Product by Ubuntu
Golang-1.22
12 known vulnerabilities in Golang-1.22 (Ubuntu), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-78659 | HTTP/2 server memory exhaustion due to Trailer headers in net/http | 7.5 | |
| High | CVE-2026-78663 | Double flow control refund on HTTP/2 server streams in net/http | 7.5 | |
| High | CVE-2026-78669 | Excessive CPU consumption from repeated initial window changes in net/http | 7.5 | |
| High | CVE-2026-94440 | Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart | 7.5 | |
| High | CVE-2026-78667 | Lack of limit on size of parsed Range headers in net/http | 7.5 | |
| High | CVE-2026-56866 | HTTP/1 client connection desynchronization after CONNECT rejection in net/http | 7.5 | |
| High | CVE-2026-78660 | HTTP/2 transport accepts malformed framing-related headers in net/http | 7.5 | |
| High | CVE-2026-56859 | Add recursion depth guard during decode in encoding/xml | 7.5 | |
| High | CVE-2026-33818 | Enforce maximum recursion depth in encoding/asn1 | 7.5 | |
| High | CVE-2026-56862 | Limit handshake messages we are willing to accept post-handshake in crypto/tls | 7.5 | |
| High | CVE-2026-94439 | HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http | 7.5 | |
| High | CVE-2026-56865 | Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog | 8.4 |