How many golang networking CVEs are in CISA KEV?

Yes — 1 of golang networking's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for golang networking vulnerabilities?

Yes — 1 of golang networking's CVEs have a known public exploit.

Which versions of golang networking are affected?

4 distinct golang networking versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in golang networking CVEs?

golang networking's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of golang networking CVEs?

The average CVSS base score across golang networking's scored CVEs is 6.5.

golang networking Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: golang networking vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

golang networking Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

golang networking has 2 published CVE records since 2023, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Severity and exploitation

How the CVSS severity of golang networking's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

One of golang networking's CVEs is confirmed exploited in the wild.

Public exploits

One of golang networking's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every golang networking version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.13.01 CVE
< 0.17.01 CVE

Fixed in

0.13.01 CVE
0.17.01 CVE

Find a version

2 CVEs

Sort

HTTP/2 Stream Cancellation Attack
CVE-2023-44487
CISA KEV
Public exploit
Patch
CWE-400
Added to CISA KEV 2023-10-10
Medium · CVSS 6.9
EPSS 100.0% (100th pct)2023-10-10
Improper rendering of text nodes in golang.org/x/net/html
CVE-2023-3978
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.9% (57th pct)2023-08-02

Common weakness types

The CWE weakness categories most often found in golang networking CVEs. Follow any weakness for its full explanation.

Other golang products

Browse vulnerabilities for other products by golang.

go177 CVEs crypto25 CVEs net14 CVEs http26 CVEs image6 CVEs text4 CVEs ssh3 CVEs tiff3 CVEs

All golang vulnerabilities

Frequently asked questions

Common questions about golang networking vulnerabilities.

How many CVEs does golang networking have?: golang networking has 2 published CVE records since 2023.
How many golang networking CVEs are in CISA KEV?: Yes — 1 of golang networking's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for golang networking vulnerabilities?: Yes — 1 of golang networking's CVEs have a known public exploit.
Which versions of golang networking are affected?: 4 distinct golang networking versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in golang networking CVEs?: golang networking's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of golang networking CVEs?: The average CVSS base score across golang networking's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track golang networking vulnerabilities

Get an alert for each new golang networking CVE, with AI-written analysis and remediation steps.

Create an account See pricing