golang vulnerabilities (Bitnami)
199 vulnerabilities.
golangBitnamiErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumgolangBitnamiComments in display names are incorrectly handled in net/mail7.5 HighgolangBitnamiIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 MediumgolangBitnamiMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumgolangBitnamiVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumgolangBitnamiCommand 'go get' may unexpectedly fallback to insecure git in cmd/go7.5 HighgolangBitnamiDenial of service via chunk extensions in net/http5.3 MediumgolangBitnamiBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighgolangBitnamiIncorrect detection of reserved device names on Windows in path/filepath5.3 MediumgolangBitnamiInsecure parsing of Windows paths with a \??\ prefix in path/filepath7.5 HighgolangBitnamiTraefik - Denial of Service via HTTP/2 Request Handling8.7 HighgolangBitnamiHTTP/2 rapid reset can cause excessive work in net/http7.5 HighgolangBitnamiArbitrary code execution during build via line directives in cmd/go8.1 HighgolangBitnamiPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighgolangBitnamiMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighgolangBitnamiImproper handling of special tags within script contexts in html/template6.1 MediumgolangBitnamiArbitrary code execution via go.mod toolchain directive in cmd/go9.8 CriticalgolangBitnamiImproper handling of HTML-like comments in script contexts in html/template6.1 MediumgolangBitnamiLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumgolangBitnamiInsufficient sanitization of Host header in net/http6.5 MediumgolangBitnamiEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighgolangBitnamiCode injection via go command with cgo in cmd/go9.8 CriticalgolangBitnamiUnsafe behavior in setuid/setgid binaries in runtime7.8 HighgolangBitnamiImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go9.8 CriticalgolangBitnamiImproper handling of non-optional LDFLAGS in go command with cgo in cmd/go9.8 CriticalgolangBitnamiImproper handling of empty HTML attributes in html/template7.3 HighgolangBitnamiImproper handling of JavaScript whitespace in html/template9.8 CriticalgolangBitnamiImproper sanitization of CSS values in html/template7.3 HighgolangBitnamiBackticks not treated as string delimiters in html/template9.8 CriticalgolangBitnamiInfinite loop in parsing in go/scanner7.5 HighgolangBitnamiExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighgolangBitnamiExcessive memory allocation in net/http and net/textproto7.5 HighgolangBitnamiIncorrect calculation on P256 curves in crypto/internal/nistec5.3 MediumgolangBitnamiExcessive resource consumption in mime/multipart7.5 HighgolangBitnamiDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighgolangBitnamiPanic on large handshake records in crypto/tls7.5 HighgolangBitnamiPath traversal on Windows in path/filepath7.5 HighgolangBitnamiExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumgolangBitnamiRestricted file access on Windows in os and net/http7.5 HighgolangBitnamiUnsanitized NUL in environment variables on Windows in syscall and os/exec7.5 HighgolangBitnamiIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighgolangBitnamiMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighgolangBitnamiUnbounded memory consumption when reading headers in archive/tar7.5 HighgolangBitnamiFailure to strip relative path components in net/url7.5 HighgolangBitnamigolang.org/x/net/http2 Denial of Service vulnerability7.5 HighgolangBitnamiPanic when decoding Float and Rat types in math/big7.5 HighgolangBitnamiExposure of client IP addresses in net/http6.5 MediumgolangBitnamiStack exhaustion when decoding certain messages in encoding/gob7.5 HighgolangBitnamiStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighgolangBitnamiStack exhaustion on crafted paths in path/filepath7.5 High- Show moreLoading…