Excessive CPU consumption when building archive index in archive/zip

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the…

The HTTP/1 client does not fully validate the contents of the Host header

Exposure of client IP addresses in net/http

Improper sanitization of Transfer-Encoding headers in net/http

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key…

In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete…

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

Bypass of meta content URL escaping causes XSS in html/template

Escaper bypass leads to XSS in html/template

JsBraceDepth Context Tracking Bugs (XSS) in html/template

URLs in meta content attribute actions are not escaped in html/template

The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts

The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in <script> contexts

Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header

An issue was discovered in net/http in Go 1.11.5

Invoking "go tool pack" does not sanitize output paths in cmd/go

Panic in name constraint checking for malformed certificates in crypto/x509

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and…

An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1

A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated…

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to…

The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft…

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker…

Unbounded allocation for old GNU sparse in archive/tar

os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations

Stack exhaustion due to deeply nested types in go/parser

archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the Reader.Open API for a ZIP archive in which ../ occurs at the…

Invoking Encrypted Client Hello privacy leak in crypto/tls

Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go

ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

Handshake messages may be processed at the incorrect encryption level in crypto/tls

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped

Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body

On Windows, The IsLocal function does not correctly detect reserved device names in some cases

Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the…

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary…

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements (if VerifyOptions.Roots equals nil and the…

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file…