Known vulnerabilities in Go programming language - page 5

Vendor: Google
Software CPE: cpe:2.3:a:google:golang:*:*:*:*:*:*:*:*
Total vulnerabilities: 185
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Go programming language Go programming language is affected by 185 known vulnerabilities: 17 high, 132 medium, 36 low Critical High Medium Low

Vulnerabilities (185)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87201 - Improper input validation
CVE-2024-24784
CWE-20 Medium
No
No
1.21.8, 1.22.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785
CWE-79 Low
No
No
1.21.8, 1.22.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289
CWE-200 Low
No
No
1.21.8, 1.22.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290
CWE-400 Medium
No
No
1.21.8, 1.22.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
1.21.8, 1.22.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86309 - Observable discrepancy
CVE-2023-45287
CWE-203 Medium
No
No
1.20 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU83929 - Missing Encryption of Sensitive Data
CVE-2023-45285
CWE-311 Medium
No
No
1.20.12, 1.21.5 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 28 more
#VU83928 - Resource exhaustion
CVE-2023-39326
CWE-400 Medium
No
No
1.20.12, 1.21.5 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83255 - Improper input validation
CVE-2023-45283
CWE-20 Low
No
No
1.20.11, 1.21.4 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 20 more
#VU83254 - Improper input validation
CVE-2023-45284
CWE-20 Low
No
No
1.20.11, 1.21.4 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 18 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
1.20.10, 1.21.3 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81964 - Improper input validation
CVE-2023-39323
CWE-20 Medium
No
No
1.20.9, 1.21.2 12.10.2023 SB2023101258
SB2023101259
SB2023101260
and 38 more
#VU80575 - Improper input validation
CVE-2023-39322
CWE-20 Medium
No
No
1.20.8, 1.21.1 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321
CWE-20 Medium
No
No
1.20.8, 1.21.1 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319
CWE-79 Medium
No
No
1.20.8, 1.21.1 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318
CWE-79 Medium
No
No
1.20.8, 1.21.1 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU80571 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39320
CWE-94 Medium
No
No
1.21.1 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 15 more
#VU78913 - Improper Certificate Validation
CVE-2023-29409
CWE-295 Medium
No
No
1.19.12, 1.20.7, 1.21 rc4 03.08.2023 SB2023080320
SB2023080321
SB2023080370
and 98 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406
CWE-644 Medium
No
No
1.19.11, 1.20.6 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU77528 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29402
CWE-94 Medium
No
No
1.19.10, 1.20.5 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 45 more


Showing elements 81 - 100 out of 185