Known vulnerabilities in Go programming language - page 7

Vendor: Google
Software: Go programming language
Software CPE: cpe:2.3:a:google:golang:*:*:*:*:*:*:*:*
Website: https://www.google.com/
Total vulnerabilities: 177
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Go programming language Go programming language is affected by 177 known vulnerabilities: 16 high, 125 medium, 36 low Critical High Medium Low

Vulnerabilities (177)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29804		 CWE-22 Medium
No
No
 1.17.11, 1.18.3 21.03.2023 SB2022071516
SB2023011810
SB2023040531
and 11 more
#VU73870 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-30634		 CWE-835 Medium
No
No
 1.17.11, 1.18.3 21.03.2023 SB2022071516
SB2023011810
SB2023042120
and 13 more
#VU66120 - Improper input validation
CVE-2021-41772		 CWE-20 Medium
No
No
 1.16.10, 1.17.3 04.08.2022 SB2021110826
SB2022080503
SB2022083021
and 22 more
#VU66067 - Resource exhaustion
CVE-2022-30632		 CWE-400 Medium
No
No
 1.17.12, 1.18.4 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66066 - Security Features
CVE-2022-32148		 CWE-254 Medium
No
No
 1.17.12, 1.18.4 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66065 - Resource exhaustion
CVE-2022-1962		 CWE-400 Medium
No
No
 1.17.12, 1.18.4 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 1.17.12, 1.18.4 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66063 - Resource exhaustion
CVE-2022-30630		 CWE-400 Medium
No
No
 1.17.12, 1.18.4 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66062 - Resource exhaustion
CVE-2022-30631		 CWE-400 Medium
No
No
 1.17.12, 1.18.4 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more
#VU64269 - Integer overflow
CVE-2022-28327		 CWE-190 Low
No
No
 1.17.9, 1.18.1 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675		 CWE-120 Low
No
No
 1.17.9, 1.18.1 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU63173 - Permissions, Privileges, and Access Controls
CVE-2022-29526		 CWE-264 Low
No
No
 1.17.10, 1.18.2 14.05.2022 SB2022051403
SB2022051404
SB2022062928
and 64 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191		 CWE-327 Medium
No
No
 1.17.9 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU62038 - Resource exhaustion
CVE-2022-23772		 CWE-400 Medium
No
No
 1.16.14, 1.17.7 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU62037 - Incorrect Authorization
CVE-2022-23773		 CWE-863 Low
Available
No
 1.16.14, 1.17.7 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 1.16.14, 1.17.7 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU61227 - Incorrect Regular Expression
CVE-2022-24921		 CWE-185 Medium
No
No
 1.16.15, 1.17.8 10.03.2022 SB2022031004
SB2022031005
SB2022041208
and 41 more
#VU60921 - Allocation of Resources Without Limits or Throttling
CVE-2021-39293		 CWE-770 Medium
No
No
 1.16.8, 1.17.1 01.03.2022 SB2022030106
SB2022030107
SB2022061528
and 20 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 1.16.12, 1.17.5 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU57579 - Memory corruption
CVE-2021-38297		 CWE-119 High
Available
No
 1.16.9, 1.17.2 21.10.2021 SB2021102121
SB2021122801
SB2021102022
and 23 more


Showing elements 121 - 140 out of 177