go1.15 vulnerabilities (SUSE)
14 vulnerabilities.
-
go1.15SUSE Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http... 5.9 Medium -
go1.15SUSE The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key... 6.5 Medium -
go1.15SUSE Go before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2). 7.5 High -
go1.15SUSE Go before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary. 5.3 Medium -
go1.15SUSE Go before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2). 7.5 High -
go1.15SUSE Go before 1.15.12 and 1.16.x before 1.16.5 allows injection. 7.3 High -
go1.15SUSE golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion 5.9 Medium -
go1.15SUSE encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom... 7.5 High -
go1.15SUSE In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect... 6.5 Medium -
go1.15SUSE Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and... 7.5 High -
go1.15SUSE Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. 7.5 High -
go1.15SUSE Arbitrary code execution via the go command with cgo in cmd/go 7.5 High -
go1.15SUSE Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo 7.5 High -
go1.15SUSE Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI... 6.1 Medium