Vulnerability GO-2026-6609

Unknown

8 hours ago

Lack of limit on size of parsed Range headers in net/http

<1.26.9

Summary

Lack of limit on size of parsed Range headers in net/http

Details

When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Unknown

8 hours ago

Reset context tracking on consecutive template expressions in html/template

<1.26.9 GO-2026-6599

Unknown

8 hours ago

Recognize yield as regexp preceder keyword in html/template

<1.26.9 GO-2026-6600

Unknown

8 hours ago

HTTP/2 server memory exhaustion due to Trailer headers in net/http

<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6603

Unknown

8 hours ago

Root.Mkdir(All) can follow junctions out of the root on Windows in os

<1.26.9 GO-2026-6604

Unknown

8 hours ago

HTTP/1 client connection desynchronization after CONNECT rejection in net/http

<1.26.9 GO-2026-6605

View all vulnerabilities for these packages

Impacted packages

stdlib

Timeline

Published

8 hours ago

Last Modified

8 hours ago