Most recent entries from all

BELL-CVE-2026-42505

2026-10-04T04:50:18.745905+00:00

Affected: Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go

BIT-golang-2026-42505 — Invoking Encrypted Client Hello privacy leak in crypto/tls

2026-10-04T04:50:18.746002+00:00

Affected: Bitnami: golang

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.

certfr-2026-avi-1125 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

2026-10-04T04:50:18.746034+00:00

certfr-2026-avi-1125

Withdrawn: CLEANSTART-2026-AC51978 — Security fixes for CVE-2026-39822, CVE-2026-42504, CVE-2026-42505 applied in versions: 0.15.4-r3, 0.15.4-r4

2026-10-04T04:50:18.746054+00:00

Withdrawn by the publisher.

Affected: CleanStart: haproxy-ingress

Multiple security vulnerabilities affect the haproxy-ingress package. These issues are resolved in later releases. See references for individual vulnerability details.

EUVD-2026-334042

2026-10-04T04:50:18.746077+00:00

EUVD-2026-334042

fkie_cve-2026-42505

2026-10-04T04:50:18.746091+00:00

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.

GHSA-ff52-ph69-cf7x

2026-10-04T04:50:18.746112+00:00

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.

msrc_CVE-2026-42505 — Invoking Encrypted Client Hello privacy leak in crypto/tls

2026-10-04T04:50:18.746127+00:00

msrc_CVE-2026-42505

openSUSE-SU-2026:11212-1 — go1.25-1.25.12-1.1 on GA media

2026-10-04T04:50:18.746143+00:00

go1.25-1.25.12-1.1 on GA media

RHSA-2026:36477 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

2026-10-04T04:50:18.746160+00:00

golang: Go os.Root: Symlink following vulnerability allows directory traversal crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

SUSE-SU-2026:22638-1 — Security update for go1.25-openssl

2026-10-04T04:50:18.746178+00:00

Security update for go1.25-openssl

UBUNTU-CVE-2026-42505

2026-10-04T04:50:18.746211+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.8 and 26 more

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.

WID-SEC-W-2026-2239 — Golang Go: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

2026-10-04T04:50:18.746270+00:00

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Informationen offenzulegen.