Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/golang@1.23.7-1?arch=el10_0
purl pkg:rpm/redhat/golang@1.23.7-1?arch=el10_0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 2.6
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-1jxb-fv1g-2kdu
Aliases:
CVE-2024-45341
golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints There are no reported fixed by versions.
VCID-fk74-ghxp-w3g9
Aliases:
CVE-2024-45336
golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect There are no reported fixed by versions.
VCID-tnrm-85fu-ufhb
Aliases:
CVE-2025-22866
crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:43:09.761407+00:00 RedHat Importer Affected by VCID-fk74-ghxp-w3g9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45336.json 38.0.0
2026-04-01T13:43:09.385062+00:00 RedHat Importer Affected by VCID-1jxb-fv1g-2kdu https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45341.json 38.0.0
2026-04-01T13:42:51.790930+00:00 RedHat Importer Affected by VCID-tnrm-85fu-ufhb https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-22866.json 38.0.0