Vulnerabilities > Golang > GO > 1.20.1

DATE CVE VULNERABILITY TITLE RISK
2023-04-06 CVE-2023-24534 Resource Exhaustion vulnerability in Golang GO
HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service.
network
low complexity
golang CWE-400
7.5
2023-04-06 CVE-2023-24536 Allocation of Resources Without Limits or Throttling vulnerability in Golang GO
Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts.
network
low complexity
golang CWE-770
7.5
2023-03-08 CVE-2023-24532 Incorrect Calculation vulnerability in Golang GO
The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve).
network
low complexity
golang CWE-682
5.3