[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-39830":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":133,"aliases":134,"duplicate_of":9,"upstream":137,"downstream":138,"duplicates":257,"related":258,"reserved_at":9,"published_at":315,"modified_at":316,"state":317,"summary":318,"references_raw":327,"kevs":505,"epss":506,"epss_history":509,"metrics":648,"affected":658},"CVE-2026-39830","A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.",null,[11,68],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-119","Improper Restriction of Operations within the Bounds of a Memory Buffer","The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","weakness","Stable","Class","High",[20,24,28,32,36,40,44,48,52,56,60,64],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-100","Overflow Buffers",[],{"id":29,"name":30,"techniques":31},"CAPEC-123","Buffer Manipulation",[],{"id":33,"name":34,"techniques":35},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":37,"name":38,"techniques":39},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":41,"name":42,"techniques":43},"CAPEC-42","MIME Conversion",[],{"id":45,"name":46,"techniques":47},"CAPEC-44","Overflow Binary Resource File",[],{"id":49,"name":50,"techniques":51},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":53,"name":54,"techniques":55},"CAPEC-46","Overflow Variables and Tags",[],{"id":57,"name":58,"techniques":59},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":61,"name":62,"techniques":63},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":65,"name":66,"techniques":67},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],{"_key":69,"id":69,"name":70,"description":71,"type":15,"status":72,"abstraction":73,"likelihood_of_exploit":18,"capec":74},"CWE-772","Missing Release of Resource after Effective Lifetime","The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.","Draft","Base",[75],{"id":76,"name":77,"techniques":78},"CAPEC-469","HTTP DoS",[79],{"id":80,"name":81,"tactics":82,"countermeasures":86},"T1499.002","Service Exhaustion Flood",[83],{"id":84,"name":85},"TA0105","Impact",[87,92,96,100,104,108,112,116,120,124,129],{"id":88,"name":89,"tactic":90},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":91},"Detect",{"id":93,"name":94,"tactic":95},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":91},{"id":97,"name":98,"tactic":99},"D3-CSPP","Client-server Payload Profiling",{"name":91},{"id":101,"name":102,"tactic":103},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":91},{"id":105,"name":106,"tactic":107},"D3-NTSA","Network Traffic Signature Analysis",{"name":91},{"id":109,"name":110,"tactic":111},"D3-APCA","Application Protocol Command Analysis",{"name":91},{"id":113,"name":114,"tactic":115},"D3-NTCD","Network Traffic Community Deviation",{"name":91},{"id":117,"name":118,"tactic":119},"D3-RTSD","Remote Terminal Session Detection",{"name":91},{"id":121,"name":122,"tactic":123},"D3-ISVA","Inbound Session Volume Analysis",{"name":91},{"id":125,"name":126,"tactic":127},"D3-NTF","Network Traffic Filtering",{"name":128},"Isolate",{"id":130,"name":131,"tactic":132},"D3-ITF","Inbound Traffic Filtering",{"name":128},[],[135,136],"GO-2026-5017","GHSA-vgwf-h737-ff37",[],[139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255],{"_key":140},"OPENSUSE-SU-2026:10856-1",{"_key":142},"OPENSUSE-SU-2026:10949-1",{"_key":144},"SUSE-SU-2026:22074-1",{"_key":146},"SUSE-SU-2026:22065-1",{"_key":148},"DEBIAN-CVE-2026-39830",{"_key":150},"OPENSUSE-SU-2026:11031-1",{"_key":152},"OPENSUSE-SU-2026:20956-1",{"_key":154},"USN-8447-1",{"_key":156},"OPENSUSE-SU-2026:11046-1",{"_key":158},"USN-8447-2",{"_key":160},"OPENSUSE-SU-2026:11053-1",{"_key":162},"SUSE-SU-2026:2468-1",{"_key":164},"SUSE-SU-2026:2467-1",{"_key":166},"USN-8447-3",{"_key":168},"SUSE-SU-2026:22193-1",{"_key":170},"SUSE-SU-2026:22226-1",{"_key":172},"SUSE-SU-2026:2581-1",{"_key":174},"SUSE-SU-2026:22157-1",{"_key":176},"SUSE-SU-2026:22159-1",{"_key":178},"SUSE-SU-2026:2609-1",{"_key":180},"SUSE-SU-2026:2611-1",{"_key":182},"SUSE-SU-2026:2612-1",{"_key":184},"SUSE-SU-2026:2636-1",{"_key":186},"OPENSUSE-SU-2026:11126-1",{"_key":188},"SUSE-SU-2026:22249-1",{"_key":190},"SUSE-SU-2026:22242-1",{"_key":192},"SUSE-SU-2026:2665-1",{"_key":194},"SUSE-SU-2026:22376-1",{"_key":196},"SUSE-SU-2026:22423-1",{"_key":198},"SUSE-SU-2026:22442-1",{"_key":200},"SUSE-SU-2026:22451-1",{"_key":202},"SUSE-SU-2026:22516-1",{"_key":204},"SUSE-SU-2026:2693-1",{"_key":206},"SUSE-SU-2026:2706-1",{"_key":208},"SUSE-SU-2026:2715-1",{"_key":210},"SUSE-SU-2026:2733-1",{"_key":212},"SUSE-SU-2026:2824-1",{"_key":214},"SUSE-SU-2026:2827-1",{"_key":216},"OPENSUSE-SU-2026:11198-1",{"_key":218},"OPENSUSE-SU-2026:21069-1",{"_key":220},"OPENSUSE-SU-2026:21079-1",{"_key":222},"OPENSUSE-SU-2026:21084-1",{"_key":224},"OPENSUSE-SU-2026:21120-1",{"_key":226},"OPENSUSE-SU-2026:21210-1",{"_key":228},"OPENSUSE-SU-2026:21241-1",{"_key":230},"OPENSUSE-SU-2026:21244-1",{"_key":232},"OPENSUSE-SU-2026:21251-1",{"_key":234},"SUSE-SU-2026:22558-1",{"_key":236},"SUSE-SU-2026:22575-1",{"_key":238},"SUSE-SU-2026:22613-1",{"_key":240},"SUSE-SU-2026:3056-1",{"_key":242},"RHSA-2026:29455",{"_key":244},"RHSA-2026:35833",{"_key":246},"RHSA-2026:36199",{"_key":248},"RHSA-2026:36796",{"_key":250},"RHSA-2026:37072",{"_key":252},"RHSA-2026:41019",{"_key":254},"UBUNTU-CVE-2026-39830",{"_key":256},"OPENSUSE-SU-2026:21281-1",[],[259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313],{"_key":140},{"_key":142},{"_key":144},{"_key":146},{"_key":150},{"_key":152},{"_key":156},{"_key":160},{"_key":162},{"_key":164},{"_key":168},{"_key":170},{"_key":172},{"_key":174},{"_key":176},{"_key":178},{"_key":180},{"_key":182},{"_key":184},{"_key":186},{"_key":188},{"_key":190},{"_key":192},{"_key":194},{"_key":196},{"_key":198},{"_key":200},{"_key":202},{"_key":204},{"_key":206},{"_key":208},{"_key":210},{"_key":212},{"_key":214},{"_key":216},{"_key":218},{"_key":220},{"_key":222},{"_key":224},{"_key":226},{"_key":228},{"_key":230},{"_key":232},{"_key":234},{"_key":236},{"_key":238},{"_key":240},{"_key":242},{"_key":244},{"_key":246},{"_key":248},{"_key":250},{"_key":252},{"_key":256},{"_key":314},"CGA-FJHQ-H982-859W","2026-05-22T02:31:27.208Z","2026-07-21T12:05:09.655Z","Analyzed",{"cisa_kev":319,"cisa_ransomware":319,"cisa_vendor":9,"epss_severity":320,"epss_score":321,"severity":322,"severity_score":323,"severity_version":324,"severity_source":325,"severity_vector":326,"severity_status":317},false,"low",0.005,"critical",9.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",[328,337,342,347,351,356,361,366,372,376,381,385,389,393,397,401,405,409,413,417,421,425,429,433,437,441,445,449,453,457,461,465,469,473,477,481,485,489,493,497,501],{"url":329,"sources":330,"tags":333},"https://go.dev/issue/79564",[325,331,332],"nvd","osv_go",[334,335,336],"REPORT","Issue Tracking","WEB",{"url":338,"sources":339,"tags":340},"https://groups.google.com/g/golang-announce/c/a082jnz-LvI",[325,331,332],[336,341],"Mailing List",{"url":343,"sources":344,"tags":345},"https://go.dev/cl/781640",[325,331,332],[346,335,336],"FIX",{"url":348,"sources":349,"tags":350},"https://go.dev/cl/781664",[325,331,332],[346,335,336],{"url":352,"sources":353,"tags":354},"https://pkg.go.dev/vuln/GO-2026-5017",[325,331,332],[355,336],"Vendor Advisory",{"url":357,"sources":358,"tags":359},"https://nvd.nist.gov/vuln/detail/CVE-2026-39830",[332],[360],"Advisory",{"url":362,"sources":363,"tags":364},"https://cs.opensource.google/go/x/crypto",[332],[365],"PACKAGE",{"url":367,"sources":368,"tags":369},"https://access.redhat.com/security/cve/CVE-2026-39830",[325,332],[370,371,336],"VDB Entry","X Refsource REDHAT",{"url":373,"sources":374,"tags":375},"https://bugzilla.redhat.com/show_bug.cgi?id=2480684",[325,332],[335,371,336],{"url":377,"sources":378,"tags":379},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json",[325,332],[380,336],"X Sadp Csaf Vex",{"url":382,"sources":383,"tags":384},"https://access.redhat.com/errata/RHSA-2026:29455",[325,332],[355,371,336],{"url":386,"sources":387,"tags":388},"https://access.redhat.com/errata/RHSA-2026:36199",[325,332],[355,371,336],{"url":390,"sources":391,"tags":392},"https://access.redhat.com/errata/RHSA-2026:35833",[325,332],[355,371,336],{"url":394,"sources":395,"tags":396},"https://access.redhat.com/errata/RHSA-2026:36625",[325,332],[355,371,336],{"url":398,"sources":399,"tags":400},"https://access.redhat.com/errata/RHSA-2026:36207",[325,332],[355,371,336],{"url":402,"sources":403,"tags":404},"https://access.redhat.com/errata/RHSA-2026:36319",[325,332],[355,371,336],{"url":406,"sources":407,"tags":408},"https://access.redhat.com/errata/RHSA-2026:36648",[325,332],[355,371,336],{"url":410,"sources":411,"tags":412},"https://access.redhat.com/errata/RHSA-2026:36796",[325,332],[355,371,336],{"url":414,"sources":415,"tags":416},"https://access.redhat.com/errata/RHSA-2026:37072",[325,332],[355,371,336],{"url":418,"sources":419,"tags":420},"https://access.redhat.com/errata/RHSA-2026:36808",[325,332],[355,371,336],{"url":422,"sources":423,"tags":424},"https://access.redhat.com/errata/RHSA-2026:36651",[325,332],[355,371,336],{"url":426,"sources":427,"tags":428},"https://access.redhat.com/errata/RHSA-2026:36797",[325,332],[355,371,336],{"url":430,"sources":431,"tags":432},"https://access.redhat.com/errata/RHSA-2026:37271",[325,332],[355,371,336],{"url":434,"sources":435,"tags":436},"https://access.redhat.com/errata/RHSA-2026:37268",[325,332],[355,371,336],{"url":438,"sources":439,"tags":440},"https://access.redhat.com/errata/RHSA-2026:37275",[325,332],[355,371,336],{"url":442,"sources":443,"tags":444},"https://access.redhat.com/errata/RHSA-2026:37387",[325,332],[355,371,336],{"url":446,"sources":447,"tags":448},"https://access.redhat.com/errata/RHSA-2026:37272",[325,332],[355,371,336],{"url":450,"sources":451,"tags":452},"https://access.redhat.com/errata/RHSA-2026:37278",[325,332],[355,371,336],{"url":454,"sources":455,"tags":456},"https://access.redhat.com/errata/RHSA-2026:37286",[325,332],[355,371,336],{"url":458,"sources":459,"tags":460},"https://access.redhat.com/errata/RHSA-2026:37296",[325,332],[355,371,336],{"url":462,"sources":463,"tags":464},"https://access.redhat.com/errata/RHSA-2026:41019",[325,332],[355,371,336],{"url":466,"sources":467,"tags":468},"https://access.redhat.com/errata/RHSA-2026:40945",[325,332],[355,371,336],{"url":470,"sources":471,"tags":472},"https://access.redhat.com/errata/RHSA-2026:40118",[325,332],[355,371,336],{"url":474,"sources":475,"tags":476},"https://access.redhat.com/errata/RHSA-2026:41036",[325,332],[355,371,336],{"url":478,"sources":479,"tags":480},"https://access.redhat.com/errata/RHSA-2026:41031",[325,332],[355,371,336],{"url":482,"sources":483,"tags":484},"https://access.redhat.com/errata/RHSA-2026:41066",[325,332],[355,371,336],{"url":486,"sources":487,"tags":488},"https://access.redhat.com/errata/RHSA-2026:40262",[325,332],[355,371,336],{"url":490,"sources":491,"tags":492},"https://access.redhat.com/errata/RHSA-2026:40972",[325,332],[355,371,336],{"url":494,"sources":495,"tags":496},"https://access.redhat.com/errata/RHSA-2026:40974",[325,332],[355,371,336],{"url":498,"sources":499,"tags":500},"https://access.redhat.com/errata/RHSA-2026:40969",[325,332],[355,371,336],{"url":502,"sources":503,"tags":504},"https://access.redhat.com/errata/RHSA-2026:42146",[325,332],[355,371,336],[],{"date":507,"score":321,"percentile":508},"2026-07-05",0.39165,[510,514,518,521,524,527,530,534,537,540,543,546,548,552,555,558,561,564,567,570,573,576,579,582,585,589,592,595,598,601,604,607,610,614,617,620,623,626,629,632,635,638,641,644,647],{"date":511,"score":512,"percentile":513},"2026-05-22",0.00016,0.04095,{"date":515,"score":516,"percentile":517},"2026-05-23",0.00042,0.12785,{"date":519,"score":516,"percentile":520},"2026-05-24",0.12762,{"date":522,"score":516,"percentile":523},"2026-05-25",0.12755,{"date":525,"score":516,"percentile":526},"2026-05-26",0.12752,{"date":528,"score":516,"percentile":529},"2026-05-27",0.12846,{"date":531,"score":532,"percentile":533},"2026-05-28",0.00055,0.17362,{"date":535,"score":532,"percentile":536},"2026-05-29",0.17429,{"date":538,"score":532,"percentile":539},"2026-05-30",0.17424,{"date":541,"score":532,"percentile":542},"2026-05-31",0.17411,{"date":544,"score":532,"percentile":545},"2026-06-01",0.17391,{"date":547,"score":532,"percentile":545},"2026-06-02",{"date":549,"score":550,"percentile":551},"2026-06-03",0.00054,0.17079,{"date":553,"score":550,"percentile":554},"2026-06-04",0.17095,{"date":556,"score":550,"percentile":557},"2026-06-05",0.17171,{"date":559,"score":550,"percentile":560},"2026-06-06",0.17167,{"date":562,"score":550,"percentile":563},"2026-06-07",0.17132,{"date":565,"score":550,"percentile":566},"2026-06-08",0.17052,{"date":568,"score":550,"percentile":569},"2026-06-09",0.1707,{"date":571,"score":550,"percentile":572},"2026-06-10",0.17111,{"date":574,"score":550,"percentile":575},"2026-06-11",0.17154,{"date":577,"score":550,"percentile":578},"2026-06-12",0.17317,{"date":580,"score":550,"percentile":581},"2026-06-13",0.17333,{"date":583,"score":550,"percentile":584},"2026-06-14",0.17306,{"date":586,"score":587,"percentile":588},"2026-06-15",0.00313,0.22821,{"date":590,"score":587,"percentile":591},"2026-06-16",0.22845,{"date":593,"score":587,"percentile":594},"2026-06-17",0.22861,{"date":596,"score":587,"percentile":597},"2026-06-18",0.22886,{"date":599,"score":587,"percentile":600},"2026-06-19",0.22878,{"date":602,"score":587,"percentile":603},"2026-06-20",0.22866,{"date":605,"score":587,"percentile":606},"2026-06-21",0.22847,{"date":608,"score":587,"percentile":609},"2026-06-22",0.22826,{"date":611,"score":612,"percentile":613},"2026-06-23",0.00392,0.30821,{"date":615,"score":612,"percentile":616},"2026-06-24",0.30856,{"date":618,"score":612,"percentile":619},"2026-06-25",0.30935,{"date":621,"score":612,"percentile":622},"2026-06-26",0.30976,{"date":624,"score":612,"percentile":625},"2026-06-27",0.31006,{"date":627,"score":612,"percentile":628},"2026-06-28",0.30981,{"date":630,"score":612,"percentile":631},"2026-06-29",0.30982,{"date":633,"score":321,"percentile":634},"2026-06-30",0.38971,{"date":636,"score":321,"percentile":637},"2026-07-01",0.3907,{"date":639,"score":321,"percentile":640},"2026-07-02",0.39103,{"date":642,"score":321,"percentile":643},"2026-07-03",0.39124,{"date":645,"score":321,"percentile":646},"2026-07-04",0.39148,{"date":507,"score":321,"percentile":508},[649,654,656],{"source":325,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":650,"cvss_v4_0":9},{"baseScore":323,"baseSeverity":651,"vectorString":326,"impactScore":652,"exploitabilityScore":653},"CRITICAL",8.7,10,{"source":331,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":655,"cvss_v4_0":9},{"baseScore":323,"baseSeverity":651,"vectorString":326,"impactScore":652,"exploitabilityScore":653},{"source":332,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":657,"cvss_v4_0":9},{"baseScore":323,"baseSeverity":9,"vectorString":326,"impactScore":652,"exploitabilityScore":653},[659,670,678,683],{"ecosystem":9,"name":660,"vendor":661,"product":660,"cpe_part":662,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":663},"crypto","golang","a",[664],{"version":665,"is_range":666,"range_type":667,"version_start":9,"version_start_type":9,"version_end":668,"version_end_type":669,"fixed_in":9},"lt0.52.0",true,"cpe","0.52.0","excluding",{"ecosystem":671,"name":672,"vendor":673,"product":660,"cpe_part":9,"purl_type":661,"purl_namespace":673,"purl_name":660,"source":9,"versions":674},"Go","golang.org/x/crypto","golang.org/x",[675],{"version":676,"is_range":666,"range_type":677,"version_start":9,"version_start_type":9,"version_end":668,"version_end_type":669,"fixed_in":9},"lt0_52_0","semver",{"ecosystem":671,"name":679,"vendor":672,"product":680,"cpe_part":9,"purl_type":661,"purl_namespace":672,"purl_name":680,"source":9,"versions":681},"golang.org/x/crypto/ssh","ssh",[682],{"version":676,"is_range":666,"range_type":677,"version_start":9,"version_start_type":9,"version_end":668,"version_end_type":669,"fixed_in":9},{"ecosystem":9,"name":679,"vendor":672,"product":679,"cpe_part":662,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":684},[685],{"version":686,"is_range":666,"range_type":325,"version_start":9,"version_start_type":9,"version_end":668,"version_end_type":669,"fixed_in":9},"\u003C 0.52.0"]