Vulnerabilidades en Go standard library
135 resultadosCVE-2024-34156HIGHStack exhaustion in Decoder.Decode in encoding/gobEPSS 1.1%CVE-2022-41724—Panic on large handshake records in crypto/tlsEPSS 1.1%CVE-2023-45284MEDIUMIncorrect detection of reserved device names on Windows in path/filepathEPSS 1.1%CVE-2023-45289MEDIUMIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/httpEPSS 1.1%CVE-2024-24784HIGHComments in display names are incorrectly handled in net/mailEPSS 1.1%CVE-2024-34158HIGHStack exhaustion in Parse in go/build/constraintEPSS 1.0%CVE-2023-24539HIGHImproper sanitization of CSS values in html/templateEPSS 1.0%CVE-2023-29400HIGHImproper handling of empty HTML attributes in html/templateEPSS 1.0%CVE-2022-41716MEDIUMUnsanitized NUL in environment variables on Windows in syscall and os/execEPSS 1.0%CVE-2024-24788MEDIUMMalformed DNS message can cause infinite loop in netEPSS 1.0%CVE-2023-39318—Improper handling of HTML-like comments in script contexts in html/templateEPSS 0.9%CVE-2022-1962MEDIUMStack exhaustion due to deeply nested types in go/parserEPSS 0.9%CVE-2023-39319—Improper handling of special tags within script contexts in html/templateEPSS 0.9%CVE-2025-68121CRITICALUnexpected session resumption in crypto/tlsEPSS 0.9%CVE-2026-33811HIGHCrash when handling long CNAME response in netEPSS 0.9%CVE-2026-78659HIGHHTTP/2 server memory exhaustion due to Trailer headers in net/httpEPSS 0.9%CVE-2026-78663CRITICALDouble flow control refund on HTTP/2 server streams in net/httpEPSS 0.9%CVE-2026-78669HIGHExcessive CPU consumption from repeated initial window changes in net/httpEPSS 0.8%CVE-2025-22871CRITICALRequest smuggling due to acceptance of invalid chunked data in net/httpEPSS 0.8%CVE-2026-33814HIGHInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netEPSS 0.8%