golang-race vulnerabilities (TuxCare)
48 vulnerabilities.
golang-raceTuxCareLimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgolang-raceTuxCareAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgolang-raceTuxCareAdd recursion depth guard during decode in encoding/xml7.5 Highgolang-raceTuxCareFix Javascript regexp context tracking in html/template6.1 Mediumgolang-raceTuxCareApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgolang-raceTuxCareEnforce maximum recursion depth in encoding/asn17.5 Highgolang-raceTuxCaregolang: Fix of 5 CVEsNo scoregolang-raceTuxCareInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 Mediumgolang-raceTuxCareRoot escape via symlink plus trailing slash in os7.8 Highgolang-raceTuxCareArbitrary inputs are included in errors without any escaping in net/textproto5.3 Mediumgolang-raceTuxCareQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highgolang-raceTuxCareInefficient candidate hostname parsing in crypto/x5096.5 Mediumgolang-raceTuxCareMalicious module proxy can bypass checksum database in cmd/go7.5 Highgolang-raceTuxCareQuadratic string concatenation in consumePhrase in net/mail7.5 Highgolang-raceTuxCareEscaper bypass leads to XSS in html/template6.1 Mediumgolang-raceTuxCareReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 Mediumgolang-raceTuxCareBypass of meta content URL escaping causes XSS in html/template6.1 Mediumgolang-raceTuxCareQuadratic string concatentation in consumeComment in net/mail7.5 Highgolang-raceTuxCareInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 Mediumgolang-raceTuxCareInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 Mediumgolang-raceTuxCareInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highgolang-raceTuxCareCrash when handling long CNAME response in net7.5 Highgolang-raceTuxCareJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 Mediumgolang-raceTuxCareUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumgolang-raceTuxCareUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgolang-raceTuxCareTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumgolang-raceTuxCareMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 Criticalgolang-raceTuxCareURLs in meta content attribute actions are not escaped in html/template6.1 Mediumgolang-raceTuxCareFileInfo can escape from a Root in os2.5 Lowgolang-raceTuxCareIncorrect parsing of IPv6 host literals in net/url7.5 Highgolang-raceTuxCarePotential code smuggling via doc comments in cmd/cgo8.6 Highgolang-raceTuxCareUnexpected session resumption in crypto/tls10.0 Criticalgolang-raceTuxCareArbitrary file write using cgo pkg-config directive in cmd/go7.8 Highgolang-raceTuxCareUnexpected code execution when invoking toolchain in cmd/go7.0 Highgolang-raceTuxCareHandshake messages may be processed at the incorrect encryption level in crypto/tls5.3 Mediumgolang-raceTuxCareExcessive CPU consumption when building archive index in archive/zip6.5 Mediumgolang-raceTuxCareMemory exhaustion in query parameter parsing in net/url7.5 Highgolang-raceTuxCareImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 Mediumgolang-raceTuxCareExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgolang-raceTuxCareUsage of IPv6 zone IDs can bypass URI name constraints in crypto/x5096.1 Mediumgolang-raceTuxCareSensitive headers incorrectly sent after cross-domain redirect in net/http6.1 Mediumgolang-raceTuxCareGolang-fips: golang fips zeroed buffer6.5 Mediumgolang-raceTuxCareStack exhaustion in Decoder.Decode in encoding/gob7.5 Highgolang-raceTuxCareUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalgolang-raceTuxCareMishandling of corrupt central directory record in archive/zip5.5 Mediumgolang-raceTuxCareIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 Mediumgolang-raceTuxCareBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 Highgolang-raceTuxCareInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical