Go golang.org/x/net

Name: Go golang.org/x/net
Brand: Go

ProduktUS

pkg:golang/golang.org/x/net

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

ungepatcht

kritisch

nach Schweregrad

0critical16high5medium0low

aktualisiert 2026-10-28

Schwachstellen (38)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2023-44487US	high7.5OT kritisch	100.0% (100th)	KEV	0.17.0	2023-10-10	< 0.17.0
CVE-2023-45288US	—	92.0% (100th)	Exploit	0.23.0	2024-04-04	< 0.23.0
CVE-2022-41717US	medium5.3	6.08% (93rd)	Exploit	0.4.0	2022-12-08	< 0.4.0
CVE-2023-39325US	high7.5	3.80% (90th)	Exploit	0.17.0	2023-10-11	< 0.17.0
CVE-2025-22870US	—	0.43% (37th)	Exploit	0.36.0	2025-03-12	< 0.36.0
CVE-2019-9512US	high7.5	83.4% (100th)	—	0.0.0-20190813141303-74dc4d7220e7	2019-08-13	< 0.0.0-20190813141303-74dc4d7220e7
CVE-2019-9514US	high7.5	82.8% (100th)	—	0.0.0-20190813141303-74dc4d7220e7	2019-08-13	< 0.0.0-20190813141303-74dc4d7220e7
CVE-2021-33194US	high7.5	7.49% (94th)	—	0.0.0-20210520170846-37e1c6afe023	2021-05-26	< 0.0.0-20210520170846-37e1c6afe023
CVE-2022-41723US	high7.5OT erhöht	4.56% (92nd)	—	0.7.0	2023-02-28	< 0.7.0
CVE-2021-44716US	high7.5	4.25% (91st)	—	0.0.0-20211209124913-491a49abca63	2022-01-01	< 0.0.0-20211209124913-491a49abca63
CVE-2021-31525US	medium5.9	3.69% (90th)	—	0.0.0-20210428140749-89ef3d95e781	2021-05-27	< 0.0.0-20210428140749-89ef3d95e781
CVE-2022-27664US	high7.5	3.27% (88th)	—	0.0.0-20220906165146-f3363e06e74c	2022-09-06	< 0.0.0-20220906165146-f3363e06e74c
CVE-2018-17075US	high7.5	2.77% (86th)	—	0.0.0-20180816102801-aaf60122140d	2018-09-16	< 0.0.0-20180816102801-aaf60122140d
CVE-2018-17143US	high7.5	2.77% (86th)	—	0.0.0-20180921000356-2f5d2388922f	2018-09-17	< 0.0.0-20180921000356-2f5d2388922f
CVE-2018-17846US	high7.5	2.51% (85th)	—	0.0.0-20190125091013-d26f9f9a57f3	2018-10-01	< 0.0.0-20190125091013-d26f9f9a57f3
CVE-2018-17142US	high7.5	2.38% (84th)	—	0.0.0-20180925071336-cf3bd585ca2a	2018-09-17	< 0.0.0-20180925071336-cf3bd585ca2a
CVE-2018-17847US	high7.5	2.36% (84th)	—	0.0.0-20190125002852-4b62a64f59f7	2018-10-01	< 0.0.0-20190125002852-4b62a64f59f7
CVE-2018-17848US	high7.5	2.23% (83rd)	—	0.0.0-20190125002852-4b62a64f59f7	2018-10-01	< 0.0.0-20190125002852-4b62a64f59f7
CVE-2026-39821US	—	1.83% (79th)	—	0.55.0	2026-05-22	< 0.55.0
CVE-2022-41721US	high7.5	1.82% (79th)	—	0.1.1-0.20221104162952-702349b0e862	2023-01-13	0.0.0-20220524220425-1d687d428aca → 0.1.1-0.20221104162952-702349b0e862
CVE-2024-45338US	—	1.07% (65th)	—	0.33.0	2024-12-18	< 0.33.0
CVE-2023-3978US	medium6.1	0.85% (58th)	—	0.13.0	2023-08-02	< 0.13.0
CVE-2026-33814US	high7.5	0.84% (58th)	—	0.53.0	2026-05-07	< 0.53.0
CVE-2026-78659US	—	0.63% (50th)	—	0.60.0	2026-10-08	< 0.60.0
CVE-2026-78663US	—	0.62% (50th)	—	0.60.0	2026-10-08	< 0.60.0
CVE-2026-78669US	—	0.61% (49th)	—	0.60.0	2026-10-08	< 0.60.0
CVE-2025-47911US	medium5.3	0.57% (47th)	—	0.45.0	2026-02-05	< 0.45.0
CVE-2026-27141US	—	0.57% (47th)	—	0.51.0	2026-02-26	0.50.0 → 0.51.0
CVE-2026-46600US	—	0.55% (46th)	—	0.56.0	2026-07-21	< 0.56.0
CVE-2025-58190US	medium5.3	0.55% (46th)	—	0.45.0	2026-02-05	< 0.45.0
CVE-2025-22872US	—	0.55% (46th)	—	0.38.0	2025-04-16	< 0.38.0
CVE-2026-97032US	—	0.49% (42nd)	—	0.60.0	2026-10-08	< 0.60.0
CVE-2026-78660US	—	0.43% (37th)	—	0.60.0	2026-10-08	< 0.60.0
CVE-2026-25680US	—	0.33% (26th)	—	0.55.0	2026-05-22	< 0.55.0
CVE-2026-42506US	—	0.24% (14th)	—	0.55.0	2026-05-22	< 0.55.0
CVE-2026-42502US	—	0.22% (13th)	—	0.55.0	2026-05-22	< 0.55.0
CVE-2026-27136US	—	0.22% (13th)	—	0.55.0	2026-05-22	< 0.55.0
CVE-2026-25681US	—	0.22% (13th)	—	0.55.0	2026-05-22	< 0.55.0

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-400Uncontrolled Resource Consumption9 CVEs
CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')4 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

USOSV.dev38 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan