2 matches found
CVE-2019-12158
GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension.
CVE-2019-12160
GoHTTP through 2017-07-25 has a sendHeader use-after-free.