https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:56:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-07316 bdu:2025-07316 https://cve.radiocsirt.org/vuln/bdu:2025-07316 https://cve.radiocsirt.org/vuln/bell-cve-2025-22873 <p><strong>Affected:</strong> Alpaquita:stream: go, BellSoft Hardened Containers:stream: go</p> <p><strong>Affected:</strong> Alpaquita:stream: go, BellSoft Hardened Containers:stream: go</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-22873 https://cve.radiocsirt.org/vuln/bit-golang-2025-22873 <p><strong>Affected:</strong> Bitnami: golang</p> <p>It was possible to improperly access the parent directory of an os.Root by opening a filename ending in &#34;../&#34;. For example, Root.Open(&#34;../&#34;) would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>It was possible to improperly access the parent directory of an os.Root by opening a filename ending in &#34;../&#34;. For example, Root.Open(&#34;../&#34;) would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.</p> https://cve.radiocsirt.org/vuln/bit-golang-2025-22873 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0199 certfr-2026-avi-0199 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0199 https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cosign</p> <p>Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cosign</p> <p>Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ba61304 https://cve.radiocsirt.org/vuln/euvd-2026-267462 EUVD-2026-267462 https://cve.radiocsirt.org/vuln/euvd-2026-267462 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22873 <p>It was possible to improperly access the parent directory of an os.Root by opening a filename ending in &#34;../&#34;. For example, Root.Open(&#34;../&#34;) would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.</p> <p>It was possible to improperly access the parent directory of an os.Root by opening a filename ending in &#34;../&#34;. For example, Root.Open(&#34;../&#34;) would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-22873 https://cve.radiocsirt.org/vuln/ghsa-p3p7-9h4w-jqw2 <p>It was possible to improperly access the parent directory of an os.Root by opening a filename ending in &#34;../&#34;. For example, Root.Open(&#34;../&#34;) would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.</p> <p>It was possible to improperly access the parent directory of an os.Root by opening a filename ending in &#34;../&#34;. For example, Root.Open(&#34;../&#34;) would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.</p> https://cve.radiocsirt.org/vuln/ghsa-p3p7-9h4w-jqw2 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15058-1 <p>go1.24-1.24.3-1.1 on GA media</p> <p>go1.24-1.24.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15058-1 https://cve.radiocsirt.org/vuln/rhsa-2026:7291 <p>os: os: Information disclosure via path traversal using specially crafted filenames net/http: CrossOriginProtection bypass in net/http golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html net/url: Insufficient validation of bracketed IPv6 hostnames in net/url golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication golang: archive/tar: Unbounded allocation when parsing GNU sparse map encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information golang.org/x/net/html: Infinite parsing loop in golang.org/x/net encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto net/mail: Excessive CPU consumption in ParseAddress in net/mail golang: net/url: Memory exhaustion in query parameter parsing in net/url golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs golang: archive/zip: Excessive CPU co…</p> <p>os: os: Information disclosure via path traversal using specially crafted filenames net/http: CrossOriginProtection bypass in net/http golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html net/url: Insufficient validation of bracketed IPv6 hostnames in net/url golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication golang: archive/tar: Unbounded allocation when parsing GNU sparse map encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information golang.org/x/net/html: Infinite parsing loop in golang.org/x/net encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto net/mail: Excessive CPU consumption in ParseAddress in net/mail golang: net/url: Memory exhaustion in query parameter parsing in net/url golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs golang: archive/zip: Excessive CPU co…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:7291 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-22873 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:26.04:LTS: golang-1.24</p> <p>It was possible to improperly access the parent directory of an os.Root by opening a filename ending in &#34;../&#34;. For example, Root.Open(&#34;../&#34;) would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:26.04:LTS: golang-1.24</p> <p>It was possible to improperly access the parent directory of an os.Root by opening a filename ending in &#34;../&#34;. For example, Root.Open(&#34;../&#34;) would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-22873 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0953 <p>Ein Angreifer kann eine Schwachstelle in Golang Go ausnutzen, um Informationen offenzulegen.</p> <p>Ein Angreifer kann eine Schwachstelle in Golang Go ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0953