Known vulnerabilities in Go programming language 1.21rc3

Vendor: Google
Version: 1.21rc3
Software CPE: cpe:2.3:a:google:golang:*:*:*:*:*:*:*:*
Total vulnerabilities: 34
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Go programming language version 1.21rc3 Go programming language 1.21rc3 is affected by 34 vulnerabilities: 1 high, 26 medium, 7 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123129 - Improper Certificate Validation
CVE-2025-68121
CWE-295 High
No
No
1.24.13, 1.25.7 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 108 more
#VU118191 - Resource exhaustion
CVE-2025-61724
CWE-400 Medium
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110731
SB2025111491
and 20 more
#VU118190 - Resource exhaustion
CVE-2025-58183
CWE-400 Medium
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 172 more
#VU118189 - Improper input validation
CVE-2025-58188
CWE-20 Medium
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 108 more
#VU118188 - Allocation of Resources Without Limits or Throttling
CVE-2025-58186
CWE-770 Medium
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110731
SB2025120304
and 19 more
#VU118187 - Resource exhaustion
CVE-2025-58185
CWE-400 Medium
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 110 more
#VU118186 - Improper input validation
CVE-2025-47912
CWE-20 Low
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110731
SB2025120304
and 19 more
#VU118184 - Resource exhaustion
CVE-2025-61723
CWE-400 Medium
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 116 more
#VU118183 - Improper Encoding or Escaping of Output
CVE-2025-58189
CWE-116 Low
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110711
SB2025110712
and 118 more
#VU118181 - Resource exhaustion
CVE-2025-58187
CWE-400 Medium
No
No
1.24.9, 1.25.3 07.11.2025 SB2025110706
SB2025110731
SB2025112832
and 21 more
#VU118179 - Resource exhaustion
CVE-2025-61725
CWE-400 Medium
No
No
1.24.8, 1.25.2 07.11.2025 SB2025110705
SB2025110714
SB2025110715
and 74 more
#VU103932 - Missing release of memory after effective lifetime
CVE-2025-22866
CWE-401 Low
No
No
1.22.12, 1.23.6, 1.24 rc.3 12.02.2025 SB20250212100
SB20250212101
SB20250212102
and 27 more
#VU93850 - Resource exhaustion
CVE-2024-24791
CWE-400 Medium
No
No
1.21.12, 1.22.5 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
1.21.11, 1.22.4 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU91159 - Improper input validation
CVE-2024-24789
CWE-20 Low
No
No
1.21.11, 1.22.4 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788
CWE-835 Medium
No
No
1.21.10, 1.22.3 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU89295 - Untrusted Search Path
CVE-2024-24787
CWE-426 Medium
No
No
1.21.10, 1.22.3 09.05.2024 SB2024050936
SB2024050937
SB2024050938
and 12 more
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Public exploit available
No
1.21.9, 1.22.2 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 187 more
#VU87201 - Improper input validation
CVE-2024-24784
CWE-20 Medium
No
No
1.21.8, 1.22.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785
CWE-79 Low
No
No
1.21.8, 1.22.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more


Showing elements 1 - 20 out of 34