Memory exhaustion in multipart form parsing in net/textproto and net/http

Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

HTTP request body disclosure in github.com/go-resty/resty/v2

Command 'go get' may unexpectedly fallback to insecure git in cmd/go

Incorrect detection of reserved device names on Windows in path/filepath

Insecure parsing of Windows paths with a \??\ prefix in path/filepath

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

Out-of-Bounds Read in EDK II Network Package

Out-of-Bounds Read in EDK II Network Package

Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

Undici's cookie header not cleared on cross-origin redirect in fetch