Debian/golang-github-pires-go-proxyproto: medium 4.9
The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the parseVersion1() function. The reader in this package is a default bufio.Reader wrapping a net.
Action: Upgrade golang-github-pires-go-proxyproto to 0.4.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.2-1 | - |
Fixed versions
| 0.4.2-1 |
Sources
published · modified · JSON