go1.19 vulnerabilities (openSUSE)
26 vulnerabilities.
-
go1.19openSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
go1.19openSUSE Insufficient sanitization of Host header in net/http 6.5 Medium -
go1.19openSUSE Code injection via go command with cgo in cmd/go 9.8 Critical -
go1.19openSUSE Unsafe behavior in setuid/setgid binaries in runtime 7.8 High -
go1.19openSUSE Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go 9.8 Critical -
go1.19openSUSE Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go 9.8 Critical -
go1.19openSUSE Improper handling of empty HTML attributes in html/template 7.3 High -
go1.19openSUSE Improper handling of JavaScript whitespace in html/template 9.8 Critical -
go1.19openSUSE Improper sanitization of CSS values in html/template 7.3 High -
go1.19openSUSE Backticks not treated as string delimiters in html/template 9.8 Critical -
go1.19openSUSE Infinite loop in parsing in go/scanner 7.5 High -
go1.19openSUSE Excessive resource consumption in net/http, net/textproto and mime/multipart 7.5 High -
go1.19openSUSE Excessive memory allocation in net/http and net/textproto 7.5 High -
go1.19openSUSE Incorrect calculation on P256 curves in crypto/internal/nistec 5.3 Medium -
go1.19openSUSE Excessive resource consumption in mime/multipart 7.5 High -
go1.19openSUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
go1.19openSUSE Panic on large handshake records in crypto/tls 7.5 High -
go1.19openSUSE Path traversal on Windows in path/filepath 7.5 High -
go1.19openSUSE Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
go1.19openSUSE Restricted file access on Windows in os and net/http 7.5 High -
go1.19openSUSE Unsanitized NUL in environment variables on Windows in syscall and os/exec 7.5 High -
go1.19openSUSE Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
go1.19openSUSE Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
go1.19openSUSE Unbounded memory consumption when reading headers in archive/tar 7.5 High -
go1.19openSUSE Failure to strip relative path components in net/url 7.5 High -
go1.19openSUSE golang.org/x/net/http2 Denial of Service vulnerability 7.5 High