Lucene search
+L

5 matches found

Mageia
Mageia
added 2022/10/05 5:23 a.m.51 views

Updated golang packages fix security vulnerability

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error. CVE-2022-27664 JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path...

7.5CVSS7.7AI score0.02607EPSS
SaveExploits0References4
Rows per page
Query Builder