VulnerableCode Package Details - pkg:deb/debian/golang-1.24@1.24.4-1?distro=trixie

Search for packages

Vulnerability	Summary	Fixed by
VCID-1aty-87pz-5yb8 Aliases: CVE-2025-47907	database/sql: Postgres Scan Race Condition	1.24.7-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-254d-pjst-c7hx Aliases: CVE-2025-58186	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-3nqb-6mna-jyb4 Aliases: CVE-2025-61724	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-5n8q-zcds-gyen Aliases: CVE-2025-4674	cmd/go: Go VCS Command Execution Vulnerability	1.24.7-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-5q9b-a7c4-1yht Aliases: CVE-2025-61728	golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip	1.24.12-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-7n3z-vwk2-3ydr Aliases: CVE-2025-58188	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-9ky3-s2vk-cuge Aliases: CVE-2025-61727	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs	1.24.12-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-br2f-7ux9-hkhg Aliases: CVE-2025-61723	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-bv1f-bee8-cbek Aliases: CVE-2025-61725	net/mail: Excessive CPU consumption in ParseAddress in net/mail	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-csmt-e61b-tued Aliases: CVE-2025-61731	cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive	1.24.12-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-dp1t-v58b-43du Aliases: CVE-2025-68121	crypto/tls: Unexpected session resumption in crypto/tls	1.24.12-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-dtt9-gmqf-nbaf Aliases: CVE-2025-61726	golang: net/url: Memory exhaustion in query parameter parsing in net/url	1.24.12-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-eyev-qpgs-hfbx Aliases: CVE-2025-61732	cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy	1.24.13-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-hay4-q9m3-ekdj Aliases: CVE-2025-61729	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate	1.24.12-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-je6z-v5qw-ufew Aliases: CVE-2025-61730	During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.	1.24.12-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-mvsr-c2yh-mbdq Aliases: CVE-2025-58183	golang: archive/tar: Unbounded allocation when parsing GNU sparse map	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-q9yj-ze4x-qyfr Aliases: CVE-2025-58187	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-rvbr-nser-sfe7 Aliases: CVE-2025-47906	os/exec: Unexpected paths returned from LookPath in os/exec	1.24.7-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-sb3w-x3yv-ffft Aliases: CVE-2025-47912	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-t2dr-6dz3-7qgt Aliases: CVE-2025-58185	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-usyf-s559-pkgx Aliases: CVE-2025-58189	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information	1.24.8-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.
VCID-wchc-as62-1fae Aliases: CVE-2025-68119	cmd/go: cmd/go: Local code execution and arbitrary file write via malicious module version strings	1.24.13-1 Affected by 0 other vulnerabilities. 1.24.13-2 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-1aty-87pz-5yb8
Aliases:
CVE-2025-47907

database/sql: Postgres Scan Race Condition

1.24.7-1
Affected by 0 other vulnerabilities.