terraform-provider-time

43 results · Feed

• Medium 6.5
  CVE-2025-22872

  Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse func…

  golang.org/x/net golang.org/x/net/html zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  Apr 16, 2025
• Critical 9.1
  CVE-2025-22871

  Request smuggling due to acceptance of invalid chunked data in net/http

  The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

  Go standard library net/http/internal katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Packagist Go
  Apr 8, 2025
• Medium 4.4
  CVE-2025-22870 Public exploit

  HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be prox…

  Go standard library golang.org/x/net net/http golang.org/x/net/proxy Debian Ubuntu Azure Linux Alpine Wolfi Go
  Mar 12, 2025