Search CVE reports


Toggle filters

81 – 82 of 82 results


CVE-2023-45290

Medium priority

Some fixes available 7 of 24

When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to...

14 affected packages

golang-1.13, golang, golang-1.10, golang-1.14, golang-1.16...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-1.13 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang Not in release Not in release Not in release Not in release —
golang-1.10 Not in release Not in release Not in release Not in release Needs evaluation
golang-1.14 Not in release Not in release Not in release Needs evaluation —
golang-1.16 Not in release Not in release Not in release Needs evaluation Needs evaluation
golang-1.17 Not in release Not in release Fixed Not in release —
golang-1.18 Not in release Not in release Fixed Fixed Fixed
golang-1.19 Not in release Not in release Not in release Not in release —
golang-1.20 Not in release Not in release Needs evaluation Needs evaluation —
golang-1.21 Not in release Not affected Fixed Fixed —
golang-1.22 Not in release Not affected Not affected Not affected —
golang-1.6 Not in release Not in release Not in release Not in release —
golang-1.8 Not in release Not in release Not in release Not in release Needs evaluation
golang-1.9 Not in release Not in release Not in release Not in release Needs evaluation
Show all 14 packages Show less packages

CVE-2023-45289

Medium priority

Some fixes available 2 of 24

When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from...

14 affected packages

golang-1.13, golang-1.18, golang, golang-1.10, golang-1.14...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-1.13 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang-1.18 Not in release Not in release Needs evaluation Needs evaluation Needs evaluation
golang Not in release Not in release Not in release Not in release —
golang-1.10 Not in release Not in release Not in release Not in release Needs evaluation
golang-1.14 Not in release Not in release Not in release Needs evaluation —
golang-1.16 Not in release Not in release Not in release Needs evaluation Needs evaluation
golang-1.17 Not in release Not in release Needs evaluation Not in release —
golang-1.19 Not in release Not in release Not in release Not in release —
golang-1.20 Not in release Not in release Needs evaluation Needs evaluation —
golang-1.21 Not in release Not affected Fixed Fixed —
golang-1.22 Not in release Not affected Not affected Not affected —
golang-1.6 Not in release Not in release Not in release Not in release —
golang-1.8 Not in release Not in release Not in release Not in release Needs evaluation
golang-1.9 Not in release Not in release Not in release Not in release Needs evaluation
Show all 14 packages Show less packages