GO-2022-0236 PUBLISHED CVSS 8.699999809265137 HIGH

Panic due to large headers in net/http and golang.org/x/net/http/httpguts

Risk Scores

CVSS v4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Gostdlib0, 1.16.0-0, 0
golang.orgx/net0, 0

Timeline

References

Open in Interactive Console →