Max CVSS 9.3 Min CVSS 6.4 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2019-6486 6.4
Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.
24-08-2020 - 17:37 24-01-2019 - 05:29
CVE-2018-7187 9.3
The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only checks for "://" anywhere in the string), which allows remote attackers to execute arbitrary OS commands via a
28-02-2019 - 18:37 16-02-2018 - 17:29
Back to Top Mark selected
Back to Top