rootio-golang.org/x/net vulnerabilities (Root)
18 vulnerabilities.
-
rootio-golang.org/x/netRoot HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
rootio-golang.org/x/netRoot Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
rootio-golang.org/x/netRoot Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
rootio-golang.org/x/netRoot HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
rootio-golang.org/x/netRoot HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
rootio-golang.org/x/netRoot Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage 7.5 High -
rootio-golang.org/x/netRoot Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
rootio-golang.org/x/netRoot Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
rootio-golang.org/x/netRoot Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
rootio-golang.org/x/netRoot Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
rootio-golang.org/x/netRoot Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
rootio-golang.org/x/netRoot Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
rootio-golang.org/x/netRoot Infinite parsing loop in golang.org/x/net 5.3 Medium -
rootio-golang.org/x/netRoot Quadratic parsing complexity in golang.org/x/net/html 5.3 Medium -
rootio-golang.org/x/netRoot Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium -
rootio-golang.org/x/netRoot HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
rootio-golang.org/x/netRoot Non-linear parsing of case-insensitive content in golang.org/x/net/html 5.3 Medium -
rootio-golang.org/x/netRoot Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical