Go 厂商漏洞列表 / CVE 中文分析 5

Medium 2026-09-11

Go net/http HTTP降级攻击及RefuseHTTPDowngrade修复

Unknown GO-2026-6354 2026-09-03

GO-2026-6354: golang.org/x/crypto/ssh 通道死锁漏洞及v0.56.0修复

Medium GO-2026-6222 2026-08-15

Go x/image/vp8l 未授权内存耗尽导致 DoS (CVE-2026-46603)

Unknown GO-2026-6180 2026-08-14

Go GOSUMDB 透明度日志绕过漏洞 (CVE-2026-56864)

Unknown GO-2026-6179 2026-08-14

Go模块缓存验证绕过漏洞(CVE-2026-56865)及修复

Unknown GO-2026-6089 2026-08-14

Go net/http 未加密 HTTP/2 连接绕过 ReadHeaderTimeout 漏洞 (CVE-2026-56853)

High CVE-2026-56852 2026-07-22

Go golang.org/x/text/unicode/norm 无限循环漏洞 (CVE-2026-56852)

Unknown GO-2026-5856 2026-07-09

Go crypto/tls 预共享密钥身份泄露漏洞 (CVE-2026-42505) 修复

Unknown GO-2026-5062 2026-06-27

Go golang.org/x/image/tiff 无限内存消耗漏洞 (CVE-2026-46602)

Unknown GO-2025-3793 2026-06-13

filebrowser命令执行漏洞CVE-2025-52904漏洞公告

Unknown GO-2025-3786 2026-06-13

Filebrowser Go依赖漏洞GO-2025-3786 (CVE-2025-52903) 安全公告

Medium CVE-2026-42507 2026-06-03

Go net/textproto 漏洞注入误导性内容 (CVE-2026-42507)

Unknown CVE-2026-27145 2026-06-03

Go crypto/x509 拒绝服务漏洞 (CVE-2026-27145)

Medium GO-2026-5032 2026-05-30

Go golang.org/x/image/tiff 无限循环/资源耗尽漏洞 (CVE-2026-46599)

Medium GO-2026-5031 2026-05-30

Go golang.org/x/image/bmp 调色板索引越界导致Panic漏洞 (CVE-2026-42500)

Unknown GO-2026-4337 2026-02-06

Go crypto/tls 会话恢复漏洞 (CVE-2025-68121)

Unknown GO-2025-4135 2025-11-20

Go golang.org/x/crypto SSH Agent 越界读取漏洞 (CVE-2025-47914)

Critical CVE-2020-29511 2025-11-20

Go encoding/xml CVE-2020-29511 XML元素不稳定性漏洞

High CVE-2025-22869 2025-11-14

golang.org/x/crypto CVE-2025-22869 DoS漏洞公告

High CVE-2018-6574 2025-11-13

Go语言CVE-2018-6574远程命令执行漏洞及PoC分析