golang vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the golang package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Excessive Platform Resource Consumption within a Loop

<0:1.25.5-1.el10_0
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Excessive Platform Resource Consumption within a Loop

<0:1.25.5-1.el10_1
  • M
Improper Certificate Validation

*
  • M
Reachable Assertion

*
  • M
Allocation of Resources Without Limits or Throttling

<0:1.25.3-1.el10_1
  • M
Allocation of Resources Without Limits or Throttling

<0:1.25.3-1.el10_0
  • M
Creation of Immutable Text Using String Concatenation

*
  • M
Improper Validation of Syntactic Correctness of Input

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Output Neutralization for Logs

*
  • M
Expected Behavior Violation

<0:1.24.6-1.el10_0
  • M
Race Condition

<0:1.24.6-1.el10_0
  • H
Improper Certificate Validation

<0:1.24.4-1.el10_0
  • M
Expected Behavior Violation

*
  • H
Arbitrary Code Injection

<0:1.24.6-1.el10_0
  • M
CVE-2025-4673

<0:1.24.4-1.el10_0
  • M
HTTP Request Smuggling

<0:1.23.9-1.el10_0
  • M
Improperly Controlled Sequential Memory Allocation

*
  • M
Information Exposure

<0:1.23.7-1.el10_0
  • L
Improper Verification of Cryptographic Signature

<0:1.23.7-1.el10_0
  • M
Information Exposure

<0:1.23.7-1.el10_0
  • M
Arbitrary Code Injection

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Exposure of Resource to Wrong Sphere

*
  • H
Exposure of Resource to Wrong Sphere

*
  • M
Resource Exhaustion

*
  • H
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • H
Resource Exhaustion

*
  • L
Improper Certificate Validation

*
  • L
Improper Certificate Validation

*
  • L
Improper Certificate Validation

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Incorrect Calculation

*
  • M
Incorrect Calculation

*
  • M
Man-in-the-Middle (MitM)

*
  • M
Man-in-the-Middle (MitM)

*
  • M
Man-in-the-Middle (MitM)

*
  • M
CVE-2017-15041

*
  • M
CVE-2017-15041

*
  • M
CVE-2017-15041

*
  • M
HTTP Response Splitting

*
  • M
HTTP Response Splitting

*
  • M
HTTP Response Splitting

*
  • M
HTTP Response Splitting

*
  • M
HTTP Response Splitting

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
HTTP Request Smuggling

*
  • M
HTTP Request Smuggling

*
  • M
HTTP Request Smuggling

*
  • M
HTTP Request Smuggling

*
  • M
HTTP Request Smuggling

*
  • M
HTTP Request Smuggling

*
  • M
File Descriptor Exhaustion

*
  • M
File Descriptor Exhaustion

*
  • L
Cross-site Scripting (XSS)

*
  • L
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Certificate Validation

*
  • M
Improper Certificate Validation

*
  • M
Improper Certificate Validation

*
  • M
Resource Exhaustion

*
  • H
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Improper Authorization

*
  • M
Improper Authorization

*
  • M
Improper Authorization

*
  • M
Improper Authorization

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Buffer Overflow

*
  • M
Buffer Overflow

*
  • M
Buffer Overflow

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
HTTP Request Smuggling

*
  • M
HTTP Request Smuggling

*
  • M
HTTP Request Smuggling

*
  • M
Arbitrary Code Injection

*
  • M
Arbitrary Code Injection

*
  • H
Arbitrary Code Injection

*
  • H
Arbitrary Code Injection

*
  • H
Arbitrary Code Injection

*
  • H
Arbitrary Code Injection

*
  • M
Arbitrary Code Injection

*
  • M
Arbitrary Code Injection

*