Go golang.org/x/crypto

Name: Go golang.org/x/crypto
Brand: Go

productUS

pkg:golang/golang.org/x/crypto

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

critical

by severity

0critical6high3medium0low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	0.0.0-20231218163308-9d2ee975ef9f	2023-12-18	3 versions
CVE-2020-9283US	high7.5	20.9% (98th)	Exploit	0.0.0-20200220183623-bac4c82f6975	2020-02-20	< 0.0.0-20200220183623-bac4c82f6975
CVE-2024-45337US	—	3.18% (88th)	Exploit	0.31.0	2024-12-12	< 0.31.0
CVE-2026-46595US	—OT elevated	0.56% (46th)	Exploit	0.52.0	2026-05-22	< 0.52.0
CVE-2026-42508US	—	6.91% (94th)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2022-27191US	high7.5OT elevated	3.93% (90th)	—	0.0.0-20220314234659-1baeb1ce4c0b	2022-03-18	< 0.0.0-20220314234659-1baeb1ce4c0b
CVE-2019-11840US	medium5.9OT elevated	3.45% (89th)	—	0.0.0-20190320223903-b7391e95e576	2019-05-09	< 0.0.0-20190320223903-b7391e95e576
CVE-2020-29652US	high7.5	3.18% (88th)	—	0.0.0-20201216223049-8b5274cf687f	2020-12-17	< 0.0.0-20201216223049-8b5274cf687f
CVE-2017-3204US	high8.1	3.16% (88th)	—	0.0.0-20170330155735-e4e2799dd7aa	2017-04-04	< 0.0.0-20170330155735-e4e2799dd7aa
CVE-2020-7919US	high7.5	2.65% (86th)	—	0.0.0-20200124225646-8b5121be2f68	2020-03-16	< 0.0.0-20200124225646-8b5121be2f68
CVE-2019-11841US	medium5.9	2.00% (81st)	—	0.0.0-20190424203555-c05e17bb3b2d	2019-05-22	< 0.0.0-20190424203555-c05e17bb3b2d
CVE-2021-43565US	high7.5	1.12% (66th)	—	0.0.0-20211202192323-5770296d904e	2022-09-06	< 0.0.0-20211202192323-5770296d904e
CVE-2025-22869US	—	0.94% (61st)	—	0.35.0	2025-02-26	< 0.35.0
CVE-2026-39832US	—	0.68% (52nd)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2026-39830US	—	0.68% (52nd)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2025-47913US	—	0.67% (52nd)	—	0.43.0	2025-11-13	< 0.43.0
CVE-2022-30636US	—	0.64% (50th)	—	0.0.0-20220525230936-793ad666bf5e	2024-07-02	< 0.0.0-20220525230936-793ad666bf5e
CVE-2026-39834US	—	0.60% (48th)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2025-58181US	—	0.60% (48th)	—	0.45.0	2025-11-19	< 0.45.0
CVE-2025-47914US	—	0.55% (46th)	—	0.45.0	2025-11-19	< 0.45.0
CVE-2026-39835US	—	0.50% (43rd)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2026-56855US	—	0.50% (43rd)	—	0.56.0	2026-09-02	< 0.56.0
CVE-2026-39831US	—OT elevated	0.48% (41st)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2026-46597US	—	0.47% (41st)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2026-39833US	—OT elevated	0.47% (40th)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2026-39829US	—	0.47% (40th)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2026-56854US	—OT elevated	0.44% (38th)	—	0.55.0	2026-08-28	< 0.55.0
CVE-2026-78662US	—	0.43% (37th)	—	0.56.0	2026-09-02	< 0.56.0
CVE-2026-46598US	—	0.41% (35th)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2026-39828US	—	0.37% (31st)	—	0.52.0	2026-05-22	< 0.52.0
CVE-2026-39827US	—	0.28% (20th)	—	0.52.0	2026-05-22	< 0.52.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-295Improper Certificate Validation4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-347Improper Verification of Cryptographic Signature3 CVEs
CWE-281Improper Preservation of Permissions2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-862Missing Authorization2 CVEs
CWE-863Incorrect Authorization2 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan