golang.org/x/net
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Go
- Vulnerability status
- 58 advisory(ies) without a verdict
Advisories (58)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-2wp2-chmh-r934 golang.org/x/net/html NULL Pointer Dereference vulnerability | < 0.0.0-20180925071336-cf3bd585ca2a | Undetermined |
| GHSA-2wrh-6pvc-2jm9 Improper rendering of text nodes in golang.org/x/net/html | < 0.13.0 | Undetermined |
| GHSA-39qc-96h7-956f golang.org/x/net/http vulnerable to a reset flood | < 0.0.0-20190813141303-74dc4d7220e7 | Undetermined |
| GHSA-4374-p667-p6c8 HTTP/2 rapid reset can cause excessive work in net/http | < 0.17.0 | Undetermined |
| GHSA-4r78-hx75-jjj2 golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer | < 0.0.0-20190125002852-4b62a64f59f7 | Undetermined |
| GHSA-4v7x-pqxf-cx7m net/http, x/net/http2: close connections when receiving too many headers | < 0.23.0 | Undetermined |
| GHSA-5cv4-jp36-h3mw Go Net HTML parser is vulnerable to denial of service | < 0.55.0 | Undetermined |
| GHSA-5p4h-3377-7w67 golang.org/x/net/html NULL Pointer Dereference vulnerability | < 0.0.0-20180816102801-aaf60122140d | Undetermined |
| GHSA-69cg-p879-7622 golang.org/x/net/http2 Denial of Service vulnerability | < 0.0.0-20220906165146-f3363e06e74c | Undetermined |
| GHSA-83g2-8m93-v3w7 golang.org/x/net/html Infinite Loop vulnerability | < 0.0.0-20210520170846-37e1c6afe023 | Undetermined |
| GHSA-fcf9-6fv2-fc5v golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer | < 0.0.0-20180921000356-2f5d2388922f | Undetermined |
| GHSA-fxg5-wq6x-vr4w golang.org/x/net/http2/h2c vulnerable to request smuggling attack | 0.0.0-20220524220425-1d687d428aca – < 0.1.1-0.20221104162952-702349b0e862 | Undetermined |
| GHSA-h86h-8ppg-mxmh golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion | < 0.0.0-20210428140749-89ef3d95e781 | Undetermined |
| GHSA-hgr8-6h9x-f7q9 golang.org/x/net/http vulnerable to ping floods | < 0.0.0-20190813141303-74dc4d7220e7 | Undetermined |
| GHSA-mv93-wvcp-7m7r golang.org/x/net/html Improper Validation of Array Index vulnerability | < 0.0.0-20190125002852-4b62a64f59f7 | Undetermined |
| GHSA-qppj-fm5r-hxr3 HTTP/2 Stream Cancellation Attack | < 0.17.0 | Undetermined |
| GHSA-qxp5-gwg8-xv66 HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net | < 0.36.0 | Undetermined |
| GHSA-vfw5-hrgq-h5wf x/net/html Vulnerable to DoS During HTML Parsing | < 0.0.0-20190125091013-d26f9f9a57f3 | Undetermined |
| GHSA-vvgc-356p-c3xw golang.org/x/net vulnerable to Cross-site Scripting | < 0.38.0 | Undetermined |
| GHSA-vvpx-j8f3-3w6h golang.org/x/net vulnerable to Uncontrolled Resource Consumption | < 0.7.0 | Undetermined |
| GHSA-xrjj-mj9h-534m golang.org/x/net/http2 vulnerable to possible excessive memory growth | < 0.4.0 | Undetermined |
| GO-2020-0014 Infinite loop due to improper handling of "select" tags in golang.org/x/net/html | < 0.0.0-20190125091013-d26f9f9a57f3 | Undetermined |
| GO-2021-0078 Panic when parsing malformed HTML in golang.org/x/net/html | < 0.0.0-20180816102801-aaf60122140d | Undetermined |
| GO-2021-0238 Infinite loop when parsing inputs in golang.org/x/net/html | < 0.0.0-20210520170846-37e1c6afe023 | Undetermined |
| GO-2022-0192 Incorrect parsing of nested templates in golang.org/x/net/html | < 0.0.0-20180925071336-cf3bd585ca2a | Undetermined |
| GO-2022-0193 Panic on unconsidered isindex and template combination in golang.org/x/net/html | < 0.0.0-20180921000356-2f5d2388922f | Undetermined |
| GO-2022-0197 Panic when parsing certain inputs in golang.org/x/net/html | < 0.0.0-20190125002852-4b62a64f59f7 | Undetermined |
| GO-2022-0236 Panic due to large headers in net/http and golang.org/x/net/http/httpguts | < 0.0.0-20210428140749-89ef3d95e781 | Undetermined |
| GO-2022-0288 Unbounded memory growth in net/http and golang.org/x/net/http2 | < 0.0.0-20211209124913-491a49abca63 | Undetermined |
| GO-2022-0536 Reset flood in net/http and golang.org/x/net/http | < 0.0.0-20190813141303-74dc4d7220e7 | Undetermined |
| GO-2022-0969 Denial of service in net/http and golang.org/x/net/http2 | < 0.0.0-20220906165146-f3363e06e74c | Undetermined |
| GO-2022-1144 Excessive memory growth in net/http and golang.org/x/net/http2 | < 0.4.0 | Undetermined |
| GO-2023-1495 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c | 0.0.0-20220524220425-1d687d428aca – < 0.1.1-0.20221104162952-702349b0e862 | Undetermined |
| GO-2023-1571 Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net | < 0.7.0 | Undetermined |
| GO-2023-1988 Improper rendering of text nodes in golang.org/x/net/html | < 0.13.0 | Undetermined |
| GO-2023-2102 HTTP/2 rapid reset can cause excessive work in net/http | < 0.17.0 | Undetermined |
| GO-2024-2687 HTTP/2 CONTINUATION flood in net/http | < 0.23.0 | Undetermined |
| GO-2024-3333 Non-linear parsing of case-insensitive content in golang.org/x/net/html | < 0.33.0 | Undetermined |
| GO-2025-3503 HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net | < 0.36.0 | Undetermined |
| GO-2025-3595 Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net | < 0.38.0 | Undetermined |
| GO-2026-4440 Quadratic parsing complexity in golang.org/x/net/html | < 0.45.0 | Undetermined |
| GO-2026-4441 Infinite parsing loop in golang.org/x/net | < 0.45.0 | Undetermined |
| GO-2026-4559 Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net | 0.50.0 – < 0.51.0 | Undetermined |
| GO-2026-4918 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net | < 0.53.0 | Undetermined |
| GO-2026-5025 Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html | < 0.55.0 | Undetermined |
| GO-2026-5026 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | < 0.55.0 | Undetermined |
| GO-2026-5027 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html | < 0.55.0 | Undetermined |
| GO-2026-5028 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html | < 0.55.0 | Undetermined |
| GO-2026-5029 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html | < 0.55.0 | Undetermined |
| GO-2026-5030 Invoking duplicate attributes can cause XSS in golang.org/x/net/html | < 0.55.0 | Undetermined |
| GO-2026-5942 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage | < 0.56.0 | Undetermined |
| GO-2026-6603 HTTP/2 server memory exhaustion due to Trailer headers in net/http | < 0.60.0 | Undetermined |
| GO-2026-6610 HTTP/2 transport accepts malformed framing-related headers in net/http | < 0.60.0 | Undetermined |
| GO-2026-6611 Excessive CPU consumption from repeated initial window changes in net/http | < 0.60.0 | Undetermined |
| GO-2026-6612 Double flow control refund on HTTP/2 server streams in net/http | < 0.60.0 | Undetermined |
| GO-2026-6617 HTTP/2 server crash due to HPACK encoder race in net/http | < 0.60.0 | Undetermined |
| GO-2026-6860 Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net | < 0.62.0 | Undetermined |
| GO-2026-6866 Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net | < 0.62.0 | Undetermined |
Sources
| Source | Licence |
|---|