go1.20 vulnerabilities (SUSE)
27 vulnerabilities.
-
go1.20SUSE Command 'go get' may unexpectedly fallback to insecure git in cmd/go 7.5 High -
go1.20SUSE Denial of service via chunk extensions in net/http 5.3 Medium -
go1.20SUSE Incorrect detection of reserved device names on Windows in path/filepath 5.3 Medium -
go1.20SUSE Insecure parsing of Windows paths with a \??\ prefix in path/filepath 7.5 High -
go1.20SUSE HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
go1.20SUSE Arbitrary code execution during build via line directives in cmd/go 8.1 High -
go1.20SUSE Improper handling of special tags within script contexts in html/template 6.1 Medium -
go1.20SUSE Improper handling of HTML-like comments in script contexts in html/template 6.1 Medium -
go1.20SUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
go1.20SUSE Insufficient sanitization of Host header in net/http 6.5 Medium -
go1.20SUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
go1.20SUSE Code injection via go command with cgo in cmd/go 9.8 Critical -
go1.20SUSE Unsafe behavior in setuid/setgid binaries in runtime 7.8 High -
go1.20SUSE Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go 9.8 Critical -
go1.20SUSE Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go 9.8 Critical -
go1.20SUSE Improper handling of empty HTML attributes in html/template 7.3 High -
go1.20SUSE Improper handling of JavaScript whitespace in html/template 9.8 Critical -
go1.20SUSE Improper sanitization of CSS values in html/template 7.3 High -
go1.20SUSE Backticks not treated as string delimiters in html/template 9.8 Critical -
go1.20SUSE Infinite loop in parsing in go/scanner 7.5 High -
go1.20SUSE Excessive resource consumption in net/http, net/textproto and mime/multipart 7.5 High -
go1.20SUSE Excessive memory allocation in net/http and net/textproto 7.5 High -
go1.20SUSE Incorrect calculation on P256 curves in crypto/internal/nistec 5.3 Medium -
go1.20SUSE Excessive resource consumption in mime/multipart 7.5 High -
go1.20SUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
go1.20SUSE Panic on large handshake records in crypto/tls 7.5 High -
go1.20SUSE Path traversal on Windows in path/filepath 7.5 High