Skip to content
OpenAdvisories

Package · Ubuntu

golang-github-gorilla-schema

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2024-37298

    Potential memory exhaustion attack due to sparse slice deserialization

    gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the spars…

    gorilla schema zot telegraf Debian Ubuntu Azure Linux Wolfi Go