v vulnerabilities

2 known vulnerabilities in v from Vlang. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  v: Improper Certificate Validation

  CVE-2026-82509Nov 10, 2026Vlang

  V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation bypass vulnerability that allows on-path attackers to intercept HTTPS traffic by exploiting the default false value of SSLConne

• 8.6 High severity

  v: Interpretation Conflict

  CVE-2026-67201Jul 29, 2026Vlang

  V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting a parser differential between net.urllib and net.http. Attackers can craft a UR