golang-1.21 vulnerabilities (Ubuntu)
103 vulnerabilities.
golang-1.21UbuntuCheck all ancestor namespace transitions when rendering raw text in html in golang.org/x/net6.1 Mediumgolang-1.21UbuntuAvoid quadratic complexity when coalescing text nodes in html in golang.org/x/net7.5 Highgolang-1.21UbuntuHTTP/2 server crash due to HPACK encoder race in net/http7.5 Highgolang-1.21UbuntuReject malformed ECH outer extension references in crypto/tls7.5 Highgolang-1.21UbuntuRecognize yield as regexp preceder keyword in html/template6.1 Mediumgolang-1.21UbuntuReset context tracking on consecutive template expressions in html/template6.1 Mediumgolang-1.21UbuntuChecksum database bypass for golang.org/toolchain in cmd/go7.8 Highgolang-1.21UbuntuChecksum bypass for golang.org/fips140 in cmd/go7.8 Highgolang-1.21UbuntuMemory limit bypass when parsing MIME headers in net/textproto, mime/multipart7.5 Highgolang-1.21UbuntuHTTP/1 server connection desynchronization after 2xx CONNECT response in net/http7.5 Highgolang-1.21UbuntuExcessive CPU consumption from repeated initial window changes in net/http7.5 Highgolang-1.21UbuntuLack of limit on size of parsed Range headers in net/http7.5 Highgolang-1.21UbuntuDouble flow control refund on HTTP/2 server streams in net/http9.1 Criticalgolang-1.21UbuntuHTTP/2 transport accepts malformed framing-related headers in net/http7.5 Highgolang-1.21UbuntuHTTP/2 server memory exhaustion due to Trailer headers in net/http7.5 Highgolang-1.21UbuntuHTTP/1 client connection desynchronization after CONNECT rejection in net/http7.5 Highgolang-1.21UbuntuRoot.Mkdir(All) can follow junctions out of the root on Windows in os9.8 Criticalgolang-1.21UbuntuPrevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh7.5 Highgolang-1.21UbuntuPrevent DoS on deadlocked established channel in golang.org/x/crypto/ssh7.5 Highgolang-1.21UbuntuFix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog8.4 Highgolang-1.21UbuntuIgnore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb7.5 Highgolang-1.21UbuntuLimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgolang-1.21UbuntuAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgolang-1.21UbuntuAdd recursion depth guard during decode in encoding/xml7.5 Highgolang-1.21UbuntuFix Javascript regexp context tracking in html/template6.1 Mediumgolang-1.21UbuntuApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgolang-1.21UbuntuEnforce maximum recursion depth in encoding/asn17.5 Highgolang-1.21UbuntuInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 Mediumgolang-1.21UbuntuRoot escape via symlink plus trailing slash in os7.8 Highgolang-1.21UbuntuMalicious module proxy can bypass checksum database in cmd/go7.5 Highgolang-1.21UbuntuQuadratic string concatenation in consumePhrase in net/mail7.5 Highgolang-1.21UbuntuEscaper bypass leads to XSS in html/template6.1 Mediumgolang-1.21UbuntuReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 Mediumgolang-1.21UbuntuBypass of meta content URL escaping causes XSS in html/template6.1 Mediumgolang-1.21UbuntuQuadratic string concatentation in consumeComment in net/mail7.5 Highgolang-1.21UbuntuInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 Mediumgolang-1.21UbuntuInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 Mediumgolang-1.21UbuntuInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highgolang-1.21UbuntuCrash when handling long CNAME response in net7.5 Highgolang-1.21UbuntuCase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x5098.2 Highgolang-1.21UbuntuJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 Mediumgolang-1.21UbuntuUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumgolang-1.21UbuntuUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgolang-1.21UbuntuTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumgolang-1.21UbuntuInefficient policy validation in crypto/x5097.5 Highgolang-1.21UbuntuUnexpected work during chain building in crypto/x5097.5 Highgolang-1.21UbuntuMiscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile7.1 Highgolang-1.21UbuntuMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 Criticalgolang-1.21UbuntuCode execution vulnerability in SWIG code generation in cmd/go8.8 Highgolang-1.21UbuntuPotential code smuggling via doc comments in cmd/cgo8.6 High- Show olderLoading…