Reflected cross-site scripting (XSS) In golang-1.19
Description
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel10.2 | 2:1.43.1-5.el10_2 | ||
rpm rhel10.0 | 0:1.26.7-1.el10_0 | ||
rpm rhel9.6 | 0:10.2.6-23.el9_6 | ||
rpm rhel9.6 | 0:1.26.1-1.el9_6.1 | ||
rpm rhel9.6 | 0:1.26.7-1.el9_6 | ||
rpm rhel10.0 | 0:10.2.6-26.el10_0 | ||
rpm rhel7 | - | - | |
rpm rhel9.6 | 0:2.21.0-7.el9_6.1 | ||
rpm rhel9.6 | 0:132.2-12.el9_6 | ||
rpm rhel10.0 | 0:1.26.1-2.el10_0 |
1-10 of 57
10
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3.