go vulnerabilities (Alpine)
194 vulnerabilities.
goAlpineImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 HighgoAlpineGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 CriticalgoAlpineIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 HighgoAlpineGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumgoAlpineGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 HighgoAlpineThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumgoAlpineGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighgoAlpineGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumgoAlpineGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 HighgoAlpineGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighgoAlpinegolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 MediumgoAlpineRemote Procedure Call Runtime Remote Code Execution Vulnerability8.8 HighgoAlpinearchive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon...5.5 MediumgoAlpineencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 HighgoAlpineIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumgoAlpineGo before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and...7.5 HighgoAlpineAuthentication Bypass in github.com/russellhaering/gosaml29.8 CriticalgoAlpineThe encoding/xml package in Go (all versions) does not correctly preserve the semantics of...9.8 CriticalgoAlpineGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 HighgoAlpineArbitrary code execution via the go command with cgo in cmd/go7.5 HighgoAlpineArbitrary code execution in go command with cgo in cmd/go and cmd/cgo7.5 HighgoAlpineGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...6.1 MediumgoAlpineWithdrawn Advisory: Infinite loop in xz7.5 HighgoAlpineGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 MediumgoAlpineHelm uses crypto package vulnerable to panic from malformed X.509 certificate7.5 HighgoAlpineGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 HighgoAlpineGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.7.5 HighgoAlpinenet/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading...9.8 CriticalgoAlpineSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 HighgoAlpineSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 HighgoAlpineGo before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which...8.2 HighgoAlpineGo before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get"...7.8 HighgoAlpineInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical