go-zero icon indicating copy to clipboard operation
go-zero copied to clipboard

Published 20 hours ago • verified publisher icon zeromicro

CVE-2023-24534: net/http, net/textproto: denial of service from excessive memory allocation

Open KevinSolmssen opened this issue 1 year ago • 1 comments

There is a denial of service vulnerability in go 1.18 disclosed under CVE-2023-24534. This vulnerability has been patched in version 1.19 and 1.20 but not in 1.18, discussed here.

KevinSolmssen avatar May 15 '23 15:05 KevinSolmssen