golang-docs vulnerabilities (TuxCare)
62 vulnerabilities.
golang-docsTuxCareExcessive CPU consumption from repeated initial window changes in net/http7.5 Highgolang-docsTuxCareLack of limit on size of parsed Range headers in net/http7.5 Highgolang-docsTuxCareLimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgolang-docsTuxCareAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgolang-docsTuxCareAdd recursion depth guard during decode in encoding/xml7.5 Highgolang-docsTuxCareFix Javascript regexp context tracking in html/template6.1 Mediumgolang-docsTuxCareApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgolang-docsTuxCareEnforce maximum recursion depth in encoding/asn17.5 Highgolang-docsTuxCaregolang: Fix of 5 CVEsNo scoregolang-docsTuxCareInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 Mediumgolang-docsTuxCareRoot escape via symlink plus trailing slash in os7.8 Highgolang-docsTuxCareArbitrary inputs are included in errors without any escaping in net/textproto5.3 Mediumgolang-docsTuxCareQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highgolang-docsTuxCareInefficient candidate hostname parsing in crypto/x5096.5 Mediumgolang-docsTuxCareMalicious module proxy can bypass checksum database in cmd/go7.5 Highgolang-docsTuxCareQuadratic string concatenation in consumePhrase in net/mail7.5 Highgolang-docsTuxCareEscaper bypass leads to XSS in html/template6.1 Mediumgolang-docsTuxCareReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 Mediumgolang-docsTuxCareBypass of meta content URL escaping causes XSS in html/template6.1 Mediumgolang-docsTuxCareQuadratic string concatentation in consumeComment in net/mail7.5 Highgolang-docsTuxCareInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 Mediumgolang-docsTuxCareInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 Mediumgolang-docsTuxCareInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highgolang-docsTuxCareCrash when handling long CNAME response in net7.5 Highgolang-docsTuxCareJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 Mediumgolang-docsTuxCareUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumgolang-docsTuxCareUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgolang-docsTuxCareTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumgolang-docsTuxCareUnexpected work during chain building in crypto/x5097.5 Highgolang-docsTuxCareMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 Criticalgolang-docsTuxCareURLs in meta content attribute actions are not escaped in html/template6.1 Mediumgolang-docsTuxCareFileInfo can escape from a Root in os2.5 Lowgolang-docsTuxCareIncorrect parsing of IPv6 host literals in net/url7.5 Highgolang-docsTuxCarePotential code smuggling via doc comments in cmd/cgo8.6 Highgolang-docsTuxCareUnexpected session resumption in crypto/tls10.0 Criticalgolang-docsTuxCareArbitrary file write using cgo pkg-config directive in cmd/go7.8 Highgolang-docsTuxCareUnexpected code execution when invoking toolchain in cmd/go7.0 Highgolang-docsTuxCareHandshake messages may be processed at the incorrect encryption level in crypto/tls5.3 Mediumgolang-docsTuxCareExcessive CPU consumption when building archive index in archive/zip6.5 Mediumgolang-docsTuxCareMemory exhaustion in query parameter parsing in net/url7.5 Highgolang-docsTuxCareImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 Mediumgolang-docsTuxCareExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgolang-docsTuxCareQuadratic complexity when parsing some invalid inputs in encoding/pem7.5 Highgolang-docsTuxCarePanic when validating certificates with DSA public keys in crypto/x5097.5 Highgolang-docsTuxCareQuadratic complexity when checking name constraints in crypto/x5097.5 Highgolang-docsTuxCareUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Mediumgolang-docsTuxCareIncorrect results returned from Rows.Scan in database/sql7.0 Highgolang-docsTuxCareUnexpected paths returned from LookPath in os/exec6.5 Mediumgolang-docsTuxCareUnexpected command execution in untrusted VCS repositories in cmd/go8.6 Highgolang-docsTuxCareUpdate of golangNo score- Show olderLoading…