CVE-2019-16276
1 advisory.
Go/stdlib CVE-2019-16276: unknown, EPSS 5.30%
Request smuggling due to accepting invalid headers in net/http via net/textproto
Action: Upgrade stdlib to 1.12.10 or later.
Upgrade Go to 1.12.10.
Upgrade Go to 1.13.1.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.10 | - |
| 1.13.0-0 | 1.13.1 | - |
Fixed versions
| 1.12.10 | 1.13.1 |
Sources
- osv: GO-2022-0212
- https://go.dev/cl/197503
- https://go.googlesource.com/go/+/41b1f88efab9d263408448bf139659119002ea50
- https://go.dev/issue/34540
- https://groups.google.com/g/golang-announce/c/cszieYyuL9Q/m/g4Z7pKaqAgAJ
CVE-2019-16276 · published · modified · JSON