go1.20 vulnerabilities (openSUSE)
27 vulnerabilities.
-
go1.20openSUSE Command 'go get' may unexpectedly fallback to insecure git in cmd/go 7.5 High -
go1.20openSUSE Denial of service via chunk extensions in net/http 5.3 Medium -
go1.20openSUSE Incorrect detection of reserved device names on Windows in path/filepath 5.3 Medium -
go1.20openSUSE Insecure parsing of Windows paths with a \??\ prefix in path/filepath 7.5 High -
go1.20openSUSE HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
go1.20openSUSE Arbitrary code execution during build via line directives in cmd/go 8.1 High -
go1.20openSUSE Improper handling of special tags within script contexts in html/template 6.1 Medium -
go1.20openSUSE Improper handling of HTML-like comments in script contexts in html/template 6.1 Medium -
go1.20openSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
go1.20openSUSE Insufficient sanitization of Host header in net/http 6.5 Medium -
go1.20openSUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
go1.20openSUSE Code injection via go command with cgo in cmd/go 9.8 Critical -
go1.20openSUSE Unsafe behavior in setuid/setgid binaries in runtime 7.8 High -
go1.20openSUSE Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go 9.8 Critical -
go1.20openSUSE Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go 9.8 Critical -
go1.20openSUSE Improper handling of empty HTML attributes in html/template 7.3 High -
go1.20openSUSE Improper handling of JavaScript whitespace in html/template 9.8 Critical -
go1.20openSUSE Improper sanitization of CSS values in html/template 7.3 High -
go1.20openSUSE Backticks not treated as string delimiters in html/template 9.8 Critical -
go1.20openSUSE Infinite loop in parsing in go/scanner 7.5 High -
go1.20openSUSE Excessive resource consumption in net/http, net/textproto and mime/multipart 7.5 High -
go1.20openSUSE Excessive memory allocation in net/http and net/textproto 7.5 High -
go1.20openSUSE Incorrect calculation on P256 curves in crypto/internal/nistec 5.3 Medium -
go1.20openSUSE Excessive resource consumption in mime/multipart 7.5 High -
go1.20openSUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
go1.20openSUSE Panic on large handshake records in crypto/tls 7.5 High -
go1.20openSUSE Path traversal on Windows in path/filepath 7.5 High