| Bug | Description |
|---|
| CVE-2022-32190 | JoinPath and URL.JoinPath do not remove ../ path elements appended to ... |
| CVE-2022-32189 | A too-short encoded message can cause a panic in Float.GobDecode and R ... |
| CVE-2022-32148 | Improper exposure of client IP addresses in net/http before Go 1.17.12 ... |
| CVE-2022-30635 | Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.1 ... |
| CVE-2022-30634 | Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 o ... |
| CVE-2022-30633 | Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 ... |
| CVE-2022-30632 | Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and ... |
| CVE-2022-30631 | Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17. ... |
| CVE-2022-30630 | Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18. ... |
| CVE-2022-30629 | Non-random values for ticket_age_add in session tickets in crypto/tls ... |
| CVE-2022-30580 | Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 ... |
| CVE-2022-29804 | In filepath.Clean in path/filepath in Go before 1.17.11 and 1.18.x bef ... |
| CVE-2022-29526 | Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Ass ... |
| CVE-2022-28327 | The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1 ... |
| CVE-2022-27536 | Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be ca ... |
| CVE-2022-24921 | regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows st ... |
| CVE-2022-24675 | encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode ... |
| CVE-2022-23806 | Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x bef ... |
| CVE-2022-23773 | cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret ... |
| CVE-2022-23772 | Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17. ... |
| CVE-2022-1962 | Uncontrolled recursion in the Parse functions in go/parser before Go 1 ... |
| CVE-2022-1705 | Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 cli ... |
| CVE-2021-44717 | Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operat ... |
| CVE-2021-44716 | net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontro ... |
| CVE-2021-41772 | Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reade ... |
| CVE-2021-41771 | ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16 ... |
| CVE-2021-39293 | In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted ... |
| CVE-2021-38297 | Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via la ... |