GGo standard library

Products

Exploited and recent CVEs

• CVE-2026-111943 Medium 6.8 Distrust compromised intermediate certificates in crypto/x509 0.4%
• CVE-2026-97032 High 7.5 HTTP/2 server crash due to HPACK encoder race in net/http 0.5%
• CVE-2026-97032 High 7.5 HTTP/2 server crash due to HPACK encoder race in net/http 0.5%
• CVE-2026-94439 High 7.5 HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http 0.4%
• CVE-2026-78663 Critical 9.1 Double flow control refund on HTTP/2 server streams in net/http 0.6%
• CVE-2026-78663 Critical 9.1 Double flow control refund on HTTP/2 server streams in net/http 0.6%
• CVE-2026-78669 High 7.5 Excessive CPU consumption from repeated initial window changes in net/http 0.6%
• CVE-2026-78669 High 7.5 Excessive CPU consumption from repeated initial window changes in net/http 0.6%
• CVE-2026-78660 High 7.5 HTTP/2 transport accepts malformed framing-related headers in net/http 0.4%
• CVE-2026-78660 High 7.5 HTTP/2 transport accepts malformed framing-related headers in net/http 0.4%
• CVE-2026-78667 High 7.5 Lack of limit on size of parsed Range headers in net/http 0.5%
• CVE-2026-94440 High 7.5 Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart 0.5%
• CVE-2026-94440 High 7.5 Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart 0.5%
• CVE-2026-97031 High 7.5 Reject malformed ECH outer extension references in crypto/tls 0.5%
• CVE-2026-56866 High 7.5 HTTP/1 client connection desynchronization after CONNECT rejection in net/http 0.5%
• CVE-2026-56866 High 7.5 HTTP/1 client connection desynchronization after CONNECT rejection in net/http 0.5%
• CVE-2026-56857 Critical 9.8 Root.Mkdir(All) can follow junctions out of the root on Windows in os 0.6%
• CVE-2026-56857 Critical 9.8 Root.Mkdir(All) can follow junctions out of the root on Windows in os 0.6%
• CVE-2026-78659 High 7.5 HTTP/2 server memory exhaustion due to Trailer headers in net/http 0.6%
• CVE-2026-78659 High 7.5 HTTP/2 server memory exhaustion due to Trailer headers in net/http 0.6%
• CVE-2026-97030 Medium 6.1 Recognize yield as regexp preceder keyword in html/template 0.3%
• CVE-2026-94448 Medium 6.1 Reset context tracking on consecutive template expressions in html/template 0.3%
• CVE-2026-56860 Medium 5.9 Avoid quadratic complexity in resolvePath in net/url 0.5%
• CVE-2026-56858 Medium 6.1 Fix Javascript regexp context tracking in html/template 0.3%
• CVE-2026-56862 High 7.5 Limit handshake messages we are willing to accept post-handshake in crypto/tls 0.6%
• CVE-2026-56853 High 7.5 Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 0.6%
• CVE-2026-56859 High 7.5 Add recursion depth guard during decode in encoding/xml 0.6%
• CVE-2026-33818 High 7.5 Enforce maximum recursion depth in encoding/asn1 0.6%
• CVE-2026-46600 High 7.5 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage 0.5%
• CVE-2026-42505 Medium 5.3 Invoking Encrypted Client Hello privacy leak in crypto/tls 0.4%