Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| High | 7.5 | RHSA-2026:89884 |
delve security update
Red Hat, GoRed Hat Enterprise Linux, Go, Red Hat delve
|
Red Hat Security Advisories | |||
|
RHSA-2026:89884CVE-2026-111943CVE-2026-78667CVE-2026-78669CVE-2026-94440delve security update
Executive summaryAn update for the delve Go debugger on Red Hat Enterprise Linux 10.0 Extended Update Support fixes several security flaws. Red Hat rates the update as Important, and the advisory says the fixes address denial of service and man-in-the-middle risks. Technical summaryThe advisory lists five CVEs in the Go standard library components that delve uses: a denial of service via crafted HTTP Range headers (CVE-2026-78667), a denial of service via multiple ECH outer extension references in crypto/tls (CVE-2026-97031), a denial of service via memory limit bypass in multipart form parsing (CVE-2026-94440), a denial of service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669), and man-in-the-middle attacks via untrusted intermediate certificates in crypto/x509 (CVE-2026-111943). The advisory does not state attack vectors or preconditions in detail, affected or fixed package versions, workarounds, or detection guidance; it refers readers to the CVE pages for CVSS scores and further details. Exploitation status is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||