Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/dev-lang/go@1.20.10
purl pkg:ebuild/dev-lang/go@1.20.10
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (25)
Vulnerability Summary Aliases
VCID-1rsj-pm1p-qbd6 Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2022-2880
VCID-3ypr-ppaw-kkf4 Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2022-2879
VCID-4c51-73a9-17f9 Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-39322
VCID-4ufj-v5z1-huec Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-24534
VCID-5781-s1ny-q7ey CVE-2023-44487
GHSA-2m7v-gc89-fjqf
GHSA-qppj-fm5r-hxr3
GHSA-vx74-f528-fxqg
GHSA-xpw8-rcwv-8f8p
GMS-2023-3377
VSV00013
VCID-5kkq-5jpf-fqev Multiple vulnerabilities have been discovered in HashiCorp Consul, the worst of which could result in denial of service. CVE-2022-41717
GHSA-xrjj-mj9h-534m
VCID-67ha-a748-gbbw Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-29405
VCID-95zc-mxqu-tyfp Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-39318
VCID-a25b-3vep-y3gm Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-39319
VCID-b9yc-jqye-afan Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-24536
VCID-e44x-a9xm-6ke9 Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2022-41724
VCID-evjj-hwvm-fbca Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-24538
VCID-h7qt-3g1f-5ffr HTTP/2 rapid reset can cause excessive work in net/http A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function. CVE-2023-39325
GHSA-4374-p667-p6c8
VCID-kncb-bz9s-zfcv Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-39320
VCID-mw8v-v3sw-7yaz Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-29404
VCID-ppdw-akf7-dfdr Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-29409
VCID-r3b2-hxk4-zbhq Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-39323
VCID-rh89-8td9-tudk Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-29406
VCID-rtb8-bayb-dfbn Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2022-41715
VCID-sdd3-35ng-g7a3 golang.org/x/net vulnerable to Uncontrolled Resource Consumption A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests. CVE-2022-41723
GHSA-vvpx-j8f3-3w6h
VCID-ugvh-q7gu-qbg8 Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-29403
VCID-vesz-m31u-q7gn Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-29402
VCID-x4ux-7vyz-eug9 Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-39321
VCID-yr11-kwf1-pqfz Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2023-24537
VCID-zg2y-sb18-p3ah Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. CVE-2022-41725

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:01:53.430016+00:00 Gentoo Importer Fixing VCID-5781-s1ny-q7ey https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.420728+00:00 Gentoo Importer Fixing VCID-h7qt-3g1f-5ffr https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.411556+00:00 Gentoo Importer Fixing VCID-r3b2-hxk4-zbhq https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.402276+00:00 Gentoo Importer Fixing VCID-4c51-73a9-17f9 https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.392505+00:00 Gentoo Importer Fixing VCID-x4ux-7vyz-eug9 https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.380655+00:00 Gentoo Importer Fixing VCID-kncb-bz9s-zfcv https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.371180+00:00 Gentoo Importer Fixing VCID-a25b-3vep-y3gm https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.360161+00:00 Gentoo Importer Fixing VCID-95zc-mxqu-tyfp https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.349469+00:00 Gentoo Importer Fixing VCID-ppdw-akf7-dfdr https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.340284+00:00 Gentoo Importer Fixing VCID-rh89-8td9-tudk https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.329606+00:00 Gentoo Importer Fixing VCID-67ha-a748-gbbw https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.319892+00:00 Gentoo Importer Fixing VCID-mw8v-v3sw-7yaz https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.306126+00:00 Gentoo Importer Fixing VCID-ugvh-q7gu-qbg8 https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.293805+00:00 Gentoo Importer Fixing VCID-vesz-m31u-q7gn https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.283553+00:00 Gentoo Importer Fixing VCID-evjj-hwvm-fbca https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.270508+00:00 Gentoo Importer Fixing VCID-yr11-kwf1-pqfz https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.259419+00:00 Gentoo Importer Fixing VCID-b9yc-jqye-afan https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.244837+00:00 Gentoo Importer Fixing VCID-4ufj-v5z1-huec https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.233234+00:00 Gentoo Importer Fixing VCID-zg2y-sb18-p3ah https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.223398+00:00 Gentoo Importer Fixing VCID-e44x-a9xm-6ke9 https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.212224+00:00 Gentoo Importer Fixing VCID-sdd3-35ng-g7a3 https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.203725+00:00 Gentoo Importer Fixing VCID-5kkq-5jpf-fqev https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.194159+00:00 Gentoo Importer Fixing VCID-rtb8-bayb-dfbn https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.184142+00:00 Gentoo Importer Fixing VCID-1rsj-pm1p-qbd6 https://security.gentoo.org/glsa/202311-09 38.0.0
2026-04-01T13:01:53.173970+00:00 Gentoo Importer Fixing VCID-3ypr-ppaw-kkf4 https://security.gentoo.org/glsa/202311-09 38.0.0