golang vulnerabilities (openEuler)
124 vulnerabilities.
golangopenEulerErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumgolangopenEulerComments in display names are incorrectly handled in net/mail7.5 HighgolangopenEulerIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 MediumgolangopenEulerMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumgolangopenEulerVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumgolangopenEulerCommand 'go get' may unexpectedly fallback to insecure git in cmd/go7.5 HighgolangopenEulerDenial of service via chunk extensions in net/http5.3 MediumgolangopenEulerHTTP/2 rapid reset can cause excessive work in net/http7.5 HighgolangopenEulerArbitrary code execution during build via line directives in cmd/go8.1 HighgolangopenEulerImproper handling of special tags within script contexts in html/template6.1 MediumgolangopenEulerImproper handling of HTML-like comments in script contexts in html/template6.1 MediumgolangopenEulerLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumgolangopenEulerInsufficient sanitization of Host header in net/http6.5 MediumgolangopenEulerCode injection via go command with cgo in cmd/go9.8 CriticalgolangopenEulerUnsafe behavior in setuid/setgid binaries in runtime7.8 HighgolangopenEulerImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go9.8 CriticalgolangopenEulerImproper handling of non-optional LDFLAGS in go command with cgo in cmd/go9.8 CriticalgolangopenEulerImproper handling of empty HTML attributes in html/template7.3 HighgolangopenEulerImproper handling of JavaScript whitespace in html/template9.8 CriticalgolangopenEulerImproper sanitization of CSS values in html/template7.3 HighgolangopenEulerBackticks not treated as string delimiters in html/template9.8 CriticalgolangopenEulerInfinite loop in parsing in go/scanner7.5 HighgolangopenEulerExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighgolangopenEulerExcessive memory allocation in net/http and net/textproto7.5 HighgolangopenEulerExcessive resource consumption in mime/multipart7.5 HighgolangopenEulerDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighgolangopenEulerPanic on large handshake records in crypto/tls7.5 HighgolangopenEulerExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumgolangopenEulerUnsanitized NUL in environment variables on Windows in syscall and os/exec7.5 HighgolangopenEulerIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighgolangopenEulerMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighgolangopenEulerUnbounded memory consumption when reading headers in archive/tar7.5 HighgolangopenEulergolang.org/x/net/http2 Denial of Service vulnerability7.5 HighgolangopenEulerPanic when decoding Float and Rat types in math/big7.5 HighgolangopenEulerExposure of client IP addresses in net/http6.5 MediumgolangopenEulerStack exhaustion when decoding certain messages in encoding/gob7.5 HighgolangopenEulerStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighgolangopenEulerStack exhaustion on crafted paths in path/filepath7.5 HighgolangopenEulerStack exhaustion when reading certain archives in compress/gzip7.5 HighgolangopenEulerStack exhaustion in Glob on certain paths in io/fs7.5 HighgolangopenEulerStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighgolangopenEulerStack exhaustion due to deeply nested types in go/parser5.5 MediumgolangopenEulerImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumgolangopenEulerIndefinite hang with large buffers on Windows in crypto/rand7.5 HighgolangopenEulerSession tickets lack random ticket_age_add in crypto/tls3.1 LowgolangopenEulerPath traversal via Clean on Windows in path/filepath7.5 HighgolangopenEulergolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 MediumgolangopenEulerThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighgolangopenEulerencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighgolangopenEulerregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 High- Show moreLoading…