Alpine/go: medium 5.3
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can
Action: Upgrade go to 1.21.5-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.21.0-0 | 1.21.5-r0 | - |
Fixed versions
| 1.21.5-r0 |
Sources
published · modified · JSON