Software Detail

Software Informaton Top

Programming

Software Detail

Number Of NVD

138

CRITICAL

HIGH

MEDIUM

LOW

URL	https://golang.org/
Explanation	It is a programming language developed by Google. It has a simple syntax and can be coded by anyone to look the same. It has been adopted by many companies because it is good at parallel processing and can perform well on multi-core systems. Since it is cross-compatible, it can be run in a variety of environments including Windows, Linux, Mac, and Android. As a result of prioritizing simplicity, there are some disadvantages such as the lack of exception handling (there are alternative functions), which is common in other languages. This may be implemented in the future. A major release is made about every 6 months. If a critical bug or security issue is fixed during the major release, a minor release is made. The last two major releases are supported and covered. Since major releases are made about every six months, the major version a year ago will no longer be supported.
Tag	オープンソース BSD License

Add Information URL

No	Type	Name	URL
1			https://github.com/golang/go/wiki/Go-Release-Cycle
2			https://golang.org/doc/devel/release.html
3			https://github.com/golang/go/wiki/MinorReleases
4			https://golang.org/security
5			https://golang.org/doc/copyright.html

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Critical	High	Medium	Low
41	go 1.21	1.21.13	Aug. 6, 2024	June 16, 2023	2	14	12	1
42	go 1.20	1.20.7	Aug. 1, 2023	Feb. 1, 2023	6	22	14	1
43	go 1.19	1.19.13	Sept. 6, 2023	Aug. 2, 2022	6	29	15	1
44	Go 1.18	1.18.10	Jan. 10, 2023	March 15, 2022	6	41	19	2
45	Go 1.17	1.17.13	Aug. 1, 2022	Aug. 16, 2021	8	47	20	2
46	Go 1.16	1.16.15	March 3, 2022	Feb. 16, 2021	8	53	27	2
47	Go 1.15	1.15.15	Aug. 4, 2021	Aug. 11, 2020	8	58	29	2
48	Go 1.14	1.14.15	Feb. 4, 2021	Feb. 25, 2020	8	58	31	2
49	Go 1.13	1.13.15	Aug. 6, 2020	Sept. 3, 2019	8	62	31	2
50	Go 1.12	1.12.17	Feb. 12, 2020	Feb. 25, 2019	10	63	31	2
51	go 1.9	1.9.7			11	66	32	2
52	go 1.8	1.8.7			11	66	33	2
53	go 1.7	1.7.6			11	69	33	2
54	go 1.6	1.6.4			11	71	33	2
55	go 1.5	1.5.4			11	72	33	2
56	go 1.4	1.4.3			14	70	33	2
57	go 1.3	1.3.3			14	70	34	2
58	go 1.2	1.20.7	Aug. 1, 2023		14	71	35	2
59	go 1.12	1.12.9			10	63	31	2
60	go 1.11	1.11.9			10	63	32	2
61	go 1.10	1.10.8			10	66	31	2
62	go 1.1	1.19.13	Sept. 6, 2023		14	72	35	2
63	go 1.0	1.0.3			15	70	33	2
64	go 0.0	0.0.0-20201203163018-be400aefbc4c			14	69	33	2

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	or higher	less than	Update date Published date	Show Affected	Exploit PoC Search
41	7.3 -	HIGH Network	Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the …	CWE-74 Injection	CVE-2023-24539	cpe:2.3:a:golang:go::	1.20.0	1.20.4 1.19.9	2024-11-21 16:48 2023-05-12	Show	GitHub Exploit DB Packet Storm

42	9.8 -	CRITICAL Network	Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a…	CWE-94 Code Injection	CVE-2023-24538	cpe:2.3:a:golang:go::	1.20.0	1.20.3 1.19.8	2024-11-21 16:48 2023-04-7	Show	GitHub Exploit DB Packet Storm

43	7.5 -	HIGH Network	Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.	CWE-190 Integer Overflow or Wraparound	CVE-2023-24537	cpe:2.3:a:golang:go::	1.20.0	1.20.3 1.19.8	2024-11-21 16:48 2023-04-7	Show	GitHub Exploit DB Packet Storm

44	7.5 -	HIGH Network	Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadFor…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2023-24536	cpe:2.3:a:golang:go::	1.20.0	1.20.3 1.19.8	2024-11-21 16:48 2023-04-7	Show	GitHub Exploit DB Packet Storm

45	7.5 -	HIGH Network	HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the com…	CWE-400 Uncontrolled Resource Consumption	CVE-2023-24534	cpe:2.3:a:golang:go::	1.20.0	1.20.3 1.19.8	2024-11-21 16:48 2023-04-7	Show	GitHub Exploit DB Packet Storm

46	5.3 -	MEDIUM Network	The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not …	CWE-682 Incorrect Calculation	CVE-2023-24532	cpe:2.3:a:golang:go::	1.20.0	1.20.2 1.19.7	2024-11-21 16:48 2023-03-9	Show	GitHub Exploit DB Packet Storm

47	7.5 -	HIGH Network	Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to constr…	CWE-400 Uncontrolled Resource Consumption	CVE-2022-41724	cpe:2.3:a:golang:go:1.20.0:rc3 cpe:2.3:a:golang:go:1.20.0:rc2 cpe:2.3:a:golang:go:1.20.0:rc1 cpe:2.3:a:golang:…		1.19.6	2024-11-21 16:23 2023-03-1	Show	GitHub Exploit DB Packet Storm

48	7.5 -	HIGH Network	A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.	NVD-CWE-Other	CVE-2022-41723	cpe:2.3:a:golang:go:1.20.0:- cpe:2.3:a:golang:go::		1.19.6	2024-11-21 16:23 2023-03-1	Show	GitHub Exploit DB Packet Storm

49	7.5 -	HIGH Network	A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as "a/../c:/b" into the valid path "c:\b". This transf…	CWE-22 Path Traversal	CVE-2022-41722	cpe:2.3:a:golang:go:1.20.0:- cpe:2.3:a:golang:go::		1.19.6	2024-11-21 16:23 2023-03-1	Show	GitHub Exploit DB Packet Storm

50	7.5 -	HIGH Network	A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2022-41725	cpe:2.3:a:golang:go:1.20.0:rc3 cpe:2.3:a:golang:go:1.20.0:rc2 cpe:2.3:a:golang:go:1.20.0:rc1 cpe:2.3:a:golang:…		1.19.6	2024-11-21 16:23 2023-03-1	Show	GitHub Exploit DB Packet Storm