https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:47:56.770224+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01896 bdu:2022-01896 2026-10-03T14:47:57.181815+00:00 bdu:2022-01896 https://cve.radiocsirt.org/vuln/bell-cve-2021-29923 Withdrawn: BELL-CVE-2021-29923 — CVE-2021-29923 does not affect BellSoft software 2026-10-03T14:47:57.181864+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-golang-2021-29923 BIT-golang-2021-29923 2026-10-03T14:47:57.181884+00:00

Affected: Bitnami: golang

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-943 certfr-2021-avi-943 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T14:47:57.181915+00:00 certfr-2021-avi-943 https://cve.radiocsirt.org/vuln/euvd-2026-26580 EUVD-2026-26580 2026-10-03T14:47:57.181932+00:00 EUVD-2026-26580 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29923 fkie_cve-2021-29923 2026-10-03T14:47:57.181943+00:00

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.

 https://cve.radiocsirt.org/vuln/ghsa-38h6-vxp4-qxvm GHSA-38h6-vxp4-qxvm 2026-10-03T14:47:57.181964+00:00

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.

 https://cve.radiocsirt.org/vuln/gsd-2021-29923 gsd-2021-29923 2026-10-03T14:47:57.181979+00:00 gsd-2021-29923 https://cve.radiocsirt.org/vuln/msrc_cve-2021-29923 msrc_CVE-2021-29923 — Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet which (in… 2026-10-03T14:47:57.181989+00:00 msrc_CVE-2021-29923 https://cve.radiocsirt.org/vuln/oesa-2021-1402 OESA-2021-1402 — golang security update 2026-10-03T14:47:57.182006+00:00

Affected: openEuler:20.03-LTS-SP1: golang, openEuler:20.03-LTS-SP2: golang

The go programming language Security Fix(es): Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.(CVE-2021-33195)

In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive s header) can cause a NewReader or OpenReader panic.(CVE-2021-33196)

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.(CVE-2021-33197)

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.(CVE-2021-33198)

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.(CVE-2021-34558)

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.(CVE-2021-29923)

Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a…

 https://cve.radiocsirt.org/vuln/rhsa-2021:3431 RHSA-2021:3431 — Red Hat Security Advisory: go-toolset-1.15-golang security update 2026-10-03T14:47:57.182046+00:00

golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet golang: net: lookup functions may return invalid host names golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty

 https://cve.radiocsirt.org/vuln/rhsa-2021:3585 RHSA-2021:3585 — Red Hat Security Advisory: go-toolset:rhel8 security update 2026-10-03T14:47:57.182069+00:00

golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-29923 UBUNTU-CVE-2021-29923 2026-10-03T14:47:57.182084+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13 and 3 more

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0941 WID-SEC-W-2022-0941 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-03T14:47:57.182120+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um die Integrität und die Verfügbarkeit zu gefährden.