https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:20:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-350853 EUVD-2026-350853 https://cve.radiocsirt.org/vuln/euvd-2026-350853 https://cve.radiocsirt.org/vuln/fkie_cve-2026-65819 <p>gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an unrecovered panic and remotely deny service. A patch commit is available at 210f25f.</p> <p>gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an unrecovered panic and remotely deny service. A patch commit is available at 210f25f.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-65819 https://cve.radiocsirt.org/vuln/msrc_cve-2026-65819 msrc_CVE-2026-65819 https://cve.radiocsirt.org/vuln/msrc_cve-2026-65819 https://cve.radiocsirt.org/vuln/rhsa-2026:70593 <p>encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages github.com/gopacket/gopacket: gopacket: Remote Denial of Service via crafted packet processing nanoid: nanoid: Denial of Service via infinite loop in random ID generation fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding fast-uri: fast-uri: Host confusion via skipped IDN canonicalization fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests</p> <p>encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages github.com/gopacket/gopacket: gopacket: Remote Denial of Service via crafted packet processing nanoid: nanoid: Denial of Service via infinite loop in random ID generation fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding fast-uri: fast-uri: Host confusion via skipped IDN canonicalization fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests</p> https://cve.radiocsirt.org/vuln/rhsa-2026:70593 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-65819 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: golang-github-gopacket-gopacket, Ubuntu:26.04:LTS: golang-github-gopacket-gopacket</p> <p>gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an unrecovered panic and remotely deny service. A patch commit is available at 210f25f.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: golang-github-gopacket-gopacket, Ubuntu:26.04:LTS: golang-github-gopacket-gopacket</p> <p>gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an unrecovered panic and remotely deny service. A patch commit is available at 210f25f.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-65819