Vendor
Go standard library
136 known vulnerabilities.
Products
net/http 27
crypto/x509 15
html/template 14
crypto/tls 13
os 6
path/filepath 6
net/textproto 6
net/http/internal/http2 6
net/url 5
net/mail 4
net 4
net/http/httputil 3
encoding/xml 3
os/exec 3
mime/multipart 3
archive/tar 3
crypto/internal/nistec 2
encoding/gob 2
net/http/internal 2
go/parser 2
syscall 2
archive/zip 2
encoding/asn1 2
regexp/syntax 1
internal/safefilepath 1
internal/syscall/unix 1
net/netip 1
encoding/pem 1
internal/syscall/windows 1
net/http/cookiejar 1
go/build/constraint 1
go/scanner 1
compress/gzip 1
database/sql 1
io/fs 1
runtime 1
crypto/rand 1
mime 1
math/big 1
2 results · Clear filters · Feed
-
High 7.5
HTTP/2 CONTINUATION flood in net/http
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a reques…
-
High 7.5CVE-2023-39325 Public exploit
HTTP/2 rapid reset can cause excessive work in net/http
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress requ…