Metrics
Affected Vendors & Products
Tue, 04 Nov 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 03 Nov 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
ssvc
|
Fri, 31 Oct 2025 10:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Golang
Golang crypto |
|
| Vendors & Products |
Golang
Golang crypto |
Fri, 31 Oct 2025 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-117 | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
Thu, 30 Oct 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Wed, 29 Oct 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped. | |
| Title | ALPN negotiation error contains attacker controlled information in crypto/tls | |
| References |
|
Status: PUBLISHED
Assigner: Go
Published: 2025-10-29T22:10:12.947Z
Updated: 2025-11-04T21:13:39.428Z
Reserved: 2025-08-27T14:50:58.692Z
Link: CVE-2025-58189
Updated: 2025-11-04T21:13:39.428Z
Status : Awaiting Analysis
Published: 2025-10-29T23:16:19.833
Modified: 2025-11-04T22:16:33.877
Link: CVE-2025-58189