Approved changes feed: RSS · Atom

cpe:2.3:a:golang:go:1.6:*:*:*:*:*:*:*

part: a version: 1.6 update: *

VendorGolang (670356c5-bd1b-5c66-9eee-f755f5cec4c7)
ProductGo (96a6ef33-04c7-5363-bbc8-7d2a06bf0b4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/golang/go purl2cpe 2026-06-01 10:12:04.370904
pkg:golang/go/go purl2cpe 2026-06-01 10:12:04.370906
pkg:googlesource/go purl2cpe 2026-06-01 10:12:04.370907

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3959 vulnerable 2026-06-03 14:35:46.888458 Details available
The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.
Published: 2016-05-23T19:00:00.000Z
Updated: 2024-08-06T00:10:31.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3958 vulnerable 2026-06-03 14:35:46.887859 Details available
Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.
Published: 2016-05-23T19:00:00.000Z
Updated: 2024-08-06T00:10:31.969Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.