Known vulnerabilities in golang-x-mod
Vendor:
Fedoraproject
Software:
golang-x-mod
Software CPE:
cpe:2.3:o:fedoraproject:golang-x-mod:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
15
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144176 - Insufficient Verification of Data Authenticity CVE-2026-56865 |
CWE-345 | High | 0.41.0-1.fc46 | 18.08.2026 |
SB2026081856 SB20260925263 SB2026101346 and 1 more |
||
| #VU118189 - Improper input validation CVE-2025-58188 |
CWE-20 | Medium | 0.27.0-4.fc43 | 07.11.2025 |
SB2025110705 SB2025110716 SB2025110717 and 117 more |
||
| #VU118187 - Resource exhaustion CVE-2025-58185 |
CWE-400 | Medium | 0.27.0-4.fc43 | 07.11.2025 |
SB2025110705 SB2025110716 SB2025110717 and 117 more |
||
| #VU118184 - Resource exhaustion CVE-2025-61723 |
CWE-400 | Medium | 0.27.0-4.fc43 | 07.11.2025 |
SB2025110705 SB2025110716 SB2025110717 and 123 more |
||
| #VU118183 - Improper Encoding or Escaping of Output CVE-2025-58189 |
CWE-116 | Low | 0.27.0-4.fc43 | 07.11.2025 |
SB2025110705 SB2025110711 SB2025110712 and 125 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 0.14.0-1.el9, 0.14.0-1.fc38, 0.14.0-1.fc39 | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 344 more |
||
| #VU82064 - Resource exhaustion CVE-2023-39325 |
CWE-400 | Medium | 0.14.0-1.el9, 0.14.0-1.fc38, 0.14.0-1.fc39 | 16.10.2023 |
SB2023101651 SB2023101652 SB2023101653 and 341 more |
||
| #VU70334 - Allocation of Resources Without Limits or Throttling CVE-2022-41717 |
CWE-770 | Medium | 0.14.0-1.el9, 0.14.0-1.fc38, 0.14.0-1.fc39 | 14.12.2022 |
SB2022121432 SB2022121433 SB2022121435 and 185 more |
||
| #VU66447 - Overly Permissive Cross-domain Whitelist CVE-2022-1996 |
CWE-942 | Low | 0.6.0~dev-3.20220330git9b9b3d8.fc35, 0.6.0~dev-3.20220330git9b9b3d8.fc36, 0.6.0~dev-3.20220330git9b9b3d8.fc37 | 12.08.2022 |
SB2022081216 SB2022081228 SB2022081229 and 65 more |
||
| #VU66122 - Use of Insufficiently Random Values CVE-2022-30629 |
CWE-330 | Medium | 0.6.0~dev-3.20220330git9b9b3d8.fc36, 0.6.0~dev-3.20220330git9b9b3d8.fc37 | 05.08.2022 |
SB2022080501 SB2022080503 SB2022081106 and 81 more |
||
| #VU64269 - Integer overflow CVE-2022-28327 |
CWE-190 | Low | 0.6.0~dev-3.20220330git9b9b3d8.fc35, 0.6.0~dev-3.20220330git9b9b3d8.fc36, 0.6.0~dev-3.20220330git9b9b3d8.fc37 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061506 and 90 more |
||
| #VU64266 - Buffer overflow CVE-2022-24675 |
CWE-120 | Low | 0.6.0~dev-3.20220330git9b9b3d8.fc35, 0.6.0~dev-3.20220330git9b9b3d8.fc36, 0.6.0~dev-3.20220330git9b9b3d8.fc37 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061511 and 88 more |
||
| #VU63173 - Permissions, Privileges, and Access Controls CVE-2022-29526 |
CWE-264 | Low | 0.6.0~dev-3.20220330git9b9b3d8.fc35, 0.6.0~dev-3.20220330git9b9b3d8.fc36, 0.6.0~dev-3.20220330git9b9b3d8.fc37 | 14.05.2022 |
SB2022051403 SB2022051404 SB2022062928 and 65 more |
||
| #VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191 |
CWE-327 | Medium | 0.6.0~dev-3.20220330git9b9b3d8.fc36, 0.6.0~dev-3.20220330git9b9b3d8.fc37 | 10.04.2022 |
SB2022041004 SB2022041406 SB2022081226 and 91 more |
||
| #VU61599 - Improper input validation CVE-2022-21698 |
CWE-20 | Medium | 0.6.0~dev-3.20220330git9b9b3d8.fc35, 0.6.0~dev-3.20220330git9b9b3d8.fc36 | 24.03.2022 |
SB2022021530 SB2022032413 SB2022040807 and 111 more |