go vulnerabilities (BellSoft Hardened Containers)
111 vulnerabilities.
goBellSoft Hardened ContainersURLs in meta content attribute actions are not escaped in html/template6.1 MediumgoBellSoft Hardened ContainersFileInfo can escape from a Root in os2.5 LowgoBellSoft Hardened ContainersIncorrect parsing of IPv6 host literals in net/url7.5 HighgoBellSoft Hardened ContainersPanic in name constraint checking for malformed certificates in crypto/x5095.9 MediumgoBellSoft Hardened ContainersIncorrect enforcement of email constraints in crypto/x5097.5 HighgoBellSoft Hardened ContainersPotential code smuggling via doc comments in cmd/cgo8.6 HighgoBellSoft Hardened ContainersUnexpected session resumption in crypto/tls10.0 CriticalgoBellSoft Hardened ContainersArbitrary file write using cgo pkg-config directive in cmd/go7.8 HighgoBellSoft Hardened ContainersUnexpected code execution when invoking toolchain in cmd/go7.0 HighgoBellSoft Hardened ContainersHandshake messages may be processed at the incorrect encryption level in crypto/tls5.3 MediumgoBellSoft Hardened ContainersExcessive CPU consumption when building archive index in archive/zip6.5 MediumgoBellSoft Hardened ContainersMemory exhaustion in query parameter parsing in net/url7.5 HighgoBellSoft Hardened ContainersImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 MediumgoBellSoft Hardened ContainersExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 HighgoBellSoft Hardened ContainersExcessive CPU consumption in ParseAddress in net/mail7.5 HighgoBellSoft Hardened ContainersExcessive CPU consumption in Reader.ReadResponse in net/textproto5.3 MediumgoBellSoft Hardened ContainersQuadratic complexity when parsing some invalid inputs in encoding/pem7.5 HighgoBellSoft Hardened ContainersALPN negotiation error contains attacker controlled information in crypto/tls5.3 MediumgoBellSoft Hardened ContainersPanic when validating certificates with DSA public keys in crypto/x5097.5 HighgoBellSoft Hardened ContainersQuadratic complexity when checking name constraints in crypto/x5097.5 HighgoBellSoft Hardened ContainersLack of limit when parsing cookies can cause memory exhaustion in net/http5.3 MediumgoBellSoft Hardened ContainersParsing DER payload can cause memory exhaustion in encoding/asn15.3 MediumgoBellSoft Hardened ContainersUnbounded allocation when parsing GNU sparse map in archive/tar4.3 MediumgoBellSoft Hardened ContainersInsufficient validation of bracketed IPv6 hostnames in net/url5.3 MediumgoBellSoft Hardened ContainersCrossOriginProtection insecure bypass patterns not limited to exact matches in net/http5.4 MediumgoBellSoft Hardened ContainersIncorrect results returned from Rows.Scan in database/sql7.0 HighgoBellSoft Hardened ContainersUnexpected paths returned from LookPath in os/exec6.5 MediumgoBellSoft Hardened ContainersUnexpected command execution in untrusted VCS repositories in cmd/go8.6 HighgoBellSoft Hardened ContainersSensitive headers not cleared on cross-origin redirect in net/http6.8 MediumgoBellSoft Hardened ContainersUsage of ExtKeyUsageAny disables policy validation in crypto/x5097.5 HighgoBellSoft Hardened ContainersInconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall5.5 MediumgoBellSoft Hardened ContainersImproper access to parent directory of root in os3.8 LowgoBellSoft Hardened ContainersRequest smuggling due to acceptance of invalid chunked data in net/http9.1 CriticalgoBellSoft Hardened ContainersHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 MediumgoBellSoft Hardened ContainersUsage of IPv6 zone IDs can bypass URI name constraints in crypto/x5096.1 MediumgoBellSoft Hardened ContainersSensitive headers incorrectly sent after cross-domain redirect in net/http6.1 MediumgoBellSoft Hardened ContainersStack exhaustion in Parse in go/build/constraint7.5 HighgoBellSoft Hardened ContainersStack exhaustion in Decoder.Decode in encoding/gob7.5 HighgoBellSoft Hardened ContainersStack exhaustion in all Parse functions in go/parser4.3 MediumgoBellSoft Hardened ContainersDenial of service due to improper 100-continue handling in net/http7.5 HighgoBellSoft Hardened ContainersUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 CriticalgoBellSoft Hardened ContainersMishandling of corrupt central directory record in archive/zip5.5 MediumgoBellSoft Hardened ContainersMalformed DNS message can cause infinite loop in net5.9 MediumgoBellSoft Hardened ContainersHTTP/2 CONTINUATION flood in net/http7.5 HighgoBellSoft Hardened ContainersErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumgoBellSoft Hardened ContainersComments in display names are incorrectly handled in net/mail7.5 HighgoBellSoft Hardened ContainersIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 MediumgoBellSoft Hardened ContainersMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumgoBellSoft Hardened ContainersVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumgoBellSoft Hardened ContainersCommand 'go get' may unexpectedly fallback to insecure git in cmd/go7.5 High- Show moreLoading…