VulertSecurity VulertSecurity

Vulnerability Database · Go · stdlib · Version

stdlib go1.13.12

go1.13.12 is affected by 169 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: go1.25.5.

Critical 0 High 0 Medium 0 Low 0 Unrated 169

All stdlib versions & vulnerabilities → Search the database for this package →
Licence BSD-3-Clause Also known from other sources 181 Database updated 23/Oct/2026

Release and licence data published by the Go module proxy. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

stdlib go1.13.12 vulnerabilities

169 vulnerabilities cover stdlib go1.13.12. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-111943: Go Standard Library - Distrust of Compromised Intermediate Certificates in crypto/x509 N/A unrated 1.26.10 21 Oct 2026
CVE-2026-94448: Go stdlib Package Vulnerability in html/template Context Tracking N/A unrated 1.26.9 08 Oct 2026
CVE-2026-97030: stdlib Package Vulnerability in HTML/Template Yield Keyword Handling N/A unrated 1.26.9 08 Oct 2026
CVE-2026-78659: Go Standard Library HTTP/2 Server Memory Exhaustion Due to Trailer Headers N/A unrated 1.26.9 08 Oct 2026
CVE-2026-56857: Go Standard Library 'os' Package Junction Vulnerability on Windows N/A unrated 1.26.9 08 Oct 2026
CVE-2026-56866: Go stdlib HTTP/1 Client Connection Desynchronization Vulnerability N/A unrated 1.26.9 08 Oct 2026
CVE-2026-97031: Go stdlib crypto/tls Package Memory Exhaustion Vulnerability N/A unrated 1.26.9 08 Oct 2026
CVE-2026-94440: Memory Limit Bypass in Go's net/textproto and mime/multipart Packages N/A unrated 1.26.9 08 Oct 2026
CVE-2026-78667: Go Standard Library net/http Range Header Parsing CPU Consumption Vulnerability N/A unrated 1.26.9 08 Oct 2026
CVE-2026-78660: Go Standard Library and golang.org/x/net HTTP/2 Transport Malformed Header Vulnerability N/A unrated 1.26.9 08 Oct 2026
CVE-2026-78669: Excessive CPU Consumption in Go's net/http Package N/A unrated 1.26.9 08 Oct 2026
CVE-2026-78663: Go Standard Library HTTP/2 Server Double Flow Control Refund Vulnerability N/A unrated 1.26.9 08 Oct 2026
CVE-2026-94439: Go Standard Library HTTP/1 Server Connection Desynchronization Vulnerability N/A unrated 1.26.9 08 Oct 2026
CVE-2026-97032: Go Standard Library HTTP/2 Server Crash Due to HPACK Encoder Race Condition N/A unrated 1.26.9 08 Oct 2026
CVE-2026-33818: Stack Exhaustion Vulnerability in Go's stdlib Encoding/ASN1 Package N/A unrated 1.25.13 13 Aug 2026
CVE-2026-56859: Stack Exhaustion Vulnerability in Go's encoding/xml Package N/A unrated 1.25.13 13 Aug 2026
CVE-2026-56853: Go stdlib HTTP/2 ReadHeaderTimeout Bypass Vulnerability N/A unrated 1.25.13 13 Aug 2026
CVE-2026-56862: Go stdlib crypto/tls Package KeyUpdate Message Vulnerability N/A unrated 1.25.13 13 Aug 2026
CVE-2026-56858: stdlib Package Vulnerability in html/template Leading to Potential XSS N/A unrated 1.25.13 13 Aug 2026
CVE-2026-56860: Go stdlib net/url Package Quadratic Complexity Vulnerability N/A unrated 1.25.13 13 Aug 2026
CVE-2026-39822: Vulnerability in stdlib Package - Root Escape via Symlink in os N/A unrated 1.25.12 07 Jul 2026
CVE-2026-42505: Go stdlib Package - Encrypted Client Hello Privacy Leak Vulnerability N/A unrated 1.25.12 07 Jul 2026
CVE-2026-27145: Inefficient Hostname Parsing in Go's crypto/x509 Package N/A unrated 1.25.11 02 Jun 2026
CVE-2026-42504: Quadratic Complexity Vulnerability in Go's mime Package N/A unrated 1.25.11 02 Jun 2026
CVE-2026-42507: net/textproto Package Error Injection Vulnerability N/A unrated 1.25.11 02 Jun 2026
CVE-2026-39836: Panic in Dial and LookupPort Functions in Go's net Package Due to NUL Byte N/A unrated 1.25.10 07 May 2026
CVE-2026-39825: Go stdlib ReverseProxy Query Parameter Exposure Vulnerability N/A unrated 1.25.10 07 May 2026
CVE-2026-42499: Vulnerability in stdlib Package's net/mail Module Leading to DoS via Quadratic String Concatenation N/A unrated 1.25.10 07 May 2026
CVE-2026-39826: XSS Vulnerability in Go's stdlib html/template Package N/A unrated 1.25.10 07 May 2026
CVE-2026-33811: Go Standard Library net Package Crash Due to Long CNAME Response N/A unrated 1.25.10 07 May 2026
CVE-2026-39823: XSS Vulnerability in Go's stdlib html/template Package Due to Meta Content URL Escaping Bypass N/A unrated 1.25.10 07 May 2026
CVE-2026-39820: Quadratic String Concatenation Vulnerability in Go's net/mail Package N/A unrated 1.25.10 07 May 2026
CVE-2026-32282: stdlib Package Vulnerability Allows Root Escape via TOCTOU on Linux N/A unrated 1.25.9 07 Apr 2026
CVE-2026-32289: stdlib Package XSS Vulnerability in html/template Due to JsBraceDepth Context Tracking Bugs N/A unrated 1.25.9 07 Apr 2026
CVE-2026-32288: Unbounded Memory Allocation in Go's stdlib Archive/Tar Package N/A unrated 1.25.9 07 Apr 2026
CVE-2026-32283: Go stdlib TLS 1.3 KeyUpdate Vulnerability Leading to DoS N/A unrated 1.25.9 07 Apr 2026
CVE-2026-32281: Inefficient Policy Validation in Go's stdlib Crypto/x509 Package N/A unrated 1.25.9 07 Apr 2026
CVE-2026-32280: Denial of Service Vulnerability in Go's stdlib Crypto/x509 Package N/A unrated 1.25.9 07 Apr 2026
CVE-2026-25679: Incorrect Parsing of IPv6 Host Literals in Go's net/url Package N/A unrated 1.25.8 06 Mar 2026
CVE-2026-27139: Go stdlib FileInfo Directory Escape Vulnerability N/A unrated 1.25.8 06 Mar 2026
CVE-2026-27142: Go stdlib Package HTML Meta Tag XSS Vulnerability N/A unrated 1.25.8 06 Mar 2026
CVE-2025-68121: Go stdlib crypto/tls Unexpected Session Resumption Vulnerability N/A unrated 1.24.13 05 Feb 2026
CVE-2025-22873: Improper Directory Access in Go's Standard Library 'os' Package N/A unrated 1.23.9 04 Feb 2026
Excessive CPU Consumption Vulnerability in Go's stdlib: archive/zip Package N/A unrated 1.24.12 28 Jan 2026
CVE-2025-61726: Memory Exhaustion in net/url Package Due to Unrestricted Query Parameters N/A unrated 1.24.12 28 Jan 2026
CVE-2025-61730: Go stdlib crypto/tls Handshake Messages Processed at Incorrect Encryption Level N/A unrated 1.24.12 28 Jan 2026
CVE-2025-61727: Go stdlib Package Vulnerability in Wildcard DNS Name Constraints N/A unrated 1.24.11 02 Dec 2025
CVE-2025-61729: Excessive Resource Consumption in Go's stdlib crypto/x509 Package N/A unrated 1.24.11 02 Dec 2025
CVE-2025-61724: Excessive CPU Consumption in net/textproto Package's Reader.ReadResponse Function N/A unrated 1.24.8 29 Oct 2025
CVE-2025-58183: Unbounded Allocation Vulnerability in Go's Archive/Tar Package N/A unrated 1.24.8 29 Oct 2025
CVE-2025-58188: Go stdlib crypto/x509 DSA Public Key Certificate Validation Panic N/A unrated 1.24.8 29 Oct 2025
CVE-2025-58186: Go stdlib net/http Cookie Parsing Memory Exhaustion Vulnerability N/A unrated 1.24.8 29 Oct 2025
CVE-2025-58185: Go stdlib Encoding/ASN1 Memory Exhaustion Vulnerability N/A unrated 1.24.8 29 Oct 2025
CVE-2025-47912: Insufficient Validation of Bracketed IPv6 Hostnames in net/url Package N/A unrated 1.24.8 29 Oct 2025
CVE-2025-61723: Go Standard Library 'encoding/pem' Vulnerability Leading to Quadratic Complexity in Input Parsing N/A unrated 1.24.8 29 Oct 2025
CVE-2025-58189: Go stdlib - ALPN Negotiation Error Exposes Attacker Controlled Information N/A unrated 1.24.8 29 Oct 2025
CVE-2025-58187: Go stdlib - Quadratic Complexity in Name Constraint Checking N/A unrated 1.24.9 29 Oct 2025
CVE-2025-61725: Excessive CPU Consumption in net/mail Package's ParseAddress Function N/A unrated 1.24.8 29 Oct 2025
CVE-2025-47906: Go stdlib os/exec LookPath Unexpected Path Return Vulnerability N/A unrated 1.23.12 18 Sep 2025
CVE-2025-47907: Go stdlib database/sql Rows.Scan Race Condition Vulnerability N/A unrated 1.23.12 07 Aug 2025
CVE-2025-47907: Go stdlib database/sql Rows.Scan Race Condition Vulnerability N/A unrated 1.23.12 07 Aug 2025
CVE-2025-0913: Go Standard Library - Inconsistent Handling of O_CREATE|O_EXCL on Unix and Windows N/A unrated 1.23.10 11 Jun 2025
CVE-2025-4673: Go Standard Library net/http Sensitive Header Leak on Cross-Origin Redirects N/A unrated 1.23.10 11 Jun 2025
CVE-2025-22871: Go stdlib net/http Request Smuggling Vulnerability N/A unrated 1.23.8 08 Apr 2025
CVE-2025-22866: Go Standard Library - Timing Sidechannel Vulnerability in P-256 on ppc64le Architecture N/A unrated 1.22.12 06 Feb 2025
IPv6 Zone ID Vulnerability in Go's Standard Library: Bypassing URI Name Constraints N/A unrated 1.22.11 28 Jan 2025
Sensitive Header Exposure in Go's net/http Package - GO-2025-3420 N/A unrated 1.22.11 28 Jan 2025
CVE-2024-34155: Stack exhaustion in all Parse functions in go/parser N/A unrated 1.22.7 06 Sep 2024
CVE-2024-34156: Stack exhaustion in encoding/gob N/A unrated 1.22.7 06 Sep 2024
CVE-2024-34158: Stack Exhaustion in Parse in go/build/constraint N/A unrated 1.22.7 06 Sep 2024
CVE-2024-34158: Stack exhaustion in Parse in go/build/constraint N/A unrated 1.22.7 06 Sep 2024
Denial of Service in net/http due to Improper 100-Continue Handling N/A unrated 1.21.12 02 Jul 2024
CVE-2024-24790: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip N/A unrated 1.21.11 04 Jun 2024
CVE-2024-24789: Mishandling of corrupt central directory record in archive/zip N/A unrated 1.21.11 04 Jun 2024
HTTP/2 CONTINUATION flood in net/http N/A unrated 1.21.9 03 Apr 2024
CVE-2024-24785: Errors in JSON Marshaling Break Template Escaping in html/template N/A unrated 1.21.8 05 Mar 2024
CVE-2024-24785: Errors in JSON Marshaling Break Template Escaping in html/template N/A unrated 1.21.8 05 Mar 2024
CVE-2024-24785: Errors in JSON Marshaling Break Template Escaping in html/template N/A unrated 1.21.8 05 Mar 2024
CVE-2024-24784: Comments in display names incorrectly handled in net/mail N/A unrated 1.21.8 05 Mar 2024
CVE-2023-45289: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http N/A unrated 1.21.8 05 Mar 2024
CVE-2023-45290: Memory exhaustion in multipart form parsing in net/textproto and net/http N/A unrated 1.21.8 05 Mar 2024
CVE-2024-24783: Verify panics on certificates with an unknown public key algorithm in crypto/x509 N/A unrated 1.21.8 05 Mar 2024
CVE-2023-39326: Denial of service via chunk extensions in net/http N/A unrated 1.20.12 06 Dec 2023
CVE-2023-45287: Timing Side Channel Vulnerability in Go stdlib N/A unrated 1.20.0 05 Dec 2023
CVE-2023-45284: Incorrect detection of reserved device names on Windows in path/filepath N/A unrated 1.20.11 08 Nov 2023
CVE-2023-45283: Insecure parsing of Windows paths in filepath package N/A unrated 1.20.11 08 Nov 2023
CVE-2023-44487: HTTP/2 rapid reset can cause excessive work in net/http N/A unrated 1.20.10 11 Oct 2023
CVE-2023-39319: Improper handling of special tags within script contexts in html/template N/A unrated 1.20.8 07 Sep 2023
CVE-2023-39318: Improper handling of HTML-like comments in script contexts in html/template N/A unrated 1.20.8 07 Sep 2023
CVE-2023-29409: Large RSA keys can cause high CPU usage in crypto/tls N/A unrated 1.19.12 02 Aug 2023
CVE-2023-29406: Insufficient sanitization of Host header in net/http N/A unrated 1.19.11 11 Jul 2023
CVE-2023-29403: Unsafe behavior in setuid/setgid binaries in Go runtime N/A unrated 1.19.10 08 Jun 2023
CVE-2023-29400: Improper handling of empty HTML attributes in html/template N/A unrated 1.19.9 05 May 2023
CVE-2023-24540: Improper handling of JavaScript whitespace in html/template N/A unrated 1.19.9 05 May 2023
CVE-2023-24539: Improper sanitization of CSS values in html/template N/A unrated 1.19.9 05 May 2023
CVE-2023-24538: Backticks not treated as string delimiters in html/template N/A unrated 1.19.8 05 Apr 2023
CVE-2023-24537: Infinite loop in parsing in go/scanner N/A unrated 1.19.8 05 Apr 2023
CVE-2023-24536: Excessive resource consumption in net/http, net/textproto and mime/multipart N/A unrated 1.19.8 05 Apr 2023
CVE-2023-24534: Excessive memory allocation in net/http and net/textproto N/A unrated 1.19.8 05 Apr 2023
CVE-2023-24532: Incorrect calculation on P256 curves in crypto/internal/nistec N/A unrated 1.19.7 08 Mar 2023
CVE-2022-41725: Excessive resource consumption in mime/multipart N/A unrated 1.19.6 21 Feb 2023
CVE-2022-41723: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net N/A unrated 1.19.6 16 Feb 2023
CVE-2022-41724: Panic on large handshake records in crypto/tls N/A unrated 1.19.6 16 Feb 2023
CVE-2022-41722: Path Traversal Vulnerability in stdlib package N/A unrated 1.19.6 16 Feb 2023
CVE-2022-41717: Excessive memory growth in net/http and golang.org/x/net/http2 N/A unrated 1.18.9 08 Dec 2022
CVE-2022-41720: Restricted file access on Windows in stdlib N/A unrated 1.18.9 07 Dec 2022
CVE-2022-41716: Unsanitized NUL in environment variables on Windows in syscall and os/exec N/A unrated 1.18.8 01 Nov 2022
CVE-2022-28803: Stored XSS in SilverStripe Framework N/A unrated 1.18.7 06 Oct 2022
CVE-2022-2880: Vulnerability in net/http/httputil package N/A unrated 1.18.7 06 Oct 2022
CVE-2022-41715: Memory exhaustion in regexp/syntax package N/A unrated 1.18.7 06 Oct 2022
CVE-2022-2879: Unbounded memory consumption in archive/tar N/A unrated 1.18.7 06 Oct 2022
CVE-2022-27664: Denial of Service in net/http and golang.org/x/net/http2 N/A unrated 1.18.6 12 Sep 2022
CVE-2016-5386: Improper input validation in net/http and net/http/cgi N/A unrated 1.6.3 09 Aug 2022
CVE-2020-0601: Certificate validation bypass on Windows in crypto/x509 N/A unrated 1.12.16 01 Aug 2022
CVE-2022-32189: Panic when decoding Float and Rat types in math/big N/A unrated 1.17.13 01 Aug 2022
CVE-2019-9512: golang.org/x/net/http vulnerable to ping floods N/A unrated 1.11.13 01 Aug 2022
CVE-2022-29804: Path Traversal Vulnerability in stdlib package N/A unrated 1.17.11 28 Jul 2022
CVE-2022-30629: Session tickets lack random ticket_age_add in crypto/tls N/A unrated 1.17.11 28 Jul 2022
CVE-2022-32148: Exposure of client IP addresses in net/http N/A unrated 1.17.12 28 Jul 2022
CVE-2022-30580: Empty Cmd.Path can trigger unintended binary in os/exec on Windows N/A unrated 1.17.11 26 Jul 2022
CVE-2022-1705: Improper sanitization of Transfer-Encoding headers in net/http N/A unrated 1.17.12 25 Jul 2022
CVE-2022-30630: Stack exhaustion in Glob on certain paths in io/fs N/A unrated 1.17.12 20 Jul 2022
CVE-2022-30635: Stack exhaustion when decoding certain messages in encoding/gob N/A unrated 1.17.12 20 Jul 2022
CVE-2022-30631: Stack exhaustion when reading certain archives in compress/gzip N/A unrated 1.17.12 20 Jul 2022
CVE-2022-30633: Stack exhaustion when unmarshaling certain documents in encoding/xml N/A unrated 1.17.12 20 Jul 2022
CVE-2022-30632: Stack exhaustion on crafted paths in path/filepath N/A unrated 1.17.12 20 Jul 2022
CVE-2022-28131: Stack exhaustion from deeply nested XML documents in encoding/xml N/A unrated 1.17.12 20 Jul 2022
CVE-2022-1962: Stack exhaustion due to deeply nested types in go/parser N/A unrated 1.17.12 20 Jul 2022
CVE-2022-29526: Incorrect privilege reporting in syscall and golang.org/x/sys/unix N/A unrated 1.17.10 15 Jul 2022
CVE-2021-44716: Unbounded memory growth in net/http and golang.org/x/net/http2 N/A unrated 1.16.12 15 Jul 2022
CVE-2021-31525: Panic due to large headers in net/http and golang.org/x/net/http/httpguts N/A unrated 1.15.12 15 Jul 2022
CVE-2018-16875: Denial of Service in chain verification in crypto/x509 N/A unrated 1.10.6 15 Jul 2022
CVE-2020-7919: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte N/A unrated 1.12.16 06 Jul 2022
CVE-2019-14809: Incorrect parsing validation in net/url N/A unrated 1.11.13 01 Jul 2022
CVE-2020-16845: Unbounded read from invalid inputs in encoding/binary N/A unrated 1.13.15 01 Jul 2022
CVE-2022-30634: Indefinite hang with large buffers on Windows in crypto/rand N/A unrated 1.17.11 09 Jun 2022
CVE-2019-9634: DLL Injection on Windows in Go stdlib N/A unrated 1.11.10 25 May 2022
CVE-2016-3959: Denial of Service in crypto/dsa N/A unrated 1.5.4 24 May 2022
CVE-2017-1000097: Mishandled trust preferences for root certificates on Darwin in crypto/x509 N/A unrated 1.6.4 24 May 2022
CVE-2019-17596: Panic on invalid DSA public keys in crypto/dsa N/A unrated 1.12.11 24 May 2022
CVE-2019-6486: Denial of Service in crypto/elliptic P-521 and P-384 curves N/A unrated 1.10.8 24 May 2022
CVE-2019-16276: Request smuggling due to accepting invalid headers in net/http N/A unrated 1.12.10 23 May 2022
CVE-2022-24921: Stack exhaustion when compiling deeply nested expressions in regexp N/A unrated 1.16.15 23 May 2022
CVE-2022-23772: Uncontrolled memory consumption in math/big N/A unrated 1.16.14 23 May 2022
CVE-2022-23806: Incorrect computation for some invalid field elements in crypto/elliptic N/A unrated 1.16.14 23 May 2022
CVE-2022-28327: Panic due to large inputs affecting P-256 curves in crypto/elliptic N/A unrated 1.17.9 20 May 2022
CVE-2022-24675: Stack overflow in encoding/pem package N/A unrated 1.17.9 20 May 2022
CVE-2021-39293: Panic due to crafted inputs in archive/zip N/A unrated 1.16.8 18 May 2022
CVE-2021-44717: Misdirected I/O in syscall in Go stdlib N/A unrated 1.16.12 18 May 2022
CVE-2020-14039: X509 Certificate Verification Bypass in Go crypto/x509 N/A unrated 1.13.13 17 Feb 2022
CVE-2020-14039: Certificate verification error on Windows in crypto/x509 N/A unrated 1.13.13 17 Feb 2022
CVE-2020-15586: net/http Go package vulnerable to 'Expect: 100-continue' header panic N/A unrated 1.13.13 17 Feb 2022
CVE-2020-15586: Data race and crash in net/http N/A unrated 1.13.13 17 Feb 2022
CVE-2021-27918: Infinite loop when decoding inputs in encoding/xml N/A unrated 1.15.9 17 Feb 2022
CVE-2021-3114: Incorrect operations on the P-224 curve in crypto/elliptic N/A unrated 1.14.14 17 Feb 2022
CVE-2021-33195: Improper sanitization when resolving values from DNS in net N/A unrated 1.15.13 17 Feb 2022
CVE-2021-33196: Panic when reading certain archives in archive/zip N/A unrated 1.15.13 17 Feb 2022
CVE-2021-33197: Vulnerability in stdlib package - Attacker can drop certain headers in net/http/httputil N/A unrated 1.15.13 17 Feb 2022
CVE-2021-33198: Panic on inputs with large exponents in math/big N/A unrated 1.15.13 17 Feb 2022
CVE-2021-34558: Panic on certain certificates in crypto/tls N/A unrated 1.15.14 17 Feb 2022
CVE-2021-36221: Panic in ReverseProxy in net/http/httputil N/A unrated 1.15.15 17 Feb 2022
CVE-2017-1000098: Denial of Service in Go stdlib/mime/multipart N/A unrated 1.6.4 15 Feb 2022
CVE-2021-41772: Vulnerability in stdlib package - Panic when opening certain archives in archive/zip N/A unrated 1.16.10 13 Jan 2022
CVE-2021-41771: Panic on invalid symbol tables in debug/macho N/A unrated 1.16.10 13 Jan 2022
CVE-2020-24553: Cross-Site Scripting Vulnerability in net/http/cgi and net/http/fcgi Packages N/A unrated 1.14.8 13 Jan 2022
CVE-2020-24553: Cross-site scripting in net/http/cgi and net/http/fcgi N/A unrated 1.14.8 13 Jan 2022
CVE-2016-3958: Privilege Escalation on Windows via Malicious DLL in Syscall N/A unrated 1.5.4 05 Jan 2022
CVE-2015-5739: Request smuggling due to improper header parsing in net/http N/A unrated 1.4.3 05 Jan 2022
CVE-2015-5739: HTTP Request Smuggling in Go stdlib N/A unrated 1.4.3 05 Jan 2022

Looking for another version, or everything Vulert holds for stdlib?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About stdlib go1.13.12

Is stdlib go1.13.12 vulnerable?

Yes. 169 vulnerabilities in the Vulert database cover stdlib go1.13.12: 0 critical, 0 high, 0 medium and 0 low, plus 169 not yet rated. The upgrade Vulert recommends is go1.25.5, and each entry above names the fixed version to move to.

Which version of stdlib should I use instead of go1.13.12?

go1.25.5 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

How do I monitor stdlib for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the stdlib version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.