Golang (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2018-12-14. Vendor: Unknown.

CVEs of Golang

• CVE-2018-16875 - CVSS 7.5 (high), 2018-12-14: The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might…
• CVE-2018-16874 - CVSS 8.1 (high), 2018-12-14: In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go…
• CVE-2018-16873 - CVSS 8.1 (high), 2018-12-14: In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and the import path…