Product · Google

go-attestation

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.6

CVE-2026-19201

Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service (DoS). The (*WinEvents).readELAMAggregation function recurses for every ne…

Google go-attestation golang-github-google-go-attestation golang-github-google-go-attestation Debian Ubuntu

Sep 8, 2026
Medium 4.0

CVE-2022-0317

Improper Input Validation in AKPublic.Verify in go-attestation

An improper input validation vulnerability in go-attestation before 0.3.3 allows local users to provide a maliciously-formed Quote over no/some PCRs, causing AKPublic.Verify to succeed despite the inconsistency. Subsequent use of the same set of PCR values in…

Google go-attestation github.com/google/go-attestation Go

Feb 4, 2022