go1.19 vulnerabilities (SUSE)
26 vulnerabilities.
-
go1.19SUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
go1.19SUSE Insufficient sanitization of Host header in net/http 6.5 Medium -
go1.19SUSE Code injection via go command with cgo in cmd/go 9.8 Critical -
go1.19SUSE Unsafe behavior in setuid/setgid binaries in runtime 7.8 High -
go1.19SUSE Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go 9.8 Critical -
go1.19SUSE Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go 9.8 Critical -
go1.19SUSE Improper handling of empty HTML attributes in html/template 7.3 High -
go1.19SUSE Improper handling of JavaScript whitespace in html/template 9.8 Critical -
go1.19SUSE Improper sanitization of CSS values in html/template 7.3 High -
go1.19SUSE Backticks not treated as string delimiters in html/template 9.8 Critical -
go1.19SUSE Infinite loop in parsing in go/scanner 7.5 High -
go1.19SUSE Excessive resource consumption in net/http, net/textproto and mime/multipart 7.5 High -
go1.19SUSE Excessive memory allocation in net/http and net/textproto 7.5 High -
go1.19SUSE Incorrect calculation on P256 curves in crypto/internal/nistec 5.3 Medium -
go1.19SUSE Excessive resource consumption in mime/multipart 7.5 High -
go1.19SUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
go1.19SUSE Panic on large handshake records in crypto/tls 7.5 High -
go1.19SUSE Path traversal on Windows in path/filepath 7.5 High -
go1.19SUSE Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
go1.19SUSE Restricted file access on Windows in os and net/http 7.5 High -
go1.19SUSE Unsanitized NUL in environment variables on Windows in syscall and os/exec 7.5 High -
go1.19SUSE Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
go1.19SUSE Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
go1.19SUSE Unbounded memory consumption when reading headers in archive/tar 7.5 High -
go1.19SUSE Failure to strip relative path components in net/url 7.5 High -
go1.19SUSE golang.org/x/net/http2 Denial of Service vulnerability 7.5 High