Skip to content
OpenAdvisories

Package · Go

go.etcd.io/etcd/client/pkg/v3

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.7
    CVE-2026-73500

    etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

    etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/…

    etcd-io etcd kots kyverno-1.17 Debian Ubuntu Azure Linux Wolfi Go
  • Low —
    GHSA-5x4g-q5rc-36jp

    Etcd pkg Insecure ciphers are allowed by default

    ### Vulnerability type Cryptography ### Detail The TLS ciphers list supported by etcd contains insecure cipher suites. Users can configure the desired ciphers using the “--cipher-suites” flag, and a default list of secure cipher suites is used if empty. ### W…

    go.etcd.io/etcd go.etcd.io/etcd/client/pkg/v3 Go