Search for packages
| purl | pkg:deb/debian/golang-1.11@1.11.6-1%2Bdeb10u4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2ps9-t61s-aaan
Aliases: CVE-2021-33196 |
In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic. | There are no reported fixed by versions. |
|
VCID-66vz-z7v3-aaar
Aliases: CVE-2021-44717 |
Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion. | There are no reported fixed by versions. |
|
VCID-8ycp-22yk-aaap
Aliases: CVE-2021-38297 |
Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used. | There are no reported fixed by versions. |
|
VCID-ac31-1hfd-aaah
Aliases: CVE-2021-39293 |
In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196. | There are no reported fixed by versions. |
|
VCID-ftng-xjpg-aaag
Aliases: CVE-2022-23806 |
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element. | There are no reported fixed by versions. |
|
VCID-nk3v-tvmw-aaam
Aliases: CVE-2021-44716 GHSA-vc3p-29h2-gpcp |
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests. | There are no reported fixed by versions. |
|
VCID-nphv-er38-aaae
Aliases: CVE-2021-41771 |
ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation. | There are no reported fixed by versions. |
|
VCID-q8fq-1yrc-aaag
Aliases: CVE-2022-24921 |
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression. | There are no reported fixed by versions. |
|
VCID-tx59-xnak-aaaj
Aliases: CVE-2020-28367 |
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive. | There are no reported fixed by versions. |
|
VCID-v537-bky8-aaak
Aliases: CVE-2021-36221 |
Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-8dup-t5n7-aaas | In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field. |
CVE-2021-3114
|
| VCID-ad6a-7pdt-aaaf | Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time. |
CVE-2020-15586
|
| VCID-chcx-jfyc-aaaf | Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate. |
CVE-2020-7919
GHSA-cjjc-xp8v-855w |
| VCID-zxgs-3w22-aaap | Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs. |
CVE-2020-16845
GHSA-q6gq-997w-f55g |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T17:56:37.202271+00:00 | Debian Oval Importer | Affected by | VCID-nk3v-tvmw-aaam | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T17:44:11.117553+00:00 | Debian Oval Importer | Affected by | VCID-q8fq-1yrc-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T17:31:59.892109+00:00 | Debian Oval Importer | Affected by | VCID-2ps9-t61s-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T17:19:30.196272+00:00 | Debian Oval Importer | Affected by | VCID-nphv-er38-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T16:47:29.147359+00:00 | Debian Oval Importer | Affected by | VCID-ftng-xjpg-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:39:43.146432+00:00 | Debian Oval Importer | Affected by | VCID-66vz-z7v3-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:30:21.750256+00:00 | Debian Oval Importer | Fixing | VCID-8dup-t5n7-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:17:07.233594+00:00 | Debian Oval Importer | Affected by | VCID-tx59-xnak-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:55:35.618121+00:00 | Debian Oval Importer | Affected by | VCID-v537-bky8-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:31:08.217056+00:00 | Debian Oval Importer | Fixing | VCID-chcx-jfyc-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:17:09.763607+00:00 | Debian Oval Importer | Affected by | VCID-ac31-1hfd-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T12:46:48.062065+00:00 | Debian Oval Importer | Fixing | VCID-ad6a-7pdt-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T11:47:33.756538+00:00 | Debian Oval Importer | Fixing | VCID-zxgs-3w22-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T11:15:46.484891+00:00 | Debian Oval Importer | Affected by | VCID-8ycp-22yk-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T08:04:03.131483+00:00 | Debian Oval Importer | Affected by | VCID-tx59-xnak-aaaj | None | 36.1.3 |
| 2025-06-21T08:03:49.277756+00:00 | Debian Oval Importer | Affected by | VCID-ftng-xjpg-aaag | None | 36.1.3 |
| 2025-06-21T08:03:47.882173+00:00 | Debian Oval Importer | Affected by | VCID-ac31-1hfd-aaah | None | 36.1.3 |
| 2025-06-21T08:03:38.426171+00:00 | Debian Oval Importer | Affected by | VCID-q8fq-1yrc-aaag | None | 36.1.3 |
| 2025-06-21T08:03:33.859334+00:00 | Debian Oval Importer | Affected by | VCID-66vz-z7v3-aaar | None | 36.1.3 |
| 2025-06-21T08:03:23.519142+00:00 | Debian Oval Importer | Affected by | VCID-2ps9-t61s-aaan | None | 36.1.3 |
| 2025-06-21T08:03:02.907344+00:00 | Debian Oval Importer | Affected by | VCID-v537-bky8-aaak | None | 36.1.3 |
| 2025-06-21T08:03:01.593408+00:00 | Debian Oval Importer | Affected by | VCID-nk3v-tvmw-aaam | None | 36.1.3 |
| 2025-06-21T08:02:47.848331+00:00 | Debian Oval Importer | Affected by | VCID-nphv-er38-aaae | None | 36.1.3 |
| 2025-06-21T08:02:43.671887+00:00 | Debian Oval Importer | Affected by | VCID-8ycp-22yk-aaap | None | 36.1.3 |
| 2025-06-21T01:14:39.525412+00:00 | Debian Oval Importer | Fixing | VCID-ad6a-7pdt-aaaf | None | 36.1.3 |
| 2025-06-21T00:24:15.495280+00:00 | Debian Oval Importer | Fixing | VCID-chcx-jfyc-aaaf | None | 36.1.3 |
| 2025-06-20T22:11:05.068946+00:00 | Debian Oval Importer | Fixing | VCID-8dup-t5n7-aaas | None | 36.1.3 |
| 2025-06-20T20:48:22.739567+00:00 | Debian Oval Importer | Fixing | VCID-zxgs-3w22-aaap | None | 36.1.3 |
| 2025-06-08T10:28:19.739629+00:00 | Debian Oval Importer | Affected by | VCID-nk3v-tvmw-aaam | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T10:17:17.283193+00:00 | Debian Oval Importer | Affected by | VCID-q8fq-1yrc-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T10:08:09.942392+00:00 | Debian Oval Importer | Affected by | VCID-2ps9-t61s-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T10:00:37.199860+00:00 | Debian Oval Importer | Affected by | VCID-nphv-er38-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T09:32:43.188876+00:00 | Debian Oval Importer | Affected by | VCID-ftng-xjpg-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:34:03.372094+00:00 | Debian Oval Importer | Affected by | VCID-66vz-z7v3-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:24:54.354340+00:00 | Debian Oval Importer | Fixing | VCID-8dup-t5n7-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:10:58.106941+00:00 | Debian Oval Importer | Affected by | VCID-tx59-xnak-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:49:04.154117+00:00 | Debian Oval Importer | Affected by | VCID-v537-bky8-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:25:08.841608+00:00 | Debian Oval Importer | Fixing | VCID-chcx-jfyc-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:11:47.321691+00:00 | Debian Oval Importer | Affected by | VCID-ac31-1hfd-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T05:41:53.042183+00:00 | Debian Oval Importer | Fixing | VCID-ad6a-7pdt-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T05:02:14.835984+00:00 | Debian Oval Importer | Fixing | VCID-zxgs-3w22-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T04:40:57.476477+00:00 | Debian Oval Importer | Affected by | VCID-8ycp-22yk-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T01:45:05.875171+00:00 | Debian Oval Importer | Affected by | VCID-tx59-xnak-aaaj | None | 36.1.0 |
| 2025-06-08T01:44:52.029197+00:00 | Debian Oval Importer | Affected by | VCID-ftng-xjpg-aaag | None | 36.1.0 |
| 2025-06-08T01:44:50.681175+00:00 | Debian Oval Importer | Affected by | VCID-ac31-1hfd-aaah | None | 36.1.0 |
| 2025-06-08T01:44:41.654009+00:00 | Debian Oval Importer | Affected by | VCID-q8fq-1yrc-aaag | None | 36.1.0 |
| 2025-06-08T01:44:37.007843+00:00 | Debian Oval Importer | Affected by | VCID-66vz-z7v3-aaar | None | 36.1.0 |
| 2025-06-08T01:44:26.584923+00:00 | Debian Oval Importer | Affected by | VCID-2ps9-t61s-aaan | None | 36.1.0 |
| 2025-06-08T01:44:04.887778+00:00 | Debian Oval Importer | Affected by | VCID-v537-bky8-aaak | None | 36.1.0 |
| 2025-06-08T01:44:03.246874+00:00 | Debian Oval Importer | Affected by | VCID-nk3v-tvmw-aaam | None | 36.1.0 |
| 2025-06-08T01:43:49.078674+00:00 | Debian Oval Importer | Affected by | VCID-nphv-er38-aaae | None | 36.1.0 |
| 2025-06-08T01:43:44.993606+00:00 | Debian Oval Importer | Affected by | VCID-8ycp-22yk-aaap | None | 36.1.0 |
| 2025-06-07T18:37:19.336774+00:00 | Debian Oval Importer | Fixing | VCID-ad6a-7pdt-aaaf | None | 36.1.0 |
| 2025-06-07T17:47:03.423290+00:00 | Debian Oval Importer | Fixing | VCID-chcx-jfyc-aaaf | None | 36.1.0 |
| 2025-06-07T15:35:05.704262+00:00 | Debian Oval Importer | Fixing | VCID-8dup-t5n7-aaas | None | 36.1.0 |
| 2025-06-07T14:19:50.515270+00:00 | Debian Oval Importer | Fixing | VCID-zxgs-3w22-aaap | None | 36.1.0 |
| 2025-04-12T16:09:33.289504+00:00 | Debian Oval Importer | Affected by | VCID-nk3v-tvmw-aaam | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-12T15:58:09.039599+00:00 | Debian Oval Importer | Affected by | VCID-q8fq-1yrc-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T08:40:29.643191+00:00 | Debian Oval Importer | Affected by | VCID-2ps9-t61s-aaan | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T08:32:53.586680+00:00 | Debian Oval Importer | Affected by | VCID-nphv-er38-aaae | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T08:05:07.208474+00:00 | Debian Oval Importer | Affected by | VCID-ftng-xjpg-aaag | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T07:05:27.631497+00:00 | Debian Oval Importer | Affected by | VCID-66vz-z7v3-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:56:16.503681+00:00 | Debian Oval Importer | Fixing | VCID-8dup-t5n7-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:42:56.404992+00:00 | Debian Oval Importer | Affected by | VCID-tx59-xnak-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:21:31.209249+00:00 | Debian Oval Importer | Affected by | VCID-v537-bky8-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:57:28.239259+00:00 | Debian Oval Importer | Fixing | VCID-chcx-jfyc-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:43:53.539642+00:00 | Debian Oval Importer | Affected by | VCID-ac31-1hfd-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:13:35.237971+00:00 | Debian Oval Importer | Fixing | VCID-ad6a-7pdt-aaaf | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T03:33:08.776826+00:00 | Debian Oval Importer | Fixing | VCID-zxgs-3w22-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T03:11:59.853731+00:00 | Debian Oval Importer | Affected by | VCID-8ycp-22yk-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T00:16:56.958722+00:00 | Debian Oval Importer | Affected by | VCID-tx59-xnak-aaaj | None | 36.0.0 |
| 2025-04-08T00:16:42.387747+00:00 | Debian Oval Importer | Affected by | VCID-ftng-xjpg-aaag | None | 36.0.0 |
| 2025-04-08T00:16:41.053754+00:00 | Debian Oval Importer | Affected by | VCID-ac31-1hfd-aaah | None | 36.0.0 |
| 2025-04-08T00:16:31.845058+00:00 | Debian Oval Importer | Affected by | VCID-q8fq-1yrc-aaag | None | 36.0.0 |
| 2025-04-08T00:16:27.083025+00:00 | Debian Oval Importer | Affected by | VCID-66vz-z7v3-aaar | None | 36.0.0 |
| 2025-04-08T00:16:16.581445+00:00 | Debian Oval Importer | Affected by | VCID-2ps9-t61s-aaan | None | 36.0.0 |
| 2025-04-08T00:15:55.956247+00:00 | Debian Oval Importer | Affected by | VCID-v537-bky8-aaak | None | 36.0.0 |
| 2025-04-08T00:15:54.616000+00:00 | Debian Oval Importer | Affected by | VCID-nk3v-tvmw-aaam | None | 36.0.0 |
| 2025-04-08T00:15:40.620405+00:00 | Debian Oval Importer | Affected by | VCID-nphv-er38-aaae | None | 36.0.0 |
| 2025-04-08T00:15:36.394516+00:00 | Debian Oval Importer | Affected by | VCID-8ycp-22yk-aaap | None | 36.0.0 |
| 2025-04-07T17:15:05.807462+00:00 | Debian Oval Importer | Fixing | VCID-ad6a-7pdt-aaaf | None | 36.0.0 |
| 2025-04-07T16:23:29.523718+00:00 | Debian Oval Importer | Fixing | VCID-chcx-jfyc-aaaf | None | 36.0.0 |
| 2025-04-07T14:06:03.900851+00:00 | Debian Oval Importer | Fixing | VCID-8dup-t5n7-aaas | None | 36.0.0 |
| 2025-04-07T12:52:36.438010+00:00 | Debian Oval Importer | Fixing | VCID-zxgs-3w22-aaap | None | 36.0.0 |