golang-misc vulnerabilities (TuxCare)
62 vulnerabilities.
golang-miscTuxCareSensitive headers not cleared on cross-origin redirect in net/http6.8 Mediumgolang-miscTuxCareUsage of IPv6 zone IDs can bypass URI name constraints in crypto/x5096.1 Mediumgolang-miscTuxCareSensitive headers incorrectly sent after cross-domain redirect in net/http6.1 Mediumgolang-miscTuxCareGolang-fips: golang fips zeroed buffer6.5 Mediumgolang-miscTuxCareStack exhaustion in Parse in go/build/constraint7.5 Highgolang-miscTuxCareStack exhaustion in Decoder.Decode in encoding/gob7.5 Highgolang-miscTuxCareStack exhaustion in all Parse functions in go/parser4.3 Mediumgolang-miscTuxCareUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalgolang-miscTuxCareMishandling of corrupt central directory record in archive/zip5.5 Mediumgolang-miscTuxCareIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 Mediumgolang-miscTuxCareBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 Highgolang-miscTuxCareInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical