Known vulnerabilities in golang-shared

Vendor: OpenAnolis
Software: golang-shared
Software CPE: cpe:2.3:o:openanolis:golang-shared:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 42
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting golang-shared golang-shared is affected by 42 known vulnerabilities: 3 high, 28 medium, 11 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140622 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-39822		 CWE-59 Low
No
No
 1.26.5-1 31.07.2026 SB2026073128
SB20260731126
SB20260731127
and 8 more
#VU140621 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42505		 CWE-200 Medium
No
No
 1.26.5-1 31.07.2026 SB2026073128
SB20260731146
SB20260731147
and 5 more
#VU140620 - Resource exhaustion
CVE-2026-27145		 CWE-400 Medium
No
No
 1.26.5-1 31.07.2026 SB2026073127
SB2026073129
SB2026073130
and 38 more
#VU140618 - Improper Output Neutralization for Logs
CVE-2026-42507		 CWE-117 Medium
No
No
 1.26.5-1 31.07.2026 SB2026073127
SB20260731115
SB20260731143
and 6 more
#VU140611 - Double Free
CVE-2026-33811		 CWE-415 Medium
No
No
 1.25.9-5 31.07.2026 SB2026073126
SB20260731121
SB20260731123
and 9 more
#VU140606 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32289		 CWE-79 Medium
No
No
 1.25.9-1 31.07.2026 SB2026073125
SB20260731139
SB20260731140
and 3 more
#VU140602 - Allocation of Resources Without Limits or Throttling
CVE-2026-32288		 CWE-770 Medium
No
No
 1.25.9-1 31.07.2026 SB2026073125
SB2026073155
SB2026073156
and 8 more
#VU140600 - Improper input validation
CVE-2026-32281		 CWE-20 Medium
No
No
 1.25.9-1 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 34 more
#VU124117 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-27142		 CWE-79 Medium
No
No
 1.24.13-2 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 15 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 1.24.13-2 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 130 more
#VU124119 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-27139		 CWE-22 Low
No
No
 1.24.13-2 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 13 more
#VU124035 - Protection Mechanism Failure
CVE-2025-61731		 CWE-693 High
No
No
 1.24.11-2 16.03.2026 SB2026031680
SB20260316116
SB2026032049
and 18 more
#VU124033 - Improper input validation
CVE-2025-61728		 CWE-20 Medium
No
No
 1.24.11-2 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 45 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 1.24.13-1 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 112 more
#VU119236 - Improper Certificate Validation
CVE-2025-61727		 CWE-295 Low
No
No
 1.24.11-1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 21 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 1.24.11-1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU118190 - Resource exhaustion
CVE-2025-58183		 CWE-400 Medium
No
No
 1.24.8-1 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU118189 - Improper input validation
CVE-2025-58188		 CWE-20 Medium
No
No
 1.24.8-1 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 110 more
#VU118187 - Resource exhaustion
CVE-2025-58185		 CWE-400 Medium
No
No
 1.24.0-12 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 112 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 1.24.8-1 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more


Showing elements 1 - 20 out of 42