Skip to main content
cve.nowby Sazabi
← Go
GoPackage

golang.org/x/mod

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 high
Registry
pkg.go.dev

Advisories 2

  • Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb

    Affected: fixed in 0.40.0.

  • Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog

    Affected: fixed in 0.40.0.