Go-standard-library
61 CVEs tracked since 2022. Since Aug 2022, none of them reached CISA KEV.
Go-standard-library CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2022-08 | 13 | 0 |
| 2022-09 | null or fewer | |
| 2022-10 | 3 | 0 |
| 2022-11 | null or fewer | |
| 2022-12 | null or fewer | |
| 2023-01 | null or fewer | |
| 2023-02 | 4 | 0 |
| 2023-03 | null or fewer | |
| 2023-04 | 4 | 0 |
| 2023-05 | null or fewer | |
| 2023-06 | null or fewer | |
| 2023-07 | null or fewer | |
| 2023-08 | null or fewer | |
| 2023-09 | 4 | 0 |
| 2023-10 | null or fewer | |
| 2023-11 | null or fewer | |
| 2023-12 | null or fewer | |
| 2024-01 | null or fewer | |
| 2024-02 | null or fewer | |
| 2024-03 | 5 | 0 |
| 2024-04 | null or fewer | |
| 2024-05 | null or fewer | |
| 2024-06 | null or fewer | |
| 2024-07 | null or fewer | |
| 2024-08 | null or fewer | |
| 2024-09 | 3 | 0 |
| 2024-10 | null or fewer | |
| 2024-11 | null or fewer | |
| 2024-12 | null or fewer | |
| 2025-01 | null or fewer | |
| 2025-02 | null or fewer | |
| 2025-03 | null or fewer | |
| 2025-04 | null or fewer | |
| 2025-05 | null or fewer | |
| 2025-06 | null or fewer | |
| 2025-07 | null or fewer | |
| 2025-08 | null or fewer | |
| 2025-09 | null or fewer | |
| 2025-10 | 10 | 0 |
| 2025-11 | null or fewer | |
| 2025-12 | null or fewer | |
| 2026-01 | null or fewer | |
| 2026-02 | null or fewer | |
| 2026-03 | null or fewer | |
| 2026-04 | 7 | 0 |
| 2026-05 | 8 | 0 |
Products
The products that kept showing up in Go-standard-library's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Go-standard-library.
- CVE-2026-56862Limit handshake messages we are willing to accept post-handshake in crypto/tls7.5
- CVE-2026-56858Fix Javascript regexp context tracking in html/template6.1
- CVE-2026-56853Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5
- CVE-2026-56860Avoid quadratic complexity in resolvePath in net/url5.9
- CVE-2026-56859Add recursion depth guard during decode in encoding/xml7.5
- CVE-2026-33818Enforce maximum recursion depth in encoding/asn17.5
- CVE-2026-46600Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5
- CVE-2026-42505Invoking Encrypted Client Hello privacy leak in crypto/tls5.3
- CVE-2026-39822Root escape via symlink plus trailing slash in os7.8
- CVE-2026-42507Arbitrary inputs are included in errors without any escaping in net/textproto5.3
- CVE-2026-42504Quadratic complexity in WordDecoder.DecodeHeader in mime7.5
- CVE-2026-27145Inefficient candidate hostname parsing in crypto/x5096.5
- CVE-2026-39821Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6
- CVE-2026-39820Quadratic string concatentation in consumeComment in net/mail7.5
- CVE-2026-39823Bypass of meta content URL escaping causes XSS in html/template6.1
The record
- Peak rank
- #54 in Aug 2022
- Busiest month shown
- Aug 2022, 13 CVEs
- Months with a KEV entry
- 0 since Aug 2022
- Monthly snapshots
- 10 since 2022