CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products

Go — security advisories

vendor: Golang23 advisories2 sourceslatest 2026-08-25⚡ RSS feed

Every advisory CSIRTS.com has correlated to Go, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch Go

Get an email when a new Go advisory drops — max one per day, one-click unsubscribe.

[NEW] [medium] Golang Go: Multiple vulnerabilities allow information disclosure

mediumCVE-2026-39822 CVE-2026-42505cert-bund2026-08-25

[NEW] [high] Golang Go: Multiple vulnerabilities

highCVE-2026-33818 CVE-2026-39821 CVE-2026-46600 CVE-2026-56853cert-bund2026-08-24

[UPDATE] [medium] Golang Go: Multiple vulnerabilities

mediumCVE-2026-27142 CVE-2026-33811 CVE-2026-33814 CVE-2026-39817cert-bund2026-08-21

[UPDATE] [high] Golang Go: Multiple vulnerabilities

highCVE-2026-27140 CVE-2026-27143 CVE-2026-27144 CVE-2026-32280cert-bund2026-08-21

[UPDATE] [high] Golang Go: Multiple vulnerabilities

highCVE-2025-22866 CVE-2025-22867cert-bund2026-08-20

[UPDATE] [medium] Golang Go: Multiple vulnerabilities

mediumCVE-2024-45336 CVE-2024-45340 CVE-2024-45341 CVE-2025-22865cert-bund2026-08-20

[UPDATE] [medium] Golang Go: Multiple vulnerabilities

mediumCVE-2025-61727 CVE-2025-61729cert-bund2026-08-19

[UPDATE] [high] Golang Go: Multiple vulnerabilities

highCVE-2025-47912 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186cert-bund2026-08-19

[UPDATE] [medium] Golang Go: Multiple vulnerabilities enable file manipulation

mediumCVE-2025-47906 CVE-2025-47907cert-bund2026-08-19

[UPDATE] [medium] Golang Go "FIPS OpenSSL": Vulnerability enables unspecified attack

mediumCVE-2024-9355cert-bund2026-08-17

[UPDATE] [high] Golang Go: Multiple vulnerabilities allow unspecified attack

highCVE-2026-25679 CVE-2026-27137 CVE-2026-27138 CVE-2026-27139cert-bund2026-08-14

[UPDATE] [low] Golang Go: Vulnerability enables information disclosure

lowCVE-2025-22866cert-bund2026-08-13

[UPDATE] [medium] Golang Go: Vulnerability allows Denial of Service

mediumCVE-2025-47913cert-bund2026-08-12

CVE-2026-56862: Limit handshake messages we are willing to accept post-handshake in crypto/tls

highCVSS 7.5CVE-2026-56862msrc2026-08-11

CVE-2026-56860: Avoid quadratic complexity in resolvePath in net/url

mediumCVSS 5.9CVE-2026-56860msrc2026-08-11

CVE-2020-29511: The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

mediumCVSS 5.6CVE-2020-29511msrc2026-08-06

CVE-2025-61727: Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509

mediumCVSS 6.5CVE-2025-61727msrc2026-08-06

CVE-2026-27137: Incorrect enforcement of email constraints in crypto/x509

mediumCVSS 5.9CVE-2026-27137msrc2026-08-06

[UPDATE] [medium] Golang Go: Multiple vulnerabilities enable unspecified attack

mediumCVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24786cert-bund2026-08-05

[UPDATE] [medium] Golang Go: Multiple vulnerabilities

mediumCVE-2025-0913 CVE-2025-22874 CVE-2025-4673cert-bund2026-08-05

[UPDATE] [medium] Golang Go (sys): Vulnerability enables Denial of Service

mediumCVE-2026-39824cert-bund2026-08-03

[UPDATE] [medium] Golang Go: Vulnerability allows bypassing of security measures

mediumCVE-2025-22871cert-bund2026-07-29

[UPDATE] [medium] Golang Go: Vulnerability allows bypassing security measures

mediumCVE-2025-22870cert-bund2026-07-02