https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:42:05 +0000 https://cve.radiocsirt.org/vuln/cve-2025-0913 <p><strong>Affected:</strong> Go standard library syscall, Go standard library os</p> <p>os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with O_CREATE and O_EXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would create a file in that location. OpenFile now always returns an error when the O_CREATE and O_EXCL flags are both set and the target path is a symlink.</p> <p><strong>Affected:</strong> Go standard library syscall, Go standard library os</p> <p>os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with O_CREATE and O_EXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would create a file in that location. OpenFile now always returns an error when the O_CREATE and O_EXCL flags are both set and the target path is a symlink.</p> https://cve.radiocsirt.org/vuln/cve-2025-0913 https://cve.radiocsirt.org/vuln/ghsa-2x5j-vhc8-9cwm <p><strong>Affected:</strong> Go: github.com/cloudflare/circl</p> <p>### Impact The CIRCL implementation of FourQ fails to validate user-supplied low-order points during Diffie-Hellman key exchange, potentially allowing attackers to force the identity point and compromise session security.</p> <p>Moreover, there is an incorrect point validation in ScalarMult can lead to incorrect results in the isEqual function and if a point is on the curve.</p> <p>### Patches Version 1.6.1 (https://github.com/cloudflare/circl/tree/v1.6.1) mitigates the identified issues.</p> <p>We acknowledge Alon Livne (Botanica Software Labs) for the reported findings.</p> <p><strong>Affected:</strong> Go: github.com/cloudflare/circl</p> <p>### Impact The CIRCL implementation of FourQ fails to validate user-supplied low-order points during Diffie-Hellman key exchange, potentially allowing attackers to force the identity point and compromise session security.</p> <p>Moreover, there is an incorrect point validation in ScalarMult can lead to incorrect results in the isEqual function and if a point is on the curve.</p> <p>### Patches Version 1.6.1 (https://github.com/cloudflare/circl/tree/v1.6.1) mitigates the identified issues.</p> <p>We acknowledge Alon Livne (Botanica Software Labs) for the reported findings.</p> https://cve.radiocsirt.org/vuln/ghsa-2x5j-vhc8-9cwm