098+00:00 | Arch Linux Importer | Fixing | VCID-qway-uy4e-vucf | https://security.archlinux.org/AVG-1357 | 38.0.0 |
| 2026-04-01T18:26:37.008431+00:00 | Arch Linux Importer | Fixing | VCID-63v8-dt23-9ue7 | https://security.archlinux.org/AVG-1357 | 38.0.0 |