go1.21 vulnerabilities (openSUSE)
23 vulnerabilities.
-
go1.21openSUSE Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
go1.21openSUSE Denial of service due to improper 100-continue handling in net/http 7.5 High -
go1.21openSUSE Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip 9.8 Critical -
go1.21openSUSE Mishandling of corrupt central directory record in archive/zip 5.5 Medium -
go1.21openSUSE Arbitrary code execution during build on Darwin in cmd/go 6.4 Medium -
go1.21openSUSE HTTP/2 CONTINUATION flood in net/http 7.5 High -
go1.21openSUSE Errors returned from JSON marshaling may break template escaping in html/template 5.4 Medium -
go1.21openSUSE Comments in display names are incorrectly handled in net/mail 7.5 High -
go1.21openSUSE Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http 4.3 Medium -
go1.21openSUSE Memory exhaustion in multipart form parsing in net/textproto and net/http 6.5 Medium -
go1.21openSUSE Verify panics on certificates with an unknown public key algorithm in crypto/x509 5.9 Medium -
go1.21openSUSE Command 'go get' may unexpectedly fallback to insecure git in cmd/go 7.5 High -
go1.21openSUSE Denial of service via chunk extensions in net/http 5.3 Medium -
go1.21openSUSE Incorrect detection of reserved device names on Windows in path/filepath 5.3 Medium -
go1.21openSUSE Insecure parsing of Windows paths with a \??\ prefix in path/filepath 7.5 High -
go1.21openSUSE HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
go1.21openSUSE Arbitrary code execution during build via line directives in cmd/go 8.1 High -
go1.21openSUSE Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
go1.21openSUSE Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High -
go1.21openSUSE Improper handling of special tags within script contexts in html/template 6.1 Medium -
go1.21openSUSE Arbitrary code execution via go.mod toolchain directive in cmd/go 9.8 Critical -
go1.21openSUSE Improper handling of HTML-like comments in script contexts in html/template 6.1 Medium -
go1.21openSUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High