Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
golang.org/x/net Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net Unknown 5 months ago 3 days ago
golang.org/x/net Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna Unknown 4 months ago 3 days ago
golang.org/x/net HTTP/2 rapid reset can cause excessive work in net/http Unknown 2 years ago 7 days ago
golang.org/x/net Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html Unknown 4 months ago 13 days ago
golang.org/x/net Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html Unknown 4 months ago 13 days ago
golang.org/x/net Invoking duplicate attributes can cause XSS in golang.org/x/net/html Unknown 4 months ago 13 days ago
golang.org/x/net Go Net HTML parser is vulnerable to denial of service Medium Risk 6.5 4 months ago 25 days ago
golang.org/x/net/html golang.org/x/net/html has a Quadratic Parsing Complexity issue Medium Risk 5.3 7 months ago 25 days ago
golang.org/x/net golang.org/x/net vulnerable to Cross-site Scripting Medium Risk 6.0 1 year ago 25 days ago
golang.org/x/net HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net Medium Risk 4.4 1 year ago 25 days ago
golang.org/x/net/html Non-linear parsing of case-insensitive content in golang.org/x/net/html High Risk 8.0 1 year ago 25 days ago
golang.org/x/net net/http, x/net/http2: close connections when receiving too many headers Medium Risk 5.3 2 years ago 25 days ago
golang.org/x/net/http2 net/http, x/net/http2: close connections when receiving too many headers Medium Risk 5.3 2 years ago 25 days ago
golang.org/x/net Improper rendering of text nodes in golang.org/x/net/html Medium Risk 6.1 3 years ago 25 days ago
golang.org/x/net golang.org/x/net/http2 Denial of Service vulnerability High Risk 7.5 4 years ago 25 days ago
golang.org/x/net/http2 golang.org/x/net/http2 Denial of Service vulnerability High Risk 7.5 4 years ago 25 days ago
golang.org/x/net HTTP/2 Stream Cancellation Attack Medium Risk 5.3 2 years ago 25 days ago
golang.org/x/net golang.org/x/net vulnerable to Uncontrolled Resource Consumption High Risk 7.5 3 years ago 25 days ago
golang.org/x/net golang.org/x/net/http2 vulnerable to possible excessive memory growth Medium Risk 5.3 3 years ago 25 days ago
golang.org/x/net/http2 golang.org/x/net/http2 vulnerable to possible excessive memory growth Medium Risk 5.3 3 years ago 25 days ago
golang.org/x/net golang.org/x/net/http vulnerable to ping floods High Risk 7.5 4 years ago 25 days ago
golang.org/x/net HTTP/2 rapid reset can cause excessive work in net/http High Risk 7.5 2 years ago 25 days ago
golang.org/x/net golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion Medium Risk 5.9 4 years ago 25 days ago
golang.org/x/net golang.org/x/net/html Improper Validation of Array Index vulnerability High Risk 7.5 4 years ago 25 days ago
golang.org/x/net golang.org/x/net/html Infinite Loop vulnerability High Risk 7.5 4 years ago 25 days ago
golang.org/x/net golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer High Risk 7.5 4 years ago 25 days ago
golang.org/x/net golang.org/x/net/http vulnerable to a reset flood High Risk 7.5 4 years ago 25 days ago
golang.org/x/net Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage Unknown 2 months ago 1 month ago
golang.org/x/net Request smuggling due to improper request handling in golang.org/x/net/http2/h2c Unknown 3 years ago 1 month ago
golang.org/x/net golang.org/x/net/http2/h2c vulnerable to request smuggling attack High Risk 7.5 3 years ago 1 month ago
golang.org/x/net Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html Unknown 4 months ago 3 months ago
golang.org/x/net Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html Unknown 4 months ago 4 months ago
golang.org/x/net Quadratic parsing complexity in golang.org/x/net/html Unknown 8 months ago 4 months ago
golang.org/x/net Infinite parsing loop in golang.org/x/net Unknown 8 months ago 4 months ago
golang.org/x/net Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net Unknown 7 months ago 4 months ago
golang.org/x/net HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net Unknown 1 year ago 5 months ago
golang.org/x/net Non-linear parsing of case-insensitive content in golang.org/x/net/html Unknown 1 year ago 6 months ago
golang.org/x/net Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net Unknown 1 year ago 8 months ago
golang.org/x/net Excessive memory growth in net/http and golang.org/x/net/http2 Unknown 3 years ago 8 months ago
golang.org/x/net Improper rendering of text nodes in golang.org/x/net/html Unknown 3 years ago 8 months ago
golang.org/x/net HTTP/2 CONTINUATION flood in net/http Unknown 2 years ago 8 months ago
golang.org/x/net Infinite loop when parsing inputs in golang.org/x/net/html Unknown 4 years ago 8 months ago
golang.org/x/net Panic when parsing certain inputs in golang.org/x/net/html Unknown 4 years ago 8 months ago
golang.org/x/net Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net Unknown 3 years ago 8 months ago
golang.org/x/net Panic due to large headers in net/http and golang.org/x/net/http/httpguts Unknown 4 years ago 8 months ago
golang.org/x/net Denial of service in net/http and golang.org/x/net/http2 Unknown 4 years ago 8 months ago
golang.org/x/net Reset flood in net/http and golang.org/x/net/http Unknown 4 years ago 8 months ago
golang.org/x/net golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer High Risk 7.5 4 years ago 2 years ago
golang.org/x/net golang.org/x/net/html NULL Pointer Dereference vulnerability High Risk 7.5 4 years ago 2 years ago
golang.org/x/net golang.org/x/net/html NULL Pointer Dereference vulnerability High Risk 7.5 4 years ago 2 years ago