Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 08:26:09 +0000 CVE-2025-58183 — Unbounded allocation when parsing GNU sparse map in archive/tar https://cve.radiocsirt.org/vuln/cve-2025-58183 <p><strong>Affected:</strong> Go standard library archive/tar</p> <p>tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.</p> <p><strong>Affected:</strong> Go standard library archive/tar</p> <p>tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.</p> https://cve.radiocsirt.org/vuln/cve-2025-58183 GHSA-f6x5-jh6r-wrfv — golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read https://cve.radiocsirt.org/vuln/ghsa-f6x5-jh6r-wrfv <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.</p> <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.</p> https://cve.radiocsirt.org/vuln/ghsa-f6x5-jh6r-wrfv