Alpine/go: medium 6.5
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses t
Action: Upgrade go to 1.20.6-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.20.0 | 1.20.6-r0 | - |
Fixed versions
| 1.20.6-r0 |
Sources
published · modified · JSON