https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:02:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-04126 bdu:2026-04126 https://cve.radiocsirt.org/vuln/bdu:2026-04126 https://cve.radiocsirt.org/vuln/bell-cve-2026-27138 <p><strong>Affected:</strong> Alpaquita:stream: go, BellSoft Hardened Containers:stream: go</p> <p><strong>Affected:</strong> Alpaquita:stream: go, BellSoft Hardened Containers:stream: go</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-27138 https://cve.radiocsirt.org/vuln/bit-golang-2026-27138 <p><strong>Affected:</strong> Bitnami: golang</p> <p>Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.</p> https://cve.radiocsirt.org/vuln/bit-golang-2026-27138 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0299 certfr-2026-avi-0299 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0299 https://cve.radiocsirt.org/vuln/cleanstart-2026-ab43319 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: stakater-reloader</p> <p>Multiple security vulnerabilities affect the stakater-reloader package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: stakater-reloader</p> <p>Multiple security vulnerabilities affect the stakater-reloader package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ab43319 https://cve.radiocsirt.org/vuln/euvd-2026-275161 EUVD-2026-275161 https://cve.radiocsirt.org/vuln/euvd-2026-275161 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27138 <p>Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.</p> <p>Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-27138 https://cve.radiocsirt.org/vuln/ghsa-ph5j-38mg-j6hp <p>Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.</p> <p>Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.</p> https://cve.radiocsirt.org/vuln/ghsa-ph5j-38mg-j6hp https://cve.radiocsirt.org/vuln/msrc_cve-2026-27138 msrc_CVE-2026-27138 https://cve.radiocsirt.org/vuln/msrc_cve-2026-27138 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10299-1 <p>go1.26-1.26.1-1.1 on GA media</p> <p>go1.26-1.26.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10299-1 https://cve.radiocsirt.org/vuln/rhsa-2026:7291 <p>os: os: Information disclosure via path traversal using specially crafted filenames net/http: CrossOriginProtection bypass in net/http golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html net/url: Insufficient validation of bracketed IPv6 hostnames in net/url golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication golang: archive/tar: Unbounded allocation when parsing GNU sparse map encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information golang.org/x/net/html: Infinite parsing loop in golang.org/x/net encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto net/mail: Excessive CPU consumption in ParseAddress in net/mail golang: net/url: Memory exhaustion in query parameter parsing in net/url golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs golang: archive/zip: Excessive CPU co…</p> <p>os: os: Information disclosure via path traversal using specially crafted filenames net/http: CrossOriginProtection bypass in net/http golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html net/url: Insufficient validation of bracketed IPv6 hostnames in net/url golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication golang: archive/tar: Unbounded allocation when parsing GNU sparse map encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information golang.org/x/net/html: Infinite parsing loop in golang.org/x/net encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto net/mail: Excessive CPU consumption in ParseAddress in net/mail golang: net/url: Memory exhaustion in query parameter parsing in net/url golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs golang: archive/zip: Excessive CPU co…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:7291 https://cve.radiocsirt.org/vuln/suse-su-2026:21195-1 <p>Security update for go1.26-openssl</p> <p>Security update for go1.26-openssl</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21195-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-27138 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:25.10: golang-1.25, Ubuntu:26.04:LTS: golang-1.24, Ubuntu:26.04:LTS: golang-1.25, Ubuntu:26.04:LTS: golang-1.26</p> <p>Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:25.10: golang-1.25, Ubuntu:26.04:LTS: golang-1.24, Ubuntu:26.04:LTS: golang-1.25, Ubuntu:26.04:LTS: golang-1.26</p> <p>Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-27138 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0548 <p>Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0548