tocsin

Alpine/go: medium 5.3

Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP s

Action: Upgrade go to 1.25.2-r0 or later.

Affected

introducedfixedlast affected
01.25.2-r0-

Fixed versions

1.25.2-r0

Sources

published · modified · JSON