Vulnerabilities
Last updated 9 minutes ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
stdlib
|
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | Unknown | 1 year ago | 1 hour ago |
|
stdlib
|
Add recursion depth guard during decode in encoding/xml | Unknown | 3 months ago | 1 hour ago |
|
stdlib
|
Fix Javascript regexp context tracking in html/template | Unknown | 3 months ago | 1 hour ago |
|
stdlib
|
Crash when handling long CNAME response in net | Unknown | 6 months ago | 1 hour ago |
|
stdlib
|
Limit handshake messages we are willing to accept post-handshake in crypto/tls | Unknown | 3 months ago | 1 hour ago |
|
stdlib
|
Reset context tracking on consecutive template expressions in html/template | Unknown | 1 month ago | 1 hour ago |
|
stdlib
|
Recognize yield as regexp preceder keyword in html/template | Unknown | 1 month ago | 1 hour ago |
|
stdlib
|
Incorrect enforcement of email constraints in crypto/x509 | Unknown | 8 months ago | 1 hour ago |
|
stdlib
|
Reject malformed ECH outer extension references in crypto/tls | Unknown | 1 month ago | 1 hour ago |
|
stdlib
|
Double flow control refund on HTTP/2 server streams in net/http | Unknown | 1 month ago | 1 hour ago |
|
stdlib
|
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net | Unknown | 6 months ago | 1 hour ago |
|
stdlib
|
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http | Unknown | 3 months ago | 1 hour ago |
|
stdlib
|
HTTP/2 transport accepts malformed framing-related headers in net/http | Unknown | 1 month ago | 1 hour ago |
|
stdlib
|
Distrust compromised intermediate certificates in crypto/x509 | Unknown | 23 days ago | 1 hour ago |
|
stdlib
|
HTTP/1 server crash due to MaxBytesReader header race in net/http | Unknown | 2 days ago | 2 days ago |
|
stdlib
|
Quadratic complexity in WordDecoder.DecodeHeader in mime | Unknown | 5 months ago | 24 days ago |
|
stdlib
|
Enforce maximum recursion depth in encoding/asn1 | Unknown | 3 months ago | 24 days ago |
|
stdlib
|
Avoid quadratic complexity in resolvePath in net/url | Unknown | 3 months ago | 24 days ago |
|
stdlib
|
Incorrect parsing of IPv6 host literals in net/url | Unknown | 8 months ago | 28 days ago |
|
stdlib
|
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | Unknown | 5 months ago | 28 days ago |
|
stdlib
|
HTTP/1 client connection desynchronization after CONNECT rejection in net/http | Unknown | 1 month ago | 28 days ago |
|
stdlib
|
HTTP/2 server crash due to HPACK encoder race in net/http | Unknown | 1 month ago | 28 days ago |
|
stdlib
|
Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart | Unknown | 1 month ago | 28 days ago |
|
stdlib
|
Lack of limit on size of parsed Range headers in net/http | Unknown | 1 month ago | 28 days ago |
|
stdlib
|
HTTP/2 server memory exhaustion due to Trailer headers in net/http | Unknown | 1 month ago | 28 days ago |
|
stdlib
|
HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http | Unknown | 1 month ago | 28 days ago |
|
stdlib
|
Root.Mkdir(All) can follow junctions out of the root on Windows in os | Unknown | 1 month ago | 28 days ago |
|
stdlib
|
Excessive CPU consumption from repeated initial window changes in net/http | Unknown | 1 month ago | 28 days ago |
|
stdlib
|
Sensitive headers not cleared on cross-origin redirect in net/http | Unknown | 1 year ago | 1 month ago |
|
stdlib
|
Unexpected paths returned from LookPath in os/exec | Unknown | 1 year ago | 1 month ago |
|
stdlib
|
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 | Unknown | 7 months ago | 1 month ago |
|
stdlib
|
JsBraceDepth Context Tracking Bugs (XSS) in html/template | Unknown | 7 months ago | 1 month ago |
|
stdlib
|
Quadratic string concatenation in consumePhrase in net/mail | Unknown | 6 months ago | 1 month ago |
|
stdlib
|
Unbounded allocation for old GNU sparse in archive/tar | Unknown | 7 months ago | 1 month ago |
|
stdlib
|
Quadratic string concatentation in consumeComment in net/mail | Unknown | 6 months ago | 1 month ago |
|
stdlib
|
Memory exhaustion in query parameter parsing in net/url | Unknown | 9 months ago | 1 month ago |
|
stdlib
|
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls | Unknown | 7 months ago | 1 month ago |
|
stdlib
|
Inefficient policy validation in crypto/x509 | Unknown | 7 months ago | 1 month ago |
|
stdlib
|
Unexpected work during chain building in crypto/x509 | Unknown | 7 months ago | 1 month ago |
|
stdlib
|
Arbitrary inputs are included in errors without any escaping in net/textproto | Unknown | 5 months ago | 1 month ago |
|
stdlib
|
Invoking Encrypted Client Hello privacy leak in crypto/tls | Unknown | 4 months ago | 1 month ago |
|
stdlib
|
Unbounded allocation when parsing GNU sparse map in archive/tar | Unknown | 1 year ago | 1 month ago |
|
stdlib
|
Inefficient candidate hostname parsing in crypto/x509 | Unknown | 5 months ago | 1 month ago |
|
stdlib
|
Unexpected session resumption in crypto/tls | Unknown | 9 months ago | 1 month ago |
|
stdlib
|
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix | Unknown | 7 months ago | 1 month ago |
|
stdlib
|
HTTP/2 rapid reset can cause excessive work in net/http | Unknown | 3 years ago | 1 month ago |
|
stdlib
|
Root escape via symlink plus trailing slash in os | Unknown | 4 months ago | 1 month ago |
org.jetbrains.kotlin:kotlin-stdlib
|
Incorrect Default Permissions in JetBrains Kotlin | Medium Risk 5.3 | 4 years ago | 2 months ago |
|
org.jetbrains.kotlin:kotlin-stdlib
|
Improper Locking in JetBrains Kotlin | Medium Risk 5.3 | 4 years ago | 2 months ago |
|
stdlib
|
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil | Unknown | 6 months ago | 2 months ago |
Page 1