Go/stdlib CVE-2019-9512, CVE-2019-9514: unknown, EPSS 83.43%
Reset flood in net/http and golang.org/x/net/http
Action: Upgrade stdlib to 1.11.13 or later.
Upgrade Go to 1.11.13.
Upgrade Go to 1.12.8.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.13 | - |
| 1.12.0-0 | 1.12.8 | - |
Fixed versions
| 1.11.13 | 1.12.8 |
Sources
- osv: GO-2022-0536
- https://go.dev/cl/190137
- https://go.googlesource.com/go/+/145e193131eb486077b66009beb051aba07c52a5
- https://go.dev/issue/33606
- https://groups.google.com/g/golang-announce/c/65QixT3tcmg/m/DrFiG6vvCwAJ
CVE-2019-9512, CVE-2019-9514 · published · modified · JSON