https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:43:56.181201+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:4212 ALSA-2024:4212 — Moderate: golang security update 2026-10-04T09:43:56.333131+00:00

Affected: AlmaLinux:9: go-toolset, AlmaLinux:9: golang, AlmaLinux:9: golang-bin, AlmaLinux:9: golang-docs, AlmaLinux:9: golang-misc, AlmaLinux:9: golang-src, AlmaLinux:9: golang-tests

The golang packages provide the Go programming language compiler.

Security Fix(es):

* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-04485 bdu:2024-04485 2026-10-04T09:43:56.333225+00:00 bdu:2024-04485 https://cve.radiocsirt.org/vuln/bell-cve-2024-24789 BELL-CVE-2024-24789 2026-10-04T09:43:56.333242+00:00

Affected: Alpaquita:23: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:stream: go

 https://cve.radiocsirt.org/vuln/bit-golang-2024-24789 BIT-golang-2024-24789 — Mishandling of corrupt central directory record in archive/zip 2026-10-04T09:43:56.333266+00:00

Affected: Bitnami: golang

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0873 certfr-2024-avi-0873 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T09:43:56.333288+00:00 certfr-2024-avi-0873 https://cve.radiocsirt.org/vuln/euvd-2026-217245 EUVD-2026-217245 2026-10-04T09:43:56.333304+00:00 EUVD-2026-217245 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24789 fkie_cve-2024-24789 2026-10-04T09:43:56.333315+00:00

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

 https://cve.radiocsirt.org/vuln/ghsa-236w-p7wf-5ph8 GHSA-236w-p7wf-5ph8 2026-10-04T09:43:56.333338+00:00

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

 https://cve.radiocsirt.org/vuln/gsd-2024-24789 gsd-2024-24789 2026-10-04T09:43:56.333353+00:00 gsd-2024-24789 https://cve.radiocsirt.org/vuln/msrc_cve-2024-24789 msrc_CVE-2024-24789 — Mishandling of corrupt central directory record in archive/zip 2026-10-04T09:43:56.333363+00:00 msrc_CVE-2024-24789 https://cve.radiocsirt.org/vuln/oesa-2024-1769 OESA-2024-1769 — golang security update 2026-10-04T09:43:56.333378+00:00

Affected: openEuler:22.03-LTS-SP3: golang

The Go Programming Language. Security Fix(es): The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.(CVE-2024-24789)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14020-1 openSUSE-SU-2024:14020-1 — go1.22-1.22.4-1.1 on GA media 2026-10-04T09:43:56.333400+00:00

go1.22-1.22.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhea-2025:0507 RHEA-2025:0507 — Red Hat Enhancement Advisory: Advisory for publishing Helm 3.15.4 GA release 2026-10-04T09:43:56.333417+00:00

golang: net: malformed DNS message can cause infinite loop golang: archive/zip: Incorrect handling of certain ZIP files golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

 https://cve.radiocsirt.org/vuln/suse-su-2024:1935-1 SUSE-SU-2024:1935-1 — Security update for go1.22 2026-10-04T09:43:56.333437+00:00

Security update for go1.22

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-24789 UBUNTU-CVE-2024-24789 2026-10-04T09:43:56.333451+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:20.04:LTS: golang-1.18, Ubuntu:20.04:LTS: golang-1.21 and 13 more

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1287 WID-SEC-W-2024-1287 — Golang Go: Mehrere Schwachstellen 2026-10-04T09:43:56.333497+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Dateien zu manipulieren.