|Max CVSS||9.3||Min CVSS||6.4||Total Count||2|
|ID||CVSS||Summary||Last (major) update||Published|
Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.
|24-08-2020 - 17:37||24-01-2019 - 05:29|
The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only checks for "://" anywhere in the string), which allows remote attackers to execute arbitrary OS commands via a
|28-02-2019 - 18:37||16-02-2018 - 17:29|