golang-tests vulnerabilities (TuxCare)
62 vulnerabilities.
golang-testsTuxCareExcessive CPU consumption from repeated initial window changes in net/http7.5 Highgolang-testsTuxCareLack of limit on size of parsed Range headers in net/http7.5 Highgolang-testsTuxCareLimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgolang-testsTuxCareAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgolang-testsTuxCareAdd recursion depth guard during decode in encoding/xml7.5 Highgolang-testsTuxCareFix Javascript regexp context tracking in html/template6.1 Mediumgolang-testsTuxCareApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgolang-testsTuxCareEnforce maximum recursion depth in encoding/asn17.5 Highgolang-testsTuxCaregolang: Fix of 5 CVEsNo scoregolang-testsTuxCareInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 Mediumgolang-testsTuxCareRoot escape via symlink plus trailing slash in os7.8 Highgolang-testsTuxCareArbitrary inputs are included in errors without any escaping in net/textproto5.3 Mediumgolang-testsTuxCareQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highgolang-testsTuxCareInefficient candidate hostname parsing in crypto/x5096.5 Mediumgolang-testsTuxCareMalicious module proxy can bypass checksum database in cmd/go7.5 Highgolang-testsTuxCareQuadratic string concatenation in consumePhrase in net/mail7.5 Highgolang-testsTuxCareEscaper bypass leads to XSS in html/template6.1 Mediumgolang-testsTuxCareReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 Mediumgolang-testsTuxCareBypass of meta content URL escaping causes XSS in html/template6.1 Mediumgolang-testsTuxCareQuadratic string concatentation in consumeComment in net/mail7.5 Highgolang-testsTuxCareInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 Mediumgolang-testsTuxCareInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 Mediumgolang-testsTuxCareInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highgolang-testsTuxCareCrash when handling long CNAME response in net7.5 Highgolang-testsTuxCareJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 Mediumgolang-testsTuxCareUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumgolang-testsTuxCareUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgolang-testsTuxCareTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumgolang-testsTuxCareUnexpected work during chain building in crypto/x5097.5 Highgolang-testsTuxCareMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 Criticalgolang-testsTuxCareURLs in meta content attribute actions are not escaped in html/template6.1 Mediumgolang-testsTuxCareFileInfo can escape from a Root in os2.5 Lowgolang-testsTuxCareIncorrect parsing of IPv6 host literals in net/url7.5 Highgolang-testsTuxCarePotential code smuggling via doc comments in cmd/cgo8.6 Highgolang-testsTuxCareUnexpected session resumption in crypto/tls10.0 Criticalgolang-testsTuxCareArbitrary file write using cgo pkg-config directive in cmd/go7.8 Highgolang-testsTuxCareUnexpected code execution when invoking toolchain in cmd/go7.0 Highgolang-testsTuxCareHandshake messages may be processed at the incorrect encryption level in crypto/tls5.3 Mediumgolang-testsTuxCareExcessive CPU consumption when building archive index in archive/zip6.5 Mediumgolang-testsTuxCareMemory exhaustion in query parameter parsing in net/url7.5 Highgolang-testsTuxCareImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 Mediumgolang-testsTuxCareExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgolang-testsTuxCareQuadratic complexity when parsing some invalid inputs in encoding/pem7.5 Highgolang-testsTuxCarePanic when validating certificates with DSA public keys in crypto/x5097.5 Highgolang-testsTuxCareQuadratic complexity when checking name constraints in crypto/x5097.5 Highgolang-testsTuxCareUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Mediumgolang-testsTuxCareIncorrect results returned from Rows.Scan in database/sql7.0 Highgolang-testsTuxCareUnexpected paths returned from LookPath in os/exec6.5 Mediumgolang-testsTuxCareUnexpected command execution in untrusted VCS repositories in cmd/go8.6 Highgolang-testsTuxCareUpdate of golangNo score- Show olderLoading…