https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:53:33.001249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1819 ALSA-2022:1819 — Moderate: go-toolset:rhel8 security and bug fix update 2026-10-03T10:53:33.413384+00:00

Affected: AlmaLinux:8: delve, AlmaLinux:8: go-toolset, AlmaLinux:8: golang, AlmaLinux:8: golang-bin, AlmaLinux:8: golang-docs, AlmaLinux:8: golang-misc, AlmaLinux:8: golang-race, AlmaLinux:8: golang-src, AlmaLinux:8: golang-tests

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

* golang: Command-line arguments may overwrite global data (CVE-2021-38297)

* golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) (CVE-2021-39293)

* golang: debug/macho: invalid dynamic symbol table command can cause panic (CVE-2021-41771)

* golang: archive/zip: Reader.Open panics on empty string (CVE-2021-41772)

* golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString (CVE-2022-23772)

* golang: cmd/go: misinterpretation of branch names can lead to incorrect access control (CVE-2022-23773)

* golang: crypto/elliptic IsOnCurve returns true for invalid field elements (CVE-2022-23806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2022-23773 Withdrawn: BELL-CVE-2022-23773 — CVE-2022-23773 does not affect BellSoft software 2026-10-03T10:53:33.413483+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-golang-2022-23773 BIT-golang-2022-23773 2026-10-03T10:53:33.413503+00:00

Affected: Bitnami: golang

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-239 certfr-2022-avi-239 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T10:53:33.413525+00:00 certfr-2022-avi-239 https://cve.radiocsirt.org/vuln/euvd-2026-13868 EUVD-2026-13868 2026-10-03T10:53:33.413542+00:00 EUVD-2026-13868 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23773 fkie_cve-2022-23773 2026-10-03T10:53:33.413554+00:00

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

 https://cve.radiocsirt.org/vuln/ghsa-52j8-p7r3-733m GHSA-52j8-p7r3-733m 2026-10-03T10:53:33.413574+00:00

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

 https://cve.radiocsirt.org/vuln/gsd-2022-23773 gsd-2022-23773 2026-10-03T10:53:33.413588+00:00 gsd-2022-23773 https://cve.radiocsirt.org/vuln/msrc_cve-2022-23773 msrc_CVE-2022-23773 — cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version ta… 2026-10-03T10:53:33.413597+00:00 msrc_CVE-2022-23773 https://cve.radiocsirt.org/vuln/oesa-2022-1606 OESA-2022-1606 — golang security update 2026-10-03T10:53:33.413614+00:00

Affected: openEuler:20.03-LTS-SP1: golang, openEuler:20.03-LTS-SP2: golang, openEuler:20.03-LTS-SP3: golang

The Go Programming Language. Security Fix(es): cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.(CVE-2022-23773)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0723-1 openSUSE-SU-2022:0723-1 — Security update for go1.17 2026-10-03T10:53:33.413639+00:00

Security update for go1.17

 https://cve.radiocsirt.org/vuln/rhsa-2022:4860 RHSA-2022:4860 — Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.22.1 2026-10-03T10:53:33.413655+00:00

golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString golang: cmd/go: misinterpretation of branch names can lead to incorrect access control golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

 https://cve.radiocsirt.org/vuln/suse-su-2022:0723-1 SUSE-SU-2022:0723-1 — Security update for go1.17 2026-10-03T10:53:33.413674+00:00

Security update for go1.17

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23773 UBUNTU-CVE-2022-23773 2026-10-03T10:53:33.413689+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13 and 4 more

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0023 WID-SEC-W-2022-0023 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-03T10:53:33.413726+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.