GO Standard Library vulnerabilities
136 CVEs and advisories name GO Standard Library as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-2879Unbounded memory consumption when reading headers in archive/tar
- CVE-2022-32190Failure to strip relative path components in net/url
- CVE-2022-32148Exposure of client IP addresses in net/http
- CVE-2022-1962Stack exhaustion due to deeply nested types in go/parser
- CVE-2022-30580Empty Cmd.Path can trigger unintended binary in os/exec on Windows
- CVE-2022-32189Panic when decoding Float and Rat types in math/big
- CVE-2022-30629Session tickets lack random ticket_age_add in crypto/tls
- CVE-2022-30630Stack exhaustion in Glob on certain paths in io/fs
- CVE-2022-1705Improper sanitization of Transfer-Encoding headers in net/http
- CVE-2022-30631Stack exhaustion when reading certain archives in compress/gzip
- CVE-2022-30633Stack exhaustion when unmarshaling certain documents in encoding/xml
- CVE-2022-30635Stack exhaustion when decoding certain messages in encoding/gob
- CVE-2022-30632Stack exhaustion on crafted paths in path/filepath
- CVE-2022-29804Path traversal via Clean on Windows in path/filepath
- CVE-2022-28131Stack exhaustion from deeply nested XML documents in encoding/xml
- CVE-2022-30634Indefinite hang with large buffers on Windows in crypto/rand