Search for packages
| purl | pkg:rpm/redhat/golang@1.21.13-15?arch=el9_4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-csmt-e61b-tued
Aliases: CVE-2025-61731 |
cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive | There are no reported fixed by versions. |
|
VCID-pcez-y67t-8yg3
Aliases: CVE-2026-25679 |
net/url: Incorrect parsing of IPv6 host literals in net/url | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T13:37:50.655183+00:00 | RedHat Importer | Affected by | VCID-pcez-y67t-8yg3 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25679.json | 38.4.0 |
| 2026-04-14T00:34:38.212985+00:00 | RedHat Importer | Affected by | VCID-csmt-e61b-tued | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61731.json | 38.3.0 |
| 2026-04-14T00:33:59.734116+00:00 | RedHat Importer | Affected by | VCID-pcez-y67t-8yg3 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25679.json | 38.3.0 |