Количество 19
Количество 19
CVE-2025-58186
Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.
CVE-2025-58186
Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.
CVE-2025-58186
Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.
CVE-2025-58186
Lack of limit when parsing cookies can cause memory exhaustion in net/http
CVE-2025-58186
Despite HTTP headers having a default limit of 1MB, the number of cook ...
GHSA-rjcg-56ph-3qvg
Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.
BDU:2025-14529
Уязвимость компонента net/http языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260713-73-0005
Уязвимость mimir
SUSE-SU-2025:3682-1
Security update for go1.24
SUSE-SU-2025:03547-1
Security update for go1.25
openSUSE-SU-2025:20158-1
Security update for go1.24
openSUSE-SU-2025:20157-1
Security update for go1.25
openSUSE-SU-2026:20301-1
Security update for go1.25-openssl
SUSE-SU-2026:0308-1
Security update for go1.24-openssl
SUSE-SU-2026:0296-1
Security update for go1.24-openssl
openSUSE-SU-2026:20308-1
Security update for go1.24-openssl
ROS-20251029-07
Множественные уязвимости golang
SUSE-SU-2026:0298-1
Security update for go1.25-openssl
SUSE-SU-2026:0297-1
Security update for go1.25-openssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-58186 Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption. | CVSS3: 5.3 | 1% Низкий | 9 месяцев назад |
 | CVE-2025-58186 Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption. | CVSS3: 5.3 | 1% Низкий | 9 месяцев назад |
 | CVE-2025-58186 Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption. | CVSS3: 5.3 | 1% Низкий | 9 месяцев назад |
 | CVE-2025-58186 Lack of limit when parsing cookies can cause memory exhaustion in net/http | 1% Низкий | 8 месяцев назад | |
| CVE-2025-58186 Despite HTTP headers having a default limit of 1MB, the number of cook ... | CVSS3: 5.3 | 1% Низкий | 9 месяцев назад |
| GHSA-rjcg-56ph-3qvg Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption. | CVSS3: 5.3 | 1% Низкий | 9 месяцев назад |
 | BDU:2025-14529 Уязвимость компонента net/http языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.3 | 1% Низкий | 9 месяцев назад |
 | ROS-20260713-73-0005 Уязвимость mimir | CVSS3: 5.3 | 1% Низкий | 18 дней назад |
 | SUSE-SU-2025:3682-1 Security update for go1.24 | 9 месяцев назад | ||
| SUSE-SU-2025:03547-1 Security update for go1.25 | 10 месяцев назад | ||
| openSUSE-SU-2025:20158-1 Security update for go1.24 | 8 месяцев назад | ||
| openSUSE-SU-2025:20157-1 Security update for go1.25 | 8 месяцев назад | ||
| openSUSE-SU-2026:20301-1 Security update for go1.25-openssl | 5 месяцев назад | ||
| SUSE-SU-2026:0308-1 Security update for go1.24-openssl | 6 месяцев назад | ||
| SUSE-SU-2026:0296-1 Security update for go1.24-openssl | 6 месяцев назад | ||
| openSUSE-SU-2026:20308-1 Security update for go1.24-openssl | 5 месяцев назад | ||
| ROS-20251029-07 Множественные уязвимости golang | CVSS3: 8.2 | 9 месяцев назад | |
| SUSE-SU-2026:0298-1 Security update for go1.25-openssl | 6 месяцев назад | ||
| SUSE-SU-2026:0297-1 Security update for go1.25-openssl | 6 месяцев назад |
Уязвимостей на страницу