1 matches found
AZL-10529 CVE-2022-1705 affecting package golang for versions less than 1.18.5-1
Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid...
6.5CVSS6.7AI score0.01367EPSS
SaveExploits1References1
20