Known vulnerabilities in golang-src - page 3
Vendor:
OpenAnolis
Software:
golang-src
Software CPE:
cpe:2.3:o:openanolis:golang-src:*:*:*:*:*:anolis_os:*:*
Website:
https://openanolis.cn/
Total vulnerabilities:
105
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.26.6-1
1.26.5-1
1.26.5-1.0.2
1.25.9-5
1.25.10-1.0.1
1.25.9-3
1.25.9-1.0.1
1.25.9-2
1.25.9-1
1.25.8-1.0.1
1.25.8-1
1.24.13-2
1.24.13-1
1.24.11-2
1.25.7-1.0.1
1.24.11-1
1.25.5-1.0.1
1.24.8-1
1.25.3-2.0.2
1.24.0-12
1.24.0-11
1.24.0-10
1.24.0-9
1.24.6-1.0.1
1.24.4-1.0.2
1.24.0-4
1.21.13-2.0.1
1.21.10-2
1.21.9-1.0.1
1.20.12-3.0.1
1.20.12-2.0.1
1.20.12-1
1.20.9-1
1.19.10-1.0.1
1.19.9-1.0.1
1.17.12-1.0.1
1.15.14-1
1.22.9-1.0.1
1.22.7-1.0.2
1.21.13-3.0.1
1.21.11-1
1.21.11-1.0.1
1.20.12-8.0.1
1.20.10-1
1.19.13-1.0.1
1.18.10-1.0.1
1.17.10-1.0.1
1.17.7-1
1.16.12-1
Vulnerabilities (105)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU110251 - Exposure of sensitive information to an unauthorized actor CVE-2025-4673 |
CWE-200 | Low | 1.24.4-1.0.2, 1.24.8-1 | 07.06.2025 |
SB2025060701 SB2025060702 SB2025061002 and 35 more |
||
| #VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871 |
CWE-444 | Medium | 1.24.0-9, 1.24.4-1.0.2 | 05.04.2025 |
SB2025040507 SB2025040508 SB2025040739 and 109 more |
||
| #VU98022 - Use of Uninitialized Variable CVE-2024-9355 |
CWE-457 | Medium | 1.21.13-3.0.1 | 03.10.2024 |
SB2024100348 SB2024100349 SB2024101608 and 24 more |
||
| #VU97217 - Resource exhaustion CVE-2024-34158 |
CWE-400 | Medium | 1.21.13-2.0.1 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 76 more |
||
| #VU97216 - Resource exhaustion CVE-2024-34156 |
CWE-400 | Medium | 1.21.13-2.0.1 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 143 more |
||
| #VU97215 - Resource exhaustion CVE-2024-34155 |
CWE-400 | Medium | 1.21.13-2.0.1 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 81 more |
||
| #VU93850 - Resource exhaustion CVE-2024-24791 |
CWE-400 | Medium | 1.21.13-2.0.1 | 07.07.2024 |
SB2024070727 SB2024070728 SB2024070729 and 86 more |
||
| #VU91160 - Improper input validation CVE-2024-24790 |
CWE-20 | Medium | 1.21.11-1.0.1, 1.22.7-1.0.2 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 90 more |
||
| #VU91159 - Improper input validation CVE-2024-24789 |
CWE-20 | Low | 1.21.11-1, 1.21.11-1.0.1 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 78 more |
||
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 1.20.12-8.0.1, 1.21.9-1.0.1, 1.21.10-2 | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU87830 - Missing release of memory after effective lifetime CVE-2024-1394 |
CWE-401 | Medium | 1.20.12-3.0.1 | 26.03.2024 |
SB2024032646 SB2024032647 SB2024032648 and 54 more |
||
| #VU87201 - Improper input validation CVE-2024-24784 |
CWE-20 | Medium | 1.21.9-1.0.1, 1.21.10-2 | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 48 more |
||
| #VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-24785 |
CWE-79 | Low | 1.21.9-1.0.1, 1.21.10-2 | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 61 more |
||
| #VU87198 - Exposure of sensitive information to an unauthorized actor CVE-2023-45289 |
CWE-200 | Low | 1.21.9-1.0.1, 1.21.10-2 | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 54 more |
||
| #VU87197 - Resource exhaustion CVE-2023-45290 |
CWE-400 | Medium | 1.21.9-1.0.1, 1.21.10-2 | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 101 more |
||
| #VU87196 - Error Handling CVE-2024-24783 |
CWE-388 | Medium | 1.21.9-1.0.1, 1.21.10-2 | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 81 more |
||
| #VU83929 - Missing Encryption of Sensitive Data CVE-2023-45285 |
CWE-311 | Medium | 1.20.12-2.0.1 | 06.12.2023 |
SB2023120641 SB2023121133 SB2023121156 and 28 more |
||
| #VU83928 - Resource exhaustion CVE-2023-39326 |
CWE-400 | Medium | 1.20.12-2.0.1 | 06.12.2023 |
SB2023120641 SB2023121133 SB2023121156 and 90 more |
||
| #VU83255 - Improper input validation CVE-2023-45283 |
CWE-20 | Low | 1.20.12-1 | 17.11.2023 |
SB2023111740 SB2023111741 SB2023111742 and 20 more |
||
| #VU82064 - Resource exhaustion CVE-2023-39325 |
CWE-400 | Medium | 1.19.13-1.0.1, 1.20.10-1 | 16.10.2023 |
SB2023101651 SB2023101652 SB2023101653 and 341 more |
Showing elements 41 - 60 out of 105