Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

UnknownChecksum bypass for golang.org/fips140 in cmd/goCVE-2026-94444 · CVE.org · FIRST EPSS · OSV.dev · goEPSS 0.1%Oct 8, 2026
UnknownLimit handshake messages we are willing to accept post-handshake in crypto/tlsCVE-2026-56862 · CVE.org · FIRST EPSS · OSV.dev · goEPSS 0.6%Aug 13, 2026
UnknownAvoid quadratic complexity in resolvePath in net/urlCVE-2026-56860 · CVE.org · FIRST EPSS · OSV.dev · goEPSS 0.5%Aug 13, 2026
UnknownFix Javascript regexp context tracking in html/templateCVE-2026-56858 · CVE.org · FIRST EPSS · OSV.dev · goEPSS 0.3%Aug 13, 2026
UnknownEnforce maximum recursion depth in encoding/asn1CVE-2026-33818 · CVE.org · FIRST EPSS · OSV.dev · goEPSS 0.6%Aug 13, 2026
Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchCVE-2026-102663 · CVE.org · FIRST EPSS · GitHub Advisory Database · goEPSS 0.2%Jul 24, 2026
UnknownQuadratic complexity in WordDecoder.DecodeHeader in mimeCVE-2026-42504 · CVE.org · FIRST EPSS · OSV.dev · goEPSS 0.6%Jun 2, 2026