Package · Wolfi

timoni

82 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

82 results · Feed

High 7.5

CVE-2023-39325 Public exploit

HTTP/2 rapid reset can cause excessive work in net/http

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress requ…

Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 11, 2023
Medium 6.1

CVE-2023-3978

Improper rendering of text nodes in golang.org/x/net/html

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.

golang.org/x/net golang.org/x/net/html zot kots Debian Ubuntu Azure Linux Wolfi Go

Aug 2, 2023