It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1141 advisory.

    Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy     validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.
    (CVE-2025-22874)

    Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking     sensitive information. (CVE-2025-4673)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:15406 advisory.

    Collector with the supported components for a Red Hat build of OpenTelemetry

    Security Fix(es):

    * net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:15887 advisory.

    Collector with the supported components for a Red Hat build of OpenTelemetry

    Security Fix(es):

    * net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:15887 advisory.

    * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:16432 advisory.

    * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:10677 advisory.

    * net/[http:](http:) Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2025:15887 advisory.

    * net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1214 advisory.

    Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy     validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.
    (CVE-2025-22874)

    Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking     sensitive information. (CVE-2025-4673)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking     sensitive information.(CVE-2025-4673)

    If the PATH environment variable contains paths which are executables (rather than just directories),     passing certain strings to LookPath ('', '.', and '..'), can result in the binaries listed in the PATH     being unexpectedly returned.(CVE-2025-47906)

    Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to     the Scan method of the returned Rows can result in unexpected results if other queries are being made in     parallel. This can result in a race condition that may overwrite the expected results with those of     another query, causing the call to Scan to return either unexpected results from the other query or an     error.(CVE-2025-47907)

Tenable has extracted the preceding description block directly from the EulerOS golang security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016819 advisory.

    Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking     sensitive information.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87245 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    Security Fix(es):

    * golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect     (CVE-2024-45336)

    * crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec     (CVE-2025-22866)

    * crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509 (CVE-2025-22874)

    * net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

    * crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption (CVE-2025-68121)

    * crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)

    * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation     (CVE-2026-32281)

    * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint     application (CVE-2026-33810)

    * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)

    * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages     (CVE-2026-32283)

    * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building     (CVE-2026-32280)

    * golang: cmd/compile: no-op interface conversion bypasses overlap checking (CVE-2026-27144)

    * golang: cmd/compile: possible memory corruption after bound check elimination (CVE-2026-27143)

    * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)

    * net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed     SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)

    * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)

    * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)

    * golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect     Punycode label processing (CVE-2026-39821)

    * mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)

    * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries     (CVE-2026-27145)

    * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal     (CVE-2026-33818)

    * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution     (CVE-2026-56860)

    * net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service     (CVE-2026-56853)

    * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages     (CVE-2026-56862)

    * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)

    * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate     Authority (CVE-2026-111943)

    Bug Fix(es) and Enhancement(s):

    * go-toolset:rhel8/golang:Update Go to version 1.25.9+2 [rhel-8.8.z] (JIRA:RHEL-192033)

    * go-toolset: golang: Update Go to version 1.24.6+1 [rhel-8.8.z] (JIRA:RHEL-235972)

    * Rebase delve with golang 1.26.1 (JIRA:RHEL-238396)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
251375	Amazon Linux 2023 : captree, libcap, libcap-devel (ALAS2023-2025-1141)	Nessus	Amazon Linux Local Security Checks	2025/8/18	2025/8/18	high
261674	RHEL 9 : opentelemetry-collector (RHSA-2025:15406)	Nessus	Red Hat Local Security Checks	2025/9/8	2025/9/8	medium
264869	RHEL 9 : opentelemetry-collector (RHSA-2025:15887)	Nessus	Red Hat Local Security Checks	2025/9/16	2025/9/16	medium
265395	AlmaLinux 9 : opentelemetry-collector (ALSA-2025:15887)	Nessus	Alma Linux Local Security Checks	2025/9/18	2025/9/18	medium
269833	AlmaLinux 10 : opentelemetry-collector (ALSA-2025:16432)	Nessus	Alma Linux Local Security Checks	2025/10/9	2025/10/9	medium
269893	AlmaLinux 10 : golang (ALSA-2025:10677)	Nessus	Alma Linux Local Security Checks	2025/10/9	2025/10/9	medium
269940	RockyLinux 9 : opentelemetry-collector (RLSA-2025:15887)	Nessus	Rocky Linux Local Security Checks	2025/10/10	2025/10/10	medium
270524	Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2025-1214)	Nessus	Amazon Linux Local Security Checks	2025/10/15	2025/10/15	high
278441	EulerOS 2.0 SP11 : golang (EulerOS-SA-2025-2481)	Nessus	Huawei Local Security Checks	2025/12/11	2026/2/25	high
313590	Unity Linux 20.1050e / 20.1070e Security Update: etcd (UTSA-2026-016819)	Nessus	Unity Linux Local Security Checks	2026/5/9	2026/5/9	medium
370409	RHEL 8 : go-toolset:rhel8 (RHSA-2026:87245)	Nessus	Red Hat Local Security Checks	2026/10/22	2026/10/24	critical

检测

插件搜索

high

medium

medium

medium

medium

medium

medium

high

high

medium

critical