Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
stdlib
|
HTTP/2 rapid reset can cause excessive work in net/http | Unknown | 2 years ago | 1 hour ago |
|
stdlib
|
Unexpected session resumption in crypto/tls | Unknown | 7 months ago | 1 hour ago |
|
stdlib
|
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix | Unknown | 5 months ago | 1 hour ago |
|
stdlib
|
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls | Unknown | 5 months ago | 1 hour ago |
|
stdlib
|
Inefficient policy validation in crypto/x509 | Unknown | 5 months ago | 1 hour ago |
|
stdlib
|
Unexpected work during chain building in crypto/x509 | Unknown | 5 months ago | 1 hour ago |
|
stdlib
|
Crash when handling long CNAME response in net | Unknown | 4 months ago | 1 hour ago |
|
stdlib
|
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | Unknown | 4 months ago | 1 hour ago |
|
stdlib
|
Quadratic complexity in WordDecoder.DecodeHeader in mime | Unknown | 3 months ago | 1 hour ago |
|
stdlib
|
Enforce maximum recursion depth in encoding/asn1 | Unknown | 1 month ago | 1 hour ago |
|
stdlib
|
Add recursion depth guard during decode in encoding/xml | Unknown | 1 month ago | 1 hour ago |
|
stdlib
|
Limit handshake messages we are willing to accept post-handshake in crypto/tls | Unknown | 1 month ago | 1 hour ago |
|
stdlib
|
Avoid quadratic complexity in resolvePath in net/url | Unknown | 1 month ago | 1 hour ago |
|
stdlib
|
Fix Javascript regexp context tracking in html/template | Unknown | 1 month ago | 3 days ago |
|
stdlib
|
Quadratic string concatenation in consumePhrase in net/mail | Unknown | 4 months ago | 4 days ago |
|
stdlib
|
Quadratic string concatentation in consumeComment in net/mail | Unknown | 4 months ago | 4 days ago |
|
stdlib
|
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http | Unknown | 1 month ago | 4 days ago |
|
stdlib
|
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 | Unknown | 5 months ago | 5 days ago |
|
stdlib
|
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | Unknown | 1 year ago | 6 days ago |
|
stdlib
|
Incorrect parsing of IPv6 host literals in net/url | Unknown | 6 months ago | 10 days ago |
|
stdlib
|
Inefficient candidate hostname parsing in crypto/x509 | Unknown | 3 months ago | 11 days ago |
|
stdlib
|
Incorrect enforcement of email constraints in crypto/x509 | Unknown | 6 months ago | 12 days ago |
|
stdlib
|
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net | Unknown | 4 months ago | 12 days ago |
|
stdlib
|
Root escape via symlink plus trailing slash in os | Unknown | 2 months ago | 12 days ago |
|
stdlib
|
Memory exhaustion in query parameter parsing in net/url | Unknown | 8 months ago | 17 days ago |
org.jetbrains.kotlin:kotlin-stdlib
|
Incorrect Default Permissions in JetBrains Kotlin | Medium Risk 5.3 | 4 years ago | 18 days ago |
|
org.jetbrains.kotlin:kotlin-stdlib
|
Improper Locking in JetBrains Kotlin | Medium Risk 5.3 | 4 years ago | 18 days ago |
|
stdlib
|
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil | Unknown | 4 months ago | 28 days ago |
|
stdlib
|
Escaper bypass leads to XSS in html/template | Unknown | 4 months ago | 28 days ago |
|
stdlib
|
Bypass of meta content URL escaping causes XSS in html/template | Unknown | 4 months ago | 28 days ago |
|
stdlib
|
Arbitrary inputs are included in errors without any escaping in net/textproto | Unknown | 3 months ago | 28 days ago |
|
stdlib
|
Usage of ExtKeyUsageAny disables policy validation in crypto/x509 | Unknown | 1 year ago | 1 month ago |
|
stdlib
|
Panic in Dial and LookupPort when handling NUL byte on Windows in net | Unknown | 4 months ago | 1 month ago |
|
stdlib
|
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage | Unknown | 2 months ago | 1 month ago |
|
stdlib
|
Excessive resource consumption when printing error string for host certificate validation in crypto/x509 | Unknown | 9 months ago | 1 month ago |
|
stdlib
|
Panic when validating certificates with DSA public keys in crypto/x509 | Unknown | 11 months ago | 1 month ago |
|
stdlib
|
Excessive CPU consumption when building archive index in archive/zip | Unknown | 8 months ago | 1 month ago |
|
stdlib
|
Handshake messages may be processed at the incorrect encryption level in crypto/tls | Unknown | 8 months ago | 1 month ago |
|
stdlib
|
Stack exhaustion in Parse in go/build/constraint | Unknown | 2 years ago | 1 month ago |
|
stdlib
|
Unbounded allocation when parsing GNU sparse map in archive/tar | Unknown | 11 months ago | 1 month ago |
|
stdlib
|
Invoking Encrypted Client Hello privacy leak in crypto/tls | Unknown | 2 months ago | 1 month ago |
|
stdlib
|
Unexpected paths returned from LookPath in os/exec | Unknown | 1 year ago | 2 months ago |
|
stdlib
|
Incorrect sanitization of forwarded query parameters in net/http/httputil | Unknown | 3 years ago | 2 months ago |
|
stdlib
|
Memory exhaustion when compiling regular expressions in regexp/syntax | Unknown | 3 years ago | 2 months ago |
|
stdlib
|
Failure to strip relative path components in net/url | Unknown | 4 years ago | 2 months ago |
|
stdlib
|
Unbounded memory consumption when reading headers in archive/tar | Unknown | 3 years ago | 2 months ago |
|
stdlib
|
JsBraceDepth Context Tracking Bugs (XSS) in html/template | Unknown | 5 months ago | 2 months ago |
|
stdlib
|
Incorrect results returned from Rows.Scan in database/sql | Unknown | 1 year ago | 4 months ago |
|
stdlib
|
Quadratic complexity when checking name constraints in crypto/x509 | Unknown | 11 months ago | 4 months ago |
|
stdlib
|
Quadratic complexity when parsing some invalid inputs in encoding/pem | Unknown | 11 months ago | 4 months ago |
Page 1