Alpine/go: critical 9.8
net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appeari
Action: Upgrade go to 1.12.8-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.12.0 | 1.12.8-r0 | - |
Fixed versions
| 1.12.8-r0 |
Sources
published · modified · JSON