Go Security Vulnerabilities and Issues — Go CVE List

Lucene search

GolangGo

2 matches found

CVE•added 2021/05/27 1:15 p.m.•633 views

CVE-2021-31525

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

5.9CVSS5.9AI score0.0001EPSS

CVE•added 2021/05/26 3:15 p.m.•489 views

CVE-2021-33194

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

7.5CVSS7.1AI score0.00036EPSS