go vulnerabilities (Alpaquita)
111 vulnerabilities.
goAlpaquitaDistrust compromised intermediate certificates in crypto/x5096.8 MediumgoAlpaquitaHTTP/2 server crash due to HPACK encoder race in net/http7.5 HighgoAlpaquitaReject malformed ECH outer extension references in crypto/tls7.5 HighgoAlpaquitaRecognize yield as regexp preceder keyword in html/template6.1 MediumgoAlpaquitaReset context tracking on consecutive template expressions in html/template6.1 MediumgoAlpaquitaChecksum database bypass for golang.org/toolchain in cmd/go7.8 HighgoAlpaquitaChecksum bypass for golang.org/fips140 in cmd/go7.8 HighgoAlpaquitaMemory limit bypass when parsing MIME headers in net/textproto, mime/multipart7.5 HighgoAlpaquitaHTTP/1 server connection desynchronization after 2xx CONNECT response in net/http7.5 HighgoAlpaquitaExcessive CPU consumption from repeated initial window changes in net/http7.5 HighgoAlpaquitaLack of limit on size of parsed Range headers in net/http7.5 HighgoAlpaquitaDouble flow control refund on HTTP/2 server streams in net/http9.1 CriticalgoAlpaquitaHTTP/2 transport accepts malformed framing-related headers in net/http7.5 HighgoAlpaquitaHTTP/2 server memory exhaustion due to Trailer headers in net/http7.5 HighgoAlpaquitaHTTP/1 client connection desynchronization after CONNECT rejection in net/http7.5 HighgoAlpaquitaFix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog8.4 HighgoAlpaquitaIgnore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb7.5 HighgoAlpaquitaLimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 HighgoAlpaquitaAvoid quadratic complexity in resolvePath in net/url5.9 MediumgoAlpaquitaAdd recursion depth guard during decode in encoding/xml7.5 HighgoAlpaquitaFix Javascript regexp context tracking in html/template6.1 MediumgoAlpaquitaApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 HighgoAlpaquitaEnforce maximum recursion depth in encoding/asn17.5 HighgoAlpaquitaParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5 HighgoAlpaquitaInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 MediumgoAlpaquitaRoot escape via symlink plus trailing slash in os7.8 HighgoAlpaquitaArbitrary inputs are included in errors without any escaping in net/textproto5.3 MediumgoAlpaquitaQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 HighgoAlpaquitaInefficient candidate hostname parsing in crypto/x5096.5 MediumgoAlpaquitaMalicious module proxy can bypass checksum database in cmd/go7.5 HighgoAlpaquitaQuadratic string concatenation in consumePhrase in net/mail7.5 HighgoAlpaquitaPanic in Dial and LookupPort when handling NUL byte on Windows in net7.5 HighgoAlpaquitaEscaper bypass leads to XSS in html/template6.1 MediumgoAlpaquitaReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 MediumgoAlpaquitaBypass of meta content URL escaping causes XSS in html/template6.1 MediumgoAlpaquitaQuadratic string concatentation in consumeComment in net/mail7.5 HighgoAlpaquitaInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 MediumgoAlpaquitaInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 MediumgoAlpaquitaInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 HighgoAlpaquitaCrash when handling long CNAME response in net7.5 HighgoAlpaquitaCase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x5098.2 HighgoAlpaquitaJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 MediumgoAlpaquitaUnbounded allocation for old GNU sparse in archive/tar5.5 MediumgoAlpaquitaUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 HighgoAlpaquitaTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 MediumgoAlpaquitaInefficient policy validation in crypto/x5097.5 HighgoAlpaquitaUnexpected work during chain building in crypto/x5097.5 HighgoAlpaquitaMiscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile7.1 HighgoAlpaquitaMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 CriticalgoAlpaquitaCode execution vulnerability in SWIG code generation in cmd/go8.8 High- Show olderLoading…