https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:11:51 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2021-27918 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-27918 https://cve.radiocsirt.org/vuln/bit-golang-2021-27918 <p><strong>Affected:</strong> Bitnami: golang</p> <p>encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.</p> https://cve.radiocsirt.org/vuln/bit-golang-2021-27918 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/euvd-2026-25730 EUVD-2026-25730 https://cve.radiocsirt.org/vuln/euvd-2026-25730 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27918 <p>encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.</p> <p>encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-27918 https://cve.radiocsirt.org/vuln/ghsa-8mmp-c685-53vw <p>encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.</p> <p>encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.</p> https://cve.radiocsirt.org/vuln/ghsa-8mmp-c685-53vw https://cve.radiocsirt.org/vuln/gsd-2021-27918 gsd-2021-27918 https://cve.radiocsirt.org/vuln/gsd-2021-27918 https://cve.radiocsirt.org/vuln/msrc_cve-2021-27918 msrc_CVE-2021-27918 https://cve.radiocsirt.org/vuln/msrc_cve-2021-27918 https://cve.radiocsirt.org/vuln/oesa-2021-1184 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: golang</p> <p>Security Fix(es): encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.(CVE-2021-27918)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: golang</p> <p>Security Fix(es): encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.(CVE-2021-27918)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1184 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0480-1 <p>Security update for go1.15</p> <p>Security update for go1.15</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0480-1 https://cve.radiocsirt.org/vuln/rhba-2021:3003 <p>kubernetes: Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel &gt;= 9 noobaa-core: Cross-site scripting vulnerability with noobaa management URL golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader</p> <p>kubernetes: Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel &gt;= 9 noobaa-core: Cross-site scripting vulnerability with noobaa management URL golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader</p> https://cve.radiocsirt.org/vuln/rhba-2021:3003 https://cve.radiocsirt.org/vuln/suse-su-2021:0937-1 <p>Security update for go1.16</p> <p>Security update for go1.16</p> https://cve.radiocsirt.org/vuln/suse-su-2021:0937-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-27918 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13, Ubuntu:20.04:LTS: golang-1.14 and 1 more</p> <p>encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13, Ubuntu:20.04:LTS: golang-1.14 and 1 more</p> <p>encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-27918 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510