GO Standard Library vulnerabilities
136 CVEs and advisories name GO Standard Library as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-24783Verify panics on certificates with an unknown public key algorithm in crypto/x509
- CVE-2023-39326Denial of service via chunk extensions in net/http
- CVE-2023-45287Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
- CVE-2023-45284Incorrect detection of reserved device names on Windows in path/filepath
- CVE-2023-45283Insecure parsing of Windows paths with a \??\ prefix in path/filepath
- CVE-2023-39325HTTP/2 rapid reset can cause excessive work in net/http
- CVE-2023-39322Memory exhaustion in QUIC connection handling in crypto/tls
- CVE-2023-39321Panic when processing post-handshake message on QUIC connections in crypto/tls
- CVE-2023-39319Improper handling of special tags within script contexts in html/template
- CVE-2023-39318Improper handling of HTML-like comments in script contexts in html/template
- CVE-2023-29409Large RSA keys can cause high CPU usage in crypto/tls
- CVE-2023-29406Insufficient sanitization of Host header in net/http
- CVE-2023-29403Unsafe behavior in setuid/setgid binaries in runtime
- CVE-2023-24539Improper sanitization of CSS values in html/template
- CVE-2023-24540Improper handling of JavaScript whitespace in html/template
- CVE-2023-29400Improper handling of empty HTML attributes in html/template
- CVE-2023-24537Infinite loop in parsing in go/scanner
- CVE-2023-24538Backticks not treated as string delimiters in html/template
- CVE-2023-24534Excessive memory allocation in net/http and net/textproto
- CVE-2023-24536Excessive resource consumption in net/http, net/textproto and mime/multipart
- CVE-2023-24532Incorrect calculation on P256 curves in crypto/internal/nistec
- CVE-2022-41723Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
- CVE-2022-41724Panic on large handshake records in crypto/tls
- CVE-2022-41725Excessive resource consumption in mime/multipart
- CVE-2022-41722Path traversal on Windows in path/filepath
- CVE-2022-41717Excessive memory growth in net/http and golang.org/x/net/http2
- CVE-2022-41720Restricted file access on Windows in os and net/http
- CVE-2022-41716Unsanitized NUL in environment variables on Windows in syscall and os/exec
- CVE-2022-41715Memory exhaustion when compiling regular expressions in regexp/syntax
- CVE-2022-2880Incorrect sanitization of forwarded query parameters in net/http/httputil