Search for packages
Package details: pkg:alpm/archlinux/go@2:1.13.1-1
purl pkg:alpm/archlinux/go@2:1.13.1-1
Next non-vulnerable version 2:1.13.3-1
Latest non-vulnerable version 2:1.24.3-1
Risk 3.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-4uqa-rypz-aaas
Aliases:
CVE-2019-17596
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.
2:1.13.3-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-kq1v-8r3r-aaaf Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. CVE-2019-16276

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:50.412894+00:00 Arch Linux Importer Affected by VCID-4uqa-rypz-aaas https://security.archlinux.org/AVG-1051 36.0.0
2025-03-28T07:45:54.777440+00:00 Arch Linux Importer Fixing VCID-kq1v-8r3r-aaaf https://security.archlinux.org/AVG-1050 36.0.0
2024-09-18T02:02:11.370411+00:00 Arch Linux Importer Affected by VCID-4uqa-rypz-aaas https://security.archlinux.org/AVG-1051 34.0.1
2024-09-18T02:00:57.250466+00:00 Arch Linux Importer Fixing VCID-kq1v-8r3r-aaaf https://security.archlinux.org/AVG-1050 34.0.1
2024-01-03T22:28:13.734686+00:00 Arch Linux Importer Affected by VCID-4uqa-rypz-aaas https://security.archlinux.org/AVG-1051 34.0.0rc1
2024-01-03T22:27:14.164817+00:00 Arch Linux Importer Fixing VCID-kq1v-8r3r-aaaf https://security.archlinux.org/AVG-1050 34.0.0rc1