http

Aug 13, 2024

Changes in this version

type Cookie

+ Partitioned bool

+ Quoted bool

+ func ParseCookie(line string) ([]*Cookie, error)

+ func ParseSetCookie(line string) (*Cookie, error)

type Request

+ Pattern string

+ func (r *Request) CookiesNamed(name string) []*Cookie

Jun 4, 2024 GO-2024-2963

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 7, 2024 GO-2024-2963

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 3, 2024 GO-2024-2963

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 5, 2024 GO-2024-2687 +1 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 6, 2024 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ func ServeFileFS(w ResponseWriter, r *Request, fsys fs.FS, name string)

type Handler

+ func FileServerFS(root fs.FS) Handler

type Request

+ func (r *Request) PathValue(name string) string

+ func (r *Request) SetPathValue(name, value string)

type RoundTripper

+ func NewFileTransportFS(fsys fs.FS) RoundTripper

Jan 24, 2024 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 19, 2023 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 4, 2024 GO-2024-2963

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 7, 2024 GO-2024-2963

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 3, 2024 GO-2024-2963

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 5, 2024 GO-2024-2687 +1 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 6, 2024 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 9, 2024 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 5, 2023 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 7, 2023 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 10, 2023 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 5, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 6, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 8, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ var ErrSchemeMismatch = errors.New("http: server gave HTTP response to HTTPS client")

type ProtocolError

+ func (pe *ProtocolError) Is(err error) bool

type ResponseController

+ func (c *ResponseController) EnableFullDuplex() error

Aug 2, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 14, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 21, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 16, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 6, 2024 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 9, 2024 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 5, 2023 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 7, 2023 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 10, 2023 GO-2024-2600 +2 more

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 5, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 6, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 1, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 11, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 6, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 2, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 4, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 7, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 14, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 1, 2023 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ type ResponseController struct

+ func NewResponseController(rw ResponseWriter) *ResponseController

+ func (c *ResponseController) Flush() error

+ func (c *ResponseController) Hijack() (net.Conn, *bufio.ReadWriter, error)

+ func (c *ResponseController) SetReadDeadline(deadline time.Time) error

+ func (c *ResponseController) SetWriteDeadline(deadline time.Time) error

type Server

+ DisableGeneralOptionsHandler bool

type Transport

+ OnProxyConnectResponse func(ctx context.Context, proxyURL *url.URL, connectReq *Request, ...) error

Jan 12, 2023 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 4, 2023 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 7, 2022 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 6, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 1, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 11, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 6, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 2, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 4, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 7, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 14, 2023 GO-2023-1878 +4 more

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 10, 2023 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 6, 2022 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 1, 2022 GO-2022-1143 +7 more

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 4, 2022 GO-2022-1143 +7 more

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 6, 2022 GO-2022-1143 +7 more

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 2, 2022 GO-2022-0969 +8 more

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ type MaxBytesError struct

+ Limit int64

+ func (e *MaxBytesError) Error() string

Jul 12, 2022 GO-2022-0969 +8 more

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 6, 2022 GO-2022-0969 +8 more

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 9, 2022 GO-2022-0969 +8 more

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 10, 2023 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 6, 2022 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 1, 2022 GO-2022-1143 +7 more

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 4, 2022 GO-2022-1143 +7 more

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 6, 2022 GO-2022-1143 +7 more

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 1, 2022 GO-2022-0969 +8 more

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 12, 2022 GO-2022-0969 +8 more

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 1, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 10, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 12, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 15, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

type Cookie

+ func (c *Cookie) Valid() error

type Handler

+ func MaxBytesHandler(h Handler, n int64) Handler

Feb 16, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 31, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 14, 2021 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 1, 2022 GO-2022-0969 +8 more

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 12, 2022 GO-2022-0969 +8 more

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 1, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 10, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 12, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 3, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 9, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 6, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 9, 2021 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 2, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 4, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 7, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 9, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 16, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

type Handler

+ func AllowQuerySemicolons(h Handler) Handler

Aug 2, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 13, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 10, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 3, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 9, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 6, 2022 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 9, 2021 GO-2022-0520 +10 more

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 2, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 4, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 7, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 9, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 4, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 12, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 3, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 6, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 1, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 11, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 10, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 16, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

type FileSystem

+ func FS(fsys fs.FS) FileSystem

type Transport

+ GetProxyConnectHeader func(ctx context.Context, proxyURL *url.URL, target string) (Header, error)

Jan 27, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 17, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 4, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 12, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 3, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 6, 2021 GO-2022-0288 +11 more

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 1, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 11, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 10, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 4, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 19, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 3, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 12, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 5, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 14, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 9, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 1, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 11, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 7, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 24, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 10, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 4, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 19, 2021 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 3, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 12, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 5, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 14, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 9, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 1, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 6, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 16, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 14, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 1, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 14, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 8, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 19, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 25, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

type Header

+ func (h Header) Values(key string) []string

type Transport

+ DialTLSContext func(ctx context.Context, network, addr string) (net.Conn, error)

Feb 5, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 17, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 6, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 16, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 14, 2020 GO-2022-0236 +12 more

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 1, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 14, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 8, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 19, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 12, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 27, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 9, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 4, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 31, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 17, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 17, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 25, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 3, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ const StatusEarlyHints

type Header

+ func (h Header) Clone() Header

type Request

+ func NewRequestWithContext(ctx context.Context, method, url string, body io.Reader) (*Request, error)

+ func (r *Request) Clone(ctx context.Context) *Request

type SameSite

+ const SameSiteNoneMode

type Server

+ BaseContext func(net.Listener) context.Context

+ ConnContext func(ctx context.Context, c net.Conn) context.Context

type Transport

+ ForceAttemptHTTP2 bool

+ ReadBufferSize int

+ WriteBufferSize int

+ func (t *Transport) Clone() *Transport

Aug 29, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 21, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 26, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 12, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 27, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 9, 2020 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 4, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 31, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 17, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 17, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 25, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 15, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 13, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 8, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 11, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 6, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 11, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 8, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 5, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 14, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 25, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ const StatusTooEarly

type Client

+ func (c *Client) CloseIdleConnections()

Feb 11, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 10, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 18, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 13, 2019 GO-2021-0224 +13 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 8, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 11, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 6, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 11, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 8, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 5, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 14, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 23, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 14, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 13, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 2, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 1, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 24, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ const StatusMisdirectedRequest

type Cookie

+ SameSite SameSite

+ type SameSite int

+ const SameSiteDefaultMode

+ const SameSiteLaxMode

+ const SameSiteStrictMode

type Transport

+ MaxConnsPerHost int

Aug 22, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 13, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 3, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 19, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 26, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 23, 2019 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 14, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 13, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 2, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 24, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 6, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 30, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 29, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 16, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 7, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 25, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 11, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 7, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 6, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 30, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 29, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 7, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 22, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 25, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 4, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 24, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ func ServeTLS(l net.Listener, handler Handler, certFile, keyFile string) error

type Server

+ func (srv *Server) RegisterOnShutdown(f func())

+ func (srv *Server) ServeTLS(l net.Listener, certFile, keyFile string) error

Aug 7, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 24, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 26, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 14, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 7, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 23, 2018 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 25, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 25, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 20, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 4, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 24, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 23, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 7, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 16, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ const TrailerPrefix

+ var ErrAbortHandler = errors.New("net/http: abort Handler")

+ var ErrServerClosed = errors.New("http: Server closed")

+ var NoBody = noBody

+ type PushOptions struct

+ Header Header

+ Method string

+ type Pusher interface

+ Push func(target string, opts *PushOptions) error

type Request

+ GetBody func() (io.ReadCloser, error)

type Server

+ IdleTimeout time.Duration

+ ReadHeaderTimeout time.Duration

+ func (srv *Server) Close() error

+ func (srv *Server) Shutdown(ctx context.Context) error

type Transport

+ ProxyConnectHeader Header

Jan 26, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 19, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 10, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 15, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 1, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 23, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 26, 2017 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 1, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 19, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 17, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 7, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 15, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ const StatusAlreadyReported

+ const StatusFailedDependency

+ const StatusIMUsed

+ const StatusInsufficientStorage

+ const StatusLocked

+ const StatusLoopDetected

+ const StatusMultiStatus

+ const StatusNotExtended

+ const StatusPermanentRedirect

+ const StatusProcessing

+ const StatusUnprocessableEntity

+ const StatusUpgradeRequired

+ const StatusVariantAlsoNegotiates

+ var ErrUseLastResponse = errors.New("net/http: use last response")

+ var LocalAddrContextKey = &contextKey

+ var ServerContextKey = &contextKey

type Request

+ Response *Response

+ func (r *Request) Context() context.Context

+ func (r *Request) WithContext(ctx context.Context) *Request

type Response

+ Uncompressed bool

type Transport

+ DialContext func(ctx context.Context, network, addr string) (net.Conn, error)

+ IdleConnTimeout time.Duration

+ MaxIdleConns int

+ MaxResponseHeaderBytes int64

Aug 8, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 2, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 2, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 21, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 18, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 8, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 16, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 2, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 1, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 18, 2016 GO-2021-0224 +14 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 19, 2016 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 11, 2016 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 17, 2016 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ const MethodConnect

+ const MethodDelete

+ const MethodGet

+ const MethodHead

+ const MethodOptions

+ const MethodPatch

+ const MethodPost

+ const MethodPut

+ const MethodTrace

+ const StatusNetworkAuthenticationRequired

+ const StatusPreconditionRequired

+ const StatusRequestHeaderFieldsTooLarge

+ const StatusTooManyRequests

+ const StatusUnavailableForLegalReasons

+ var ErrSkipAltProtocol = errors.New("net/http: skip alternate protocol")

type Transport

+ ExpectContinueTimeout time.Duration

+ TLSNextProto map[string]func(authority string, c *tls.Conn) RoundTripper

Feb 3, 2016 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 28, 2016 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 13, 2016 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 17, 2015 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 11, 2016 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 13, 2016 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 3, 2015 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 9, 2015 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 19, 2015 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

type Request

+ Cancel <-chan struct{}

Aug 6, 2015 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 29, 2015 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 17, 2015 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jul 7, 2015 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 23, 2015 GO-2021-0224 +15 more

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Feb 18, 2015 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jan 15, 2015 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Dec 11, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

type Request

+ func (r *Request) BasicAuth() (username, password string, ok bool)

type Transport

+ DialTLS func(network, addr string) (net.Conn, error)

Dec 2, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 17, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 30, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 1, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 25, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 13, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 19, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

type Client

+ Timeout time.Duration

+ type ConnState int

+ const StateActive

+ const StateClosed

+ const StateHijacked

+ const StateIdle

+ const StateNew

+ func (c ConnState) String() string

type Response

+ TLS *tls.ConnectionState

type Server

+ ConnState func(net.Conn, ConnState)

+ ErrorLog *log.Logger

+ func (s *Server) SetKeepAlivesEnabled(v bool)

type Transport

+ TLSHandshakeTimeout time.Duration

Jun 13, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 2, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 21, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 22, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 5, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 3, 2014 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 28, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 18, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 13, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Nov 1, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Oct 18, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Aug 13, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 13, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 13, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ func ParseTime(text string) (t time.Time, err error)

+ type CloseNotifier interface

+ CloseNotify func() <-chan bool

type Request

+ PostForm url.Values

+ func (r *Request) PostFormValue(key string) string

type ServeMux

+ func (mux *ServeMux) Handler(r *Request) (h Handler, pattern string)

type Server

+ TLSNextProto map[string]func(*Server, *tls.Conn, Handler)

type Transport

+ ResponseHeaderTimeout time.Duration

+ func (t *Transport) CancelRequest(req *Request)

May 8, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

May 7, 2013 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Sep 21, 2012 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Jun 14, 2012 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Apr 26, 2012 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Mar 28, 2012 GO-2021-0159 +16 more

  GO-2021-0159: Request smuggling due to improper header parsing in net/http

  GO-2021-0224: Data race and crash in net/http

  GO-2022-0236: Panic due to large headers in net/http and golang.org/x/net/http/httpguts

  GO-2022-0288: Unbounded memory growth in net/http and golang.org/x/net/http2

  GO-2022-0520: Exposure of client IP addresses in net/http

  GO-2022-0525: Improper sanitization of Transfer-Encoding headers in net/http

  GO-2022-0536: Reset flood in net/http and golang.org/x/net/http

  GO-2022-0761: Improper input validation in net/http and net/http/cgi

  GO-2022-0969: Denial of service in net/http and golang.org/x/net/http2

  GO-2022-1143: Restricted file access on Windows in os and net/http

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1878: Insufficient sanitization of Host header in net/http

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

Changes in this version

+ const DefaultMaxHeaderBytes

+ const DefaultMaxIdleConnsPerHost

+ const StatusAccepted

+ const StatusBadGateway

+ const StatusBadRequest

+ const StatusConflict

+ const StatusContinue

+ const StatusCreated

+ const StatusExpectationFailed

+ const StatusForbidden

+ const StatusFound

+ const StatusGatewayTimeout

+ const StatusGone

+ const StatusHTTPVersionNotSupported

+ const StatusInternalServerError

+ const StatusLengthRequired

+ const StatusMethodNotAllowed

+ const StatusMovedPermanently

+ const StatusMultipleChoices

+ const StatusNoContent

+ const StatusNonAuthoritativeInfo

+ const StatusNotAcceptable

+ const StatusNotFound

+ const StatusNotImplemented

+ const StatusNotModified

+ const StatusOK

+ const StatusPartialContent

+ const StatusPaymentRequired

+ const StatusPreconditionFailed

+ const StatusProxyAuthRequired

+ const StatusRequestEntityTooLarge

+ const StatusRequestTimeout

+ const StatusRequestURITooLong

+ const StatusRequestedRangeNotSatisfiable

+ const StatusResetContent

+ const StatusSeeOther

+ const StatusServiceUnavailable

+ const StatusSwitchingProtocols

+ const StatusTeapot

+ const StatusTemporaryRedirect

+ const StatusUnauthorized

+ const StatusUnsupportedMediaType

+ const StatusUseProxy

+ const TimeFormat

+ var DefaultClient = &Client

+ var DefaultServeMux = NewServeMux()

+ var ErrBodyNotAllowed = errors.New("http: response status code does not allow body")

+ var ErrBodyReadAfterClose = errors.New("http: invalid Read on closed request Body")

+ var ErrContentLength = errors.New("Conn.Write wrote more than the declared Content-Length")

+ var ErrHandlerTimeout = errors.New("http: Handler timeout")

+ var ErrHeaderTooLong = &ProtocolError

+ var ErrHijacked = errors.New("Conn has been hijacked")

+ var ErrLineTooLong = errors.New("header line too long")

+ var ErrMissingBoundary = &ProtocolError

+ var ErrMissingContentLength = &ProtocolError

+ var ErrMissingFile = errors.New("http: no such file")

+ var ErrNoCookie = errors.New("http: named cookie not present")

+ var ErrNoLocation = errors.New("http: no Location header in response")

+ var ErrNotMultipart = &ProtocolError

+ var ErrNotSupported = &ProtocolError

+ var ErrShortBody = &ProtocolError

+ var ErrUnexpectedTrailer = &ProtocolError

+ var ErrWriteAfterFlush = errors.New("Conn.Write called after Flush")

+ func CanonicalHeaderKey(s string) string

+ func DetectContentType(data []byte) string

+ func Error(w ResponseWriter, error string, code int)

+ func Handle(pattern string, handler Handler)

+ func HandleFunc(pattern string, handler func(ResponseWriter, *Request))

+ func ListenAndServe(addr string, handler Handler) error

+ func ListenAndServeTLS(addr string, certFile string, keyFile string, handler Handler) error

+ func MaxBytesReader(w ResponseWriter, r io.ReadCloser, n int64) io.ReadCloser

+ func NotFound(w ResponseWriter, r *Request)

+ func ParseHTTPVersion(vers string) (major, minor int, ok bool)

+ func ProxyFromEnvironment(req *Request) (*url.URL, error)

+ func ProxyURL(fixedURL *url.URL) func(*Request) (*url.URL, error)

+ func Redirect(w ResponseWriter, r *Request, urlStr string, code int)

+ func Serve(l net.Listener, handler Handler) error

+ func ServeContent(w ResponseWriter, req *Request, name string, modtime time.Time, ...)

+ func ServeFile(w ResponseWriter, r *Request, name string)

+ func SetCookie(w ResponseWriter, cookie *Cookie)

+ func StatusText(code int) string

+ type Client struct

+ CheckRedirect func(req *Request, via []*Request) error

+ Jar CookieJar

+ Transport RoundTripper

+ func (c *Client) Do(req *Request) (resp *Response, err error)

+ func (c *Client) Get(url string) (r *Response, err error)

+ func (c *Client) Head(url string) (r *Response, err error)

+ func (c *Client) Post(url string, bodyType string, body io.Reader) (r *Response, err error)

+ func (c *Client) PostForm(url string, data url.Values) (r *Response, err error)

+ type Cookie struct

+ Domain string

+ Expires time.Time

+ HttpOnly bool

+ MaxAge int

+ Name string

+ Path string

+ Raw string

+ RawExpires string

+ Secure bool

+ Unparsed []string

+ Value string

+ func (c *Cookie) String() string

+ type CookieJar interface

+ Cookies func(u *url.URL) []*Cookie

+ SetCookies func(u *url.URL, cookies []*Cookie)

+ type Dir string

+ func (d Dir) Open(name string) (File, error)

+ type File interface

+ Close func() error

+ Read func([]byte) (int, error)

+ Readdir func(count int) ([]os.FileInfo, error)

+ Seek func(offset int64, whence int) (int64, error)

+ Stat func() (os.FileInfo, error)

+ type FileSystem interface

+ Open func(name string) (File, error)

+ type Flusher interface

+ Flush func()

+ type Handler interface

+ ServeHTTP func(ResponseWriter, *Request)

+ func FileServer(root FileSystem) Handler

+ func NotFoundHandler() Handler

+ func RedirectHandler(url string, code int) Handler

+ func StripPrefix(prefix string, h Handler) Handler

+ func TimeoutHandler(h Handler, dt time.Duration, msg string) Handler

+ type HandlerFunc func(ResponseWriter, *Request)

+ func (f HandlerFunc) ServeHTTP(w ResponseWriter, r *Request)

+ type Header map[string][]string

+ func (h Header) Add(key, value string)

+ func (h Header) Del(key string)

+ func (h Header) Get(key string) string

+ func (h Header) Set(key, value string)

+ func (h Header) Write(w io.Writer) error

+ func (h Header) WriteSubset(w io.Writer, exclude map[string]bool) error

+ type Hijacker interface

+ Hijack func() (net.Conn, *bufio.ReadWriter, error)

+ type ProtocolError struct

+ ErrorString string

+ func (err *ProtocolError) Error() string

+ type Request struct

+ Body io.ReadCloser

+ Close bool

+ ContentLength int64

+ Form url.Values

+ Header Header

+ Host string

+ Method string

+ MultipartForm *multipart.Form

+ Proto string

+ ProtoMajor int

+ ProtoMinor int

+ RemoteAddr string

+ RequestURI string

+ TLS *tls.ConnectionState

+ Trailer Header

+ TransferEncoding []string

+ URL *url.URL

+ func NewRequest(method, urlStr string, body io.Reader) (*Request, error)

+ func ReadRequest(b *bufio.Reader) (req *Request, err error)

+ func (r *Request) AddCookie(c *Cookie)

+ func (r *Request) Cookie(name string) (*Cookie, error)

+ func (r *Request) Cookies() []*Cookie

+ func (r *Request) FormFile(key string) (multipart.File, *multipart.FileHeader, error)

+ func (r *Request) FormValue(key string) string

+ func (r *Request) MultipartReader() (*multipart.Reader, error)

+ func (r *Request) ParseForm() (err error)

+ func (r *Request) ParseMultipartForm(maxMemory int64) error

+ func (r *Request) ProtoAtLeast(major, minor int) bool

+ func (r *Request) Referer() string

+ func (r *Request) SetBasicAuth(username, password string)

+ func (r *Request) UserAgent() string

+ func (r *Request) Write(w io.Writer) error

+ func (r *Request) WriteProxy(w io.Writer) error

+ type Response struct

+ Body io.ReadCloser

+ Close bool

+ ContentLength int64

+ Header Header

+ Proto string

+ ProtoMajor int

+ ProtoMinor int

+ Request *Request

+ Status string

+ StatusCode int

+ Trailer Header

+ TransferEncoding []string

+ func Get(url string) (r *Response, err error)

+ func Head(url string) (r *Response, err error)

+ func Post(url string, bodyType string, body io.Reader) (r *Response, err error)

+ func PostForm(url string, data url.Values) (r *Response, err error)

+ func ReadResponse(r *bufio.Reader, req *Request) (resp *Response, err error)

+ func (r *Response) Cookies() []*Cookie

+ func (r *Response) Location() (*url.URL, error)

+ func (r *Response) ProtoAtLeast(major, minor int) bool

+ func (r *Response) Write(w io.Writer) error

+ type ResponseWriter interface

+ Header func() Header

+ Write func([]byte) (int, error)

+ WriteHeader func(int)

+ type RoundTripper interface

+ RoundTrip func(*Request) (*Response, error)

+ var DefaultTransport RoundTripper = &Transport{ ... }

+ func NewFileTransport(fs FileSystem) RoundTripper

+ type ServeMux struct

+ func NewServeMux() *ServeMux

+ func (mux *ServeMux) Handle(pattern string, handler Handler)

+ func (mux *ServeMux) HandleFunc(pattern string, handler func(ResponseWriter, *Request))

+ func (mux *ServeMux) ServeHTTP(w ResponseWriter, r *Request)

+ type Server struct

+ Addr string

+ Handler Handler

+ MaxHeaderBytes int

+ ReadTimeout time.Duration

+ TLSConfig *tls.Config

+ WriteTimeout time.Duration

+ func (srv *Server) ListenAndServe() error

+ func (srv *Server) ListenAndServeTLS(certFile, keyFile string) error

+ func (srv *Server) Serve(l net.Listener) error

+ type Transport struct

+ Dial func(net, addr string) (c net.Conn, err error)

+ DisableCompression bool

+ DisableKeepAlives bool

+ MaxIdleConnsPerHost int

+ Proxy func(*Request) (*url.URL, error)

+ TLSClientConfig *tls.Config

+ func (t *Transport) CloseIdleConnections()

+ func (t *Transport) RegisterProtocol(scheme string, rt RoundTripper)

+ func (t *Transport) RoundTrip(req *Request) (resp *Response, err error)