CVE-2026-89090 · Brief

CVEs like CVE-2026-89090

The records whose text reads closest to CVE-2026-89090, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2022-417190.616
   Panic in github.com/shamaton/msgpack/v2

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

2. CVE-2021-315250.683
   net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

3. CVE-2023-506580.621
   The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

4. CVE-2026-326410.689
   Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware

   Same weakness class, CWE-248.

5. CVE-2026-658190.627
   gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2020-283620.630
   Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

7. CVE-2026-454040.602
   OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

8. CVE-2025-479140.601
   Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

9. CVE-2026-582680.605
   SIPGO: DoS via unvalidated Content-Length in the stream parser

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

10. CVE-2026-502740.624
    dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.