golang vulnerabilities (Bitnami)
199 vulnerabilities.
golangBitnamiStack exhaustion when reading certain archives in compress/gzip7.5 HighgolangBitnamiStack exhaustion in Glob on certain paths in io/fs7.5 HighgolangBitnamiStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighgolangBitnamiStack exhaustion due to deeply nested types in go/parser5.5 MediumgolangBitnamiImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumgolangBitnamiIndefinite hang with large buffers on Windows in crypto/rand7.5 HighgolangBitnamiSession tickets lack random ticket_age_add in crypto/tls3.1 LowgolangBitnamiEmpty Cmd.Path can trigger unintended binary in os/exec on Windows7.8 HighgolangBitnamiPath traversal via Clean on Windows in path/filepath7.5 HighgolangBitnamigolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 MediumgolangBitnamiThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighgolangBitnamiCertificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when...7.5 HighgolangBitnamiencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighgolangBitnamiregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighgolangBitnamicmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighgolangBitnamiRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighgolangBitnamiCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticalgolangBitnamiGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 MediumgolangBitnamigolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighgolangBitnamiGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 HighgolangBitnamiImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...7.5 HighgolangBitnamiGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...9.8 CriticalgolangBitnamiIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 HighgolangBitnamiGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumgolangBitnamiGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 HighgolangBitnamiThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumgolangBitnamiGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighgolangBitnamiGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumgolangBitnamiGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 HighgolangBitnamiGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighgolangBitnamigolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 MediumgolangBitnamigolang.org/x/net/html Infinite Loop vulnerability7.5 HighgolangBitnamiarchive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon...5.5 MediumgolangBitnamiencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 HighgolangBitnamiIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumgolangBitnamiGo before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and...7.5 HighgolangBitnamiIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 HighgolangBitnamiAuthentication Bypass in github.com/russellhaering/gosaml29.8 CriticalgolangBitnamiThe encoding/xml package in Go (all versions) does not correctly preserve the semantics of...9.8 CriticalgolangBitnamiThe encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the...9.8 CriticalgolangBitnamiGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 HighgolangBitnamiArbitrary code execution via the go command with cgo in cmd/go7.5 HighgolangBitnamiArbitrary code execution in go command with cgo in cmd/go and cmd/cgo7.5 HighgolangBitnamiGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...6.1 MediumgolangBitnamiWithdrawn Advisory: Infinite loop in xz7.5 HighgolangBitnamiIn Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the...5.3 MediumgolangBitnamiGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 MediumgolangBitnamiHelm uses crypto package vulnerable to panic from malformed X.509 certificate7.5 HighgolangBitnamiA spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic...8.1 High